MSan: Uninitialized Memory in fd_getfile

2 views

Skip to first unread message

syzbot

unread,

Sep 1, 2023, 2:08:44 AM9/1/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 23ee83f7c0ae c.7: mention that C11 and C17 have been publi..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14372898680000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=6f9c60d2aae4350626f0
compiler: Debian clang version 15.0.6

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a2246aa2875c/disk-23ee83f7.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/f5e0702a2a8a/netbsd-23ee83f7.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6f9c60...@syzkaller.appspotmail.com

[ 374.2082235] panic: MSan: Uninitialized Pool Memory From m_get()

[ 374.2190131] cpu0: Begin traceback...
[ 374.2382064] vpanic() at netbsd:vpanic+0xc9d
[ 374.2882076] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[ 374.3482052] __msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
[ 374.3482052] __msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
[ 374.3982085] fd_getfile() at netbsd:fd_getfile+0x594
[ 374.4582086] unp_send() at netbsd:unp_send+0x992 unp_internalize sys/kern/uipc_usrreq.c:1570 [inline]
[ 374.4582086] unp_send() at netbsd:unp_send+0x992 sys/kern/uipc_usrreq.c:477
[ 374.5082056] sosend() at netbsd:sosend+0x426c
[ 374.5682057] do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x1597 sys/kern/uipc_syscalls.c:629
[ 374.6182063] do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x2b7 sys/kern/uipc_syscalls.c:679
[ 374.6782098] compat_43_sys_sendmsg() at netbsd:compat_43_sys_sendmsg+0x5fb sys/compat/common/uipc_syscalls_43.c:385
[ 374.7282059] sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
[ 374.7282059] sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
[ 374.7882069] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 374.7882069] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 374.8086658] --- syscall (number 114 via SYS_syscall) ---
[ 374.8182099] netbsd:syscall+0x60c:
[ 374.8301882] cpu0: End traceback...
[ 374.8301882] fatal breakpoint trap in supervisor mode
[ 374.8391250] trap type 1 code 0 rip 0xffffffff8023686d cs 0x8 rflags 0x286 cr2 0x20002340 ilevel 0x5 rsp 0xffffae80c87ef1c0
[ 374.8499362] curlwp 0xffffae80144e74c0 pid 3206.3214 lowest kstack 0xffffae80c87e82c0
Stopped in pid 3206.3214 (syz-executor.0) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
__msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
__msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
fd_getfile() at netbsd:fd_getfile+0x594
unp_send() at netbsd:unp_send+0x992 unp_internalize sys/kern/uipc_usrreq.c:1570 [inline]
unp_send() at netbsd:unp_send+0x992 sys/kern/uipc_usrreq.c:477
sosend() at netbsd:sosend+0x426c
do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x1597 sys/kern/uipc_syscalls.c:629
do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x2b7 sys/kern/uipc_syscalls.c:679
compat_43_sys_sendmsg() at netbsd:compat_43_sys_sendmsg+0x5fb sys/compat/common/uipc_syscalls_43.c:385
sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 114 via SYS_syscall) ---
netbsd:syscall+0x60c:
Panic string: MSan: Uninitialized Pool Memory From m_get()

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
3173 3056 2 0 100100 ffffae8013fe7a80 syz-executor.4
3173 3220 2 0 100100 ffffae80144e7900 syz-executor.4
3173 3173 3 1 10000000 ffffae8014514980 syz-executor.4 xclow
3215 3061 3 1 180 ffffae80142d8bc0 syz-executor.5 parked
3215 3062 3 1 180 ffffae80144ec940 syz-executor.5 parked
3215 3215 2 0 10040000 ffffae8013f3a600 syz-executor.5
3206 2965 3 0 180 ffffae80144ec500 syz-executor.0 parked
3206 >3214 7 0 100 ffffae80144e74c0 syz-executor.0
3206 3206 2 0 10040000 ffffae8014514100 syz-executor.0
3057 3055 3 0 180 ffffae80139d3bc0 syz-executor.1 parked
3057 11315 2 0 100 ffffae801434f2c0 syz-executor.1
3057 3057 2 0 10040000 ffffae8013dbb140 syz-executor.1
5688 >3225 7 1 0 ffffae80137cd700 syz-executor.2
5688 5688 2 0 10040000 ffffae8013dc3a00 syz-executor.2
10572 10572 4 0 1000100 ffffae80144dd8c0 syz-executor.3
10571 3629 4 1 1000100 ffffae80144e7080 syz-executor.3
10571 11577 4 1 1000180 ffffae80144dd480 syz-executor.3 parked
10571 10571 4 0 11000000 ffffae80144dd040 syz-executor.3
3679 3679 4 1 1000100 ffffae80144ec0c0 syz-executor.3
12252 11077 4 0 1000100 ffffae801436ab80 syz-executor.3
12252 12252 4 1 11000000 ffffae80142d8340 syz-executor.3
2785 2785 4 0 1000100 ffffae80140c3ac0 syz-executor.3
11964 1783 4 1 1000100 ffffae80137c06c0 syz-executor.3
11964 11964 4 0 11000000 ffffae801434f700 syz-executor.3
11216 11216 3 0 180 ffffae801434fb40 syz-executor.0 parked
2693 2693 3 0 180 ffffae80142d8780 syz-executor.1 parked
2441 2441 3 1 180 ffffae801436a740 syz-executor.1 parked
3667 3667 3 1 180 ffffae801436a300 syz-executor.1 parked
2696 2696 3 0 180 ffffae8013f3aa40 syz-executor.1 parked
11584 11584 3 0 180 ffffae80140c3680 syz-executor.0 nanoslp
11081 11081 3 0 180 ffffae8013bcc6c0 syz-executor.3 parked
2443 2443 3 0 180 ffffae8013fe7200 syz-executor.3 parked
2291 2291 3 1 180 ffffae8013c08100 syz-executor.3 parked
10623 10623 3 0 180 ffffae8013bcc280 syz-executor.4 parked
2666 2666 3 1 180 ffffae80140c3240 syz-executor.4 parked
2662 2662 3 1 180 ffffae8013dbb580 syz-executor.4 parked
3118 3118 3 0 180 ffffae801362a600 syz-executor.4 parked
3279 3279 3 1 180 ffffae8013c08980 syz-executor.4 parked
10417 10417 3 0 180 ffffae8013c08540 syz-executor.1 nanoslp
2019 2019 3 0 180 ffffae801371aa80 syz-executor.4 parked
1948 1948 2 0 40 ffffae801357b9c0 syz-executor.3
10181 10181 3 0 180 ffffae8013c044c0 syz-executor.4 parked
1774 1774 3 0 180 ffffae80139dd040 syz-executor.4 parked
2536 2536 3 0 180 ffffae8013743240 syz-executor.4 parked
1427 1427 3 0 180 ffffae8013dc35c0 syz-executor.5 parked
8907 8907 3 0 180 ffffae8013dc3180 syz-executor.5 parked
1268 1268 3 0 180 ffffae8013c060c0 syz-executor.5 parked
1410 1410 3 1 180 ffffae8013f3a1c0 syz-executor.5 parked
1412 1412 3 0 180 ffffae8013dbb9c0 syz-executor.5 parked
761 761 3 0 180 ffffae8013c06940 syz-executor.5 parked
762 762 3 0 180 ffffae80139dd8c0 syz-executor.5 parked
749 749 3 1 180 ffffae8013c06500 syz-executor.5 parked
8784 8784 3 0 180 ffffae80137e9b80 syz-executor.5 nanoslp
1367 1367 3 0 180 ffffae80137cd2c0 syz-executor.5 parked
322 1492 3 0 1100000 ffffae80139d3780 syz-executor.5 vfork
322 322 3 0 11000000 ffffae80139d3340 syz-executor.5 lwpwait
294 294 3 0 180 ffffae80139dd480 syz-executor.1 parked
9249 9249 3 0 180 ffffae80134fa980 syz-executor.1 parked
402 402 3 1 180 ffffae801362aa40 syz-executor.1 parked
9051 9051 3 0 180 ffffae801371a200 syz-executor.5 parked
9813 9195 3 0 1100000 ffffae801371a640 syz-executor.5 vfork
9813 9813 3 0 11000000 ffffae8013743680 syz-executor.5 lwpwait
9564 9564 3 1 180 ffffae80137e9740 syz-executor.3 parked
9138 9138 3 1 180 ffffae80137e9300 syz-executor.3 parked
8241 8241 3 0 180 ffffae8013743ac0 syz-executor.3 parked
8624 8624 3 1 180 ffffae80137c0b00 syz-executor.3 parked
4022 4022 3 0 180 ffffae80137cdb40 syz-executor.3 parked
1198 1198 3 0 180 ffffae80135a5a00 syz-executor.2 nanoslp
1239 1239 3 0 180 ffffae801357b580 syz-executor.4 nanoslp
1233 1834 3 0 180 ffffae80134fa540 syz-fuzzer parked
1233 1132 3 0 180 ffffae801362a1c0 syz-fuzzer kqueue
1233 1199 3 1 1c0 ffffae80135a55c0 syz-fuzzer wait
1233 948 3 1 180 ffffae80135a5180 syz-fuzzer wait
1233 449 3 0 1c0 ffffae801357b140 syz-fuzzer wait
1233 1108 3 0 180 ffffae80134fa100 syz-fuzzer parked
1233 829 3 0 180 ffffae8012c93940 syz-fuzzer wait
1233 941 3 0 180 ffffae8012c93500 syz-fuzzer wait
1233 1241 3 1 180 ffffae8012c930c0 syz-fuzzer parked
1233 1242 3 1 180 ffffae8012ba0900 syz-fuzzer parked
1233 1120 3 1 1c0 ffffae8012ba04c0 syz-fuzzer wait
1233 1224 3 1 180 ffffae8012ba0080 syz-fuzzer parked
1233 1226 3 0 180 ffffae80125fd780 syz-fuzzer parked
1233 1233 3 1 180 ffffae80122ff6c0 syz-fuzzer parked
1235 1235 3 0 180 ffffae801238e2c0 sshd select
1082 1082 3 1 180 ffffae80122ffb00 getty nanoslp
1223 1223 3 1 180 ffffae80122ff280 getty nanoslp
1222 1222 3 1 180 ffffae80121ffac0 getty nanoslp
1193 1193 3 0 1c0 ffffae80121fc200 getty ttyraw
1103 1103 3 0 180 ffffae801251d300 sshd select
1056 1056 3 1 180 ffffae8012b728c0 powerd kqueue
702 702 3 0 180 ffffae8012b72480 syslogd kqueue
746 746 3 0 180 ffffae8012b72040 dhcpcd poll
742 742 3 0 180 ffffae801251d740 dhcpcd poll
466 466 3 0 180 ffffae801238e700 dhcpcd poll
598 598 3 0 180 ffffae80125fdbc0 dhcpcd poll
292 292 3 0 180 ffffae80125fd340 dhcpcd poll
485 485 3 0 180 ffffae801238eb40 dhcpcd poll
291 291 3 0 180 ffffae801251db80 dhcpcd poll
1 1 3 1 180 ffffae8011ede100 init wait
0 3390 3 0 200 ffffae8013fe7640 ktrace ktrwait
0 2808 5 0 200 ffffae8014514540 (zombie)
0 12245 3 1 200 ffffae8013c04900 ktrace ktrwait
0 1320 3 0 200 ffffae80137c0280 ktrace ktrwait
0 872 3 0 200 ffffae80121fc640 physiod physiod
0 196 3 0 200 ffffae80121ff680 pooldrain pooldrain
0 195 3 1 200 ffffae80121ff240 ioflush syncer
0 194 3 1 200 ffffae80121fca80 pgdaemon pgdaemon
0 167 3 1 200 ffffae801216ba40 usb7 usbevt
0 172 3 1 200 ffffae801216b600 usb6 usbevt
0 170 3 0 200 ffffae801216b1c0 usb5 usbevt
0 168 3 0 200 ffffae801213ca00 usb4 usbevt
0 166 3 0 200 ffffae801213c5c0 usb3 usbevt
0 165 3 0 200 ffffae801213c180 usb2 usbdly
0 31 3 1 200 ffffae80120859c0 usb1 usbevt
0 63 3 1 200 ffffae8012085580 usb0 usbevt
0 126 3 1 200 ffffae8012085140 usbtask-dr usbtsk
0 125 3 1 200 ffffae8011ede980 usbtask-hc usbtsk
0 124 3 0 200 ffffae80103f4b00 swwreboot swwreboot
0 123 3 1 200 ffffae8011ede540 npfgc0 npfgcw
0 122 3 1 200 ffffae8011ed1940 rt_free rt_free
0 121 3 1 200 ffffae8011ed1500 unpgc unpgc
0 120 3 0 200 ffffae8011ed10c0 key_timehandler key_timehandler
0 119 3 1 200 ffffae8011ecc900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffae8011ecc4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffae8011ecc080 nd6_timer nd6_timer
0 116 3 1 200 ffffae8011eaa8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffae8011eaa480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffae8011cecb80 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffae8011cec740 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffae8011ceebc0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffae8011cee340 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffae8011eaa040 rt_timer rt_timer
0 109 3 0 200 ffffae8011cee780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffae8011cec300 entbutler entropy
0 99 3 0 200 ffffae80117e0b40 viomb balloon
0 98 3 1 200 ffffae80117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffae80117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffae80103f46c0 scsibus0 sccomp
0 29 3 0 200 ffffae80103f4280 pms0 pmsreset
0 28 3 1 200 ffffae80103d9ac0 xcall/1 xcall
0 27 1 1 200 ffffae80103d9680 softser/1
0 26 1 1 200 ffffae80103d9240 softclk/1
0 25 1 1 200 ffffae80103d7a80 softbio/1
0 24 1 1 200 ffffae80103d7640 softnet/1
0 23 1 1 201 ffffae80103d7200 idle/1
0 22 3 0 200 ffffae800f1e3a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffae800f1e3600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffae800f1e31c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffae800f1e1a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffae800f1e15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffae800f1e1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffae800f1db9c0 sysmon smtaskq
0 15 3 0 200 ffffae800f1db580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffae800f1db140 pmfevent pmfevent
0 13 3 0 200 ffffae800f1d9980 sopendfree sopendfr
0 12 3 0 200 ffffae800f1d9540 ifwdog ifwdog
0 11 3 1 200 ffffae800f1d9100 iflnkst iflnkst
0 10 3 1 200 ffffae800f1cf940 nfssilly nfssilly
0 9 3 0 200 ffffae800f1cf500 vdrain vdrain
0 8 3 1 200 ffffae800f1cf0c0 modunload mod_unld
0 7 2 0 200 ffffae800ebdb900 xcall/0
0 6 1 0 200 ffffae800ebdb4c0 softser/0
0 5 1 0 200 ffffae800ebdb080 softclk/0
0 4 1 0 200 ffffae800ebd98c0 softbio/0
0 3 1 0 200 ffffae800ebd9480 softnet/0
0 2 1 0 201 ffffae800ebd9040 idle/0
0 0 3 0 200 ffffffff8686ea80 swapper uvm
[Locks tracked through LWPs]

****** LWP 3206.2965 (syz-executor.0) @ 0xffffae80144ec500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae80144ec500 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffae801251d740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae801251d740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 466.466 (dhcpcd) @ 0xffffae801238e700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae801238e700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffae801238eb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae801238eb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffae801251db80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae801251db80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffae800f1d9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffae800f1d9100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffae800ebdb080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae800ebdb080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686ea80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8686ea80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0xcb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffae80144e74c0 last held: 0xffffae80144e74c0
last locked* : netbsd:vpanic+0x624
unlocked : netbsd:aprint_error_internal+0x3c8
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffae8000017180 0001 00000000 0x0 0x0
0xffffae8000017200 0041 00000000 0x0 0x0
0xffffae8000017280 0041 00000000 0x0 0x0
0xffffae8000017300 0041 00000000 0x0 0x0
0xffffae8000017380 0041 00000000 0x0 0x0
0xffffae8000017400 0041 00000000 0x0 0x0
0xffffae8000017480 0041 00000000 0x0 0x0
0xffffae8000017500 0041 00000000 0x0 0x0
0xffffae8000017580 0041 00000000 0x0 0x0
0xffffae8000017600 0041 00000000 0x0 0x0
0xffffae8000017680 0041 00000000 0x0 0x0
0xffffae8000017700 0041 00000000 0x0 0x0
0xffffae8000017780 0041 00000000 0x0 0x0
0xffffae8000017800 0041 00000000 0x0 0x0
0xffffae8000017880 0041 00000000 0x0 0x0
0xffffae8000017900 0041 00000000 0x0 0x0
0xffffae8000017980 0041 00000000 0x0 0x0
0xffffae8000017a00 0041 00000000 0x0 0x0
0xffffae8000017a80 0041 00000000 0x0 0x0
0xffffae8000017b00 0041 00000000 0x0 0x0
0xffffae8000017b80 0041 00000000 0x0 0x0
0xffffae8000017c00 0041 00000000 0x0 0x0
0xffffae8000017c80 0041 00000000 0x0 0x0
0xffffae8000017d00 0041 00000000 0x0 0x0
0xffffae8000017d80 0041 00000000 0x0 0x0
0xffffae8000017e00 0041 00000000 0x0 0x0
0xffffae8000017e80 0041 00000000 0x0 0x0
0xffffae8000017f00 0041 00000000 0x0 0x0
0xffffae8000017f80 0041 00000000 0x0 0x0
0xffffae8000018000 0041 00000000 0x0 0x0
0xffffae8000018080 0041 00000000 0x0 0x0
0xffffae8000018100 0041 00000000 0x0 0x0
0xffffae8000018180 0041 00000000 0x0 0x0
0xffffae8000018200 0041 00000000 0x0 0x0
0xffffae8000018280 0041 00000000 0x0 0x0
0xffffae8000018300 0041 00000000 0x0 0x0
0xffffae8000018380 0041 00000000 0x0 0x0
0xffffae8000018400 0041 00000000 0x0 0x0
0xffffae8000018480 0041 00000000 0x0 0x0
0xffffae8000018500 0041 00000000 0x0 0x0
0xffffae8000018580 0041 00000000 0x0 0x0
0xffffae8000018600 0041 00000000 0x0 0x0
0xffffae8000018680 0041 00000000 0x0 0x0
0xffffae8000018700 0041 00000000 0x0 0x0
0xffffae8000018780 0041 00000000 0x0 0x0
0xffffae8000018800 0041 00000000 0x0 0x0
0xffffae8000018880 0041 00000000 0x0 0x0
0xffffae8000018900 0041 00000000 0x0 0x0
0xffffae8000018980 0041 00000000 0x0 0x0
0xffffae8000018a00 0041 00000000 0x0 0x0
0xffffae8000018a80 0041 00000000 0x0 0x0
0xffffae8000018b00 0041 00000000 0x0 0x0
0xffffae8000018b80 0041 00000000 0x0 0x0
0xffffae8000018c00 0041 00000000 0x0 0x0
0xffffae8000018c80 0041 00000000 0x0 0x0
0xffffae8000018d00 0041 00000000 0x0 0x0
0xffffae8000018d80 0041 00000000 0x0 0x0
0xffffae8000018e00 0041 00000000 0x0 0x0
0xffffae8000018e80 0041 00000000 0x0 0x0
0xffffae8000018f00 0041 00000000 0x0 0x0
0xffffae8000018f80 0041 00000000 0x0 0x0
0xffffae8000019000 0041 00000000 0x0 0x0
0xffffae8000019080 0041 00000000 0x0 0x0
0xffffae8000019100 0041 00000000 0x0 0x0
0xffffae8000019180 0041 00000000 0x0 0x0
0xffffae8000019200 0041 00000000 0x0 0x0
0xffffae8000019280 0041 00000000 0x0 0x0
0xffffae8000019300 0041 00000000 0x0 0x0
0xffffae8000019380 0041 00000000 0x0 0x0
0xffffae8000019400 0041 00000000 0x0 0x0
0xffffae8000019480 0041 00000000 0x0 0x0
0xffffae8000019500 0041 00000000 0x0 0x0
0xffffae8000019580 0041 00000000 0x0 0x0
0xffffae8000019600 0041 00000000 0x0 0x0
0xffffae8000019680 0041 00000000 0x0 0x0
0xffffae8000019700 0041 00000000 0x0 0x0
0xffffae8000019780 0041 00000000 0x0 0x0
0xffffae8000019800 0041 00000000 0x0 0x0
0xffffae8000019880 0041 00000000 0x0 0x0
0xffffae8000019900 0041 00000000 0x0 0x0
0xffffae8000019980 0041 00000000 0x0 0x0
0xffffae8000019a00 0041 00000000 0x0 0x0
0xffffae8000019a80 0041 00000000 0x0 0x0
0xffffae8000019b00 0041 00000000 0x0 0x0
0xffffae8000019b80 0041 00000000 0x0 0x0
0xffffae8000019c00 0041 00000000 0x0 0x0
0xffffae8000019c80 0041 00000000 0x0 0x0
0xffffae8000019d00 0041 00000000 0x0 0x0
0xffffae8000019d80 0041 00000000 0x0 0x0
0xffffae8000019e00 0041 00000000 0x0 0x0
0xffffae8000019e80 0041 00000000 0x0 0x0
0xffffae8000019f00 0041 00000000 0x0 0x0
0xffffae8000019f80 0041 00000000 0x0 0x0
0xffffae800001a000 0041 00000000 0x0 0x0
0xffffae800001a080 0041 00000000 0x0 0x0
0xffffae800001a100 0041 00000000 0x0 0x0
0xffffae800001a180 0041 00000000 0x0 0x0
0xffffae800001a200 0041 00000000 0x0 0x0
0xffffae800001a280 0041 00000000 0x0 0x0
0xffffae800001a300 0041 00000000 0x0 0x0
0xffffae800001a380 0041 00000000 0x0 0x0
0xffffae800001a400 0041 00000000 0x0 0x0
0xffffae800001a480 0041 00000000 0x0 0x0
0xffffae800001a500 0041 00000000 0x0 0x0
0xffffae800001a580 0041 00000000 0x0 0x0
0xffffae800001a600 0041 00000000 0x0 0x0
0xffffae800001a680 0041 00000000 0x0 0x0
0xffffae800001a700 0041 00000000 0x0 0x0
0xffffae800001a780 0041 00000000 0x0 0x0
0xffffae800001a800 0041 00000000 0x0 0x0
0xffffae800001a880 0041 00000000 0x0 0x0
0xffffae800001a900 0041 00000000 0x0 0x0
0xffffae800001a980 0041 00000000 0x0 0x0
0xffffae800001aa00 0041 00000000 0x0 0x0
0xffffae800001aa80 0041 00000000 0x0 0x0
0xffffae800001ab00 0041 00000000 0x0 0x0
0xffffae800001ab80 0041 00000000 0x0 0x0
0xffffae800001ac00 0041 00000000 0x0 0x0
0xffffae800001ac80 0041 00000000 0x0 0x0
0xffffae800001ad00 0041 00000000 0x0 0x0
0xffffae800001ad80 0041 00000000 0x0 0x0
0xffffae800001ae00 0041 00000000 0x0 0x0
0xffffae800001ae80 0041 00000000 0x0 0x0
0xffffae800001af00 0041 00000000 0x0 0x0
0xffffae800001af80 0041 00000000 0x0 0x0
0xffffae800001b000 0041 00000000 0x0 0x0
0xffffae800001b080 0041 00000000 0x0 0x0
0xffffae800001b100 0041 00000000 0x0 0x0
0xffffae800001b180 0041 00000000 0x0 0x0
0xffffae800001b200 0041 00000000 0x0 0x0
0xffffae800001b280 0041 00000000 0x0 0x0
0xffffae800001b300 0041 00000000 0x0 0x0
0xffffae800001b380 0041 00000000 0x0 0x0
0xffffae800001b400 0041 00000000 0x0 0x0
0xffffae800001b480 0041 00000000 0x0 0x0
0xffffae800001b500 0041 00000000 0x0 0x0
0xffffae800001b580 0041 00000000 0x0 0x0
0xffffae800001b600 0041 00000000 0x0 0x0
0xffffae800001b680 0041 00000000 0x0 0x0
0xffffae800001b700 0041 00000000 0x0 0x0
0xffffae800001b780 0041 00000000 0x0 0x0
0xffffae800001b800 0041 00000000 0x0 0x0
0xffffae800001b880 0041 00000000 0x0 0x0
0xffffae800001b900 0041 00000000 0x0 0x0
0xffffae800001b980 0041 00000000 0x0 0x0
0xffffae800001ba00 0041 00000000 0x0 0x0
0xffffae800001ba80 0041 00000000 0x0 0x0
0xffffae800001bb00 0041 00000000 0x0 0x0
0xffffae800001bb80 0041 00000000 0x0 0x0
0xffffae800001bc00 0041 00000000 0x0 0x0
0xffffae800001bc80 0041 00000000 0x0 0x0
0xffffae800001bd00 0041 00000000 0x0 0x0
0xffffae800001bd80 0041 00000000 0x0 0x0
0xffffae800001be00 0041 00000000 0x0 0x0
0xffffae800001be80 0041 00000000 0x0 0x0
0xffffae800001bf00 0041 00000000 0x0 0x0
0xffffae800001bf80 0041 00000000 0x0 0x0
0xffffae800001c000 0041 00000000 0x0 0x0
0xffffae800001c080 0041 00000000 0x0 0x0
0xffffae800001c100 0041 00000000 0x0 0x0
0xffffae800001c180 0041 00000000 0x0 0x0
0xffffae800001c200 0041 00000000 0x0 0x0
0xffffae800001c280 0041 00000000 0x0 0x0
0xffffae800001c300 0041 00000000 0x0 0x0
0xffffae800001c380 0041 00000000 0x0 0x0
0xffffae800001c400 0041 00000000 0x0 0x0
0xffffae800001c480 0041 00000000 0x0 0x0
0xffffae800001c500 0041 00000000 0x0 0x0
0xffffae800001c580 0041 00000000 0x0 0x0
0xffffae800001c600 0041 00000000 0x0 0x0
0xffffae800001c680 0041 00000000 0x0 0x0
0xffffae800001c700 0041 00000000 0x0 0x0
0xffffae800001c780 0041 00000000 0x0 0x0
0xffffae800001c800 0001 00000000 0x0 0x0
0xffffae800001c880 0001 00000000 0x0 0x0
0xffffae800001c900 0001 00000000 0x0 0x0
0xffffae800001c980 0001 00000000 0x0 0x0
0xffffae800001ca00 0001 00000000 0x0 0x0
0xffffae800001ca80 0001 00000000 0x0 0x0
0xffffae800001cb00 0001 00000000 0x0 0x0
0xffffae800001cb80 0001 00000000 0x0 0x0
0xffffae800001cc00 0001 00000000 0x0 0x0
0xffffae800001cc80 0001 00000000 0x0 0x0
0xffffae800001cd00 0001 00000000 0x0 0x0
0xffffae800001cd80 0001 00000000 0x0 0x0
0xffffae800001ce00 0001 00000000 0x0 0x0
0xffffae800001ce80 0001 00000000 0x0 0x0
0xffffae800001cf00 0001 00000000 0x0 0x0
0xffffae800001cf80 0001 00000000 0x0 0x0
0xffffae800001d000 0001 00000000 0x0 0x0
0xffffae800001d080 0001 00000000 0x0 0x0
0xffffae800001d100 0001 00000000 0x0 0x0
0xffffae800001d180 0001 00000000 0x0 0x0
0xffffae800001d200 0001 00000000 0x0 0x0
0xffffae800001d280 0001 00000000 0x0 0x0
0xffffae800001d300 0001 00000000 0x0 0x0
0xffffae800001d380 0001 00000000 0x0 0x0
0xffffae800001d400 0001 00000000 0x0 0x0
0xffffae800001d480 0001 00000000 0x0 0x0
0xffffae800001d500 0001 00000000 0x0 0x0
0xffffae800001d580 0001 00000000 0x0 0x0
0xffffae800001d600 0001 00000000 0x0 0x0
0xffffae800001d680 0001 00000000 0x0 0x0
0xffffae800001d700 0001 00000000 0x0 0x0
0xffffae800001d780 0001 00000000 0x0 0x0
0xffffae800001d800 0001 00000000 0x0 0x0
0xffffae800001d880 0001 00000000 0x0 0x0
0xffffae800001d900 0001 00000000 0x0 0x0
0xffffae800001d980 0001 00000000 0x0 0x0
0xffffae800001da00 0001 00000000 0x0 0x0
0xffffae800001da80 0001 00000000 0x0 0x0
0xffffae800001db00 0001 00000000 0x0 0x0
0xffffae800001db80 0001 00000000 0x0 0x0
0xffffae800001dc00 0001 00000000 0x0 0x0
0xffffae800001dc80 0001 00000000 0x0 0x0
0xffffae800001dd00 0001 00000000 0x0 0x0
0xffffae800001dd80 0001 00000000 0x0 0x0
0xffffae800001de00 0001 00000000 0x0 0x0
0xffffae800001de80 0001 00000000 0x0 0x0
0xffffae800001df00 0001 00000000 0x0 0x0
0xffffae800001df80 0001 00000000 0x0 0x0
0xffffae800001e000 0001 00000000 0x0 0x0
0xffffae800001e080 0001 00000000 0x0 0x0
0xffffae800001e100 0001 00000000 0x0 0x0
0xffffae800001e180 0001 00000000 0x0 0x0
0xffffae800001e200 0001 00000000 0x0 0x0
0xffffae800001e280 0001 00000000 0x0 0x0
0xffffae800001e300 0001 00000000 0x0 0x0
0xffffae800001e380 0001 00000000 0x0 0x0
0xffffae800001e400 0001 00000000 0x0 0x0
0xffffae800001e480 0001 00000000 0x0 0x0
0xffffae800001e500 0001 00000000 0x0 0x0
0xffffae800001e580 0001 00000000 0x0 0x0
0xffffae800001e600 0001 00000000 0x0 0x0
0xffffae800001e680 0001 00000000 0x0 0x0
0xffffae800001e700 0001 00000000 0x0 0x0
0xffffae800001e780 0001 00000000 0x0 0x0
0xffffae800001e800 0001 00000000 0x0 0x0
0xffffae800001e880 0001 00000000 0x0 0x0
0xffffae800001e900 0001 00000000 0x0 0x0
0xffffae800001e980 0001 00000000 0x0 0x0
0xffffae800001ea00 0001 00000000 0x0 0x0
0xffffae800001ea80 0001 00000000 0x0 0x0
0xffffae800001eb00 0001 00000000 0x0 0x0
0xffffae800001eb80 0001 00000000 0x0 0x0
0xffffae800001ec00 0001 00000000 0x0 0x0
0xffffae800001ec80 0001 00000000 0x0 0x0
0xffffae800001ed00 0001 00000000 0x0 0x0
0xffffae800001ed80 0001 00000000 0x0 0x0
0xffffae800001ee00 0001 00000000 0x0 0x0
0xffffae800001ee80 0001 00000000 0x0 0x0
0xffffae800001ef00 0001 00000000 0x0 0x0
0xffffae800001ef80 0001 00000000 0x0 0x0
0xffffae800001f000 0001 00000000 0x0 0x0
0xffffae800001f080 0001 00000000 0x0 0x0
0xffffae800001f100 0001 00000000 0x0 0x0
0xffffae800001f180 0001 00000000 0x0 0x0
0xffffae800001f200 0001 00000000 0x0 0x0
0xffffae800001f280 0001 00000000 0x0 0x0
0xffffae800001f300 0001 00000000 0x0 0x0
0xffffae800001f380 0001 00000000 0x0 0x0
0xffffae800001f400 0001 00000000 0x0 0x0
0xffffae800001f480 0001 00000000 0x0 0x0
0xffffae800001f500 0001 00000000 0x0 0x0
0xffffae800001f580 0001 00000000 0x0 0x0
0xffffae800001f600 0001 00000000 0x0 0x0
0xffffae800001f680 0001 00000000 0x0 0x0
0xffffae800001f700 0001 00000000 0x0 0x0
0xffffae800001f780 0001 00000000 0x0 0x0
0xffffae800001f800 0001 00000000 0x0 0x0
0xffffae800001f880 0001 00000000 0x0 0x0
0xffffae800001f900 0001 00000000 0x0 0x0
0xffffae800001f980 0001 00000000 0x0 0x0
0xffffae800001fa00 0001 00000000 0x0 0x0
0xffffae800001fa80 0001 00000000 0x0 0x0
0xffffae800001fb00 0001 00000000 0x0 0x0
0xffffae800001fb80 0001 00000000 0x0 0x0
0xffffae800001fc00 0001 00000000 0x0 0x0
0xffffae800001fc80 0001 00000000 0x0 0x0
0xffffae800001fd00 0001 00000000 0x0 0x0
0xffffae800001fd80 0001 00000000 0x0 0x0
0xffffae800001fe00 0001 00000000 0x0 0x0
0xffffae800001fe80 0001 00000000 0x0 0x0
0xffffae800001ff00 0001 00000000 0x0 0x0
0xffffae800001ff80 0001 00000000 0x0 0x0
0xffffae8000020000 0001 00000000 0x0 0x0
0xffffae8000020080 0001 00000000 0x0 0x0
0xffffae8000020100 0001 00000000 0x0 0x0
0xffffae8000020180 0001 00000000 0x0 0x0
0xffffae8000020200 0001 00000000 0x0 0x0
0xffffae8000020280 0001 00000000 0x0 0x0
0xffffae8000020300 0001 00000000 0x0 0x0
0xffffae8000020380 0001 00000000 0x0 0x0
0xffffae8000020400 0001 00000000 0x0 0x0
0xffffae8000020480 0001 00000000 0x0 0x0
0xffffae8000020500 0001 00000000 0x0 0x0
0xffffae8000020580 0001 00000000 0x0 0x0
0xffffae8000020600 0001 00000000 0x0 0x0
0xffffae8000020680 0001 00000000 0x0 0x0
0xffffae8000020700 0001 00000000 0x0 0x0
0xffffae8000020780 0001 00000000 0x0 0x0
0xffffae8000020800 0001 00000000 0x0 0x0
0xffffae8000020880 0001 00000000 0x0 0x0
0xffffae8000020900 0001 00000000 0x0 0x0
0xffffae8000020980 0001 00000000 0x0 0x0
0xffffae8000020a00 0001 00000000 0x0 0x0
0xffffae8000020a80 0001 00000000 0x0 0x0
0xffffae8000020b00 0001 00000000 0x0 0x0
0xffffae8000020b80 0001 00000000 0x0 0x0
0xffffae8000020c00 0001 00000000 0x0 0x0
0xffffae8000020c80 0001 00000000 0x0 0x0
0xffffae8000020d00 0001 00000000 0x0 0x0
0xffffae8000020d80 0001 00000000 0x0 0x0
0xffffae8000020e00 0001 00000000 0x0 0x0
0xffffae8000020e80 0001 00000000 0x0 0x0
0xffffae8000020f00 0001 00000000 0x0 0x0
0xffffae8000020f80 0001 00000000 0x0 0x0
0xffffae8000021000 0001 00000000 0x0 0x0
0xffffae8000021080 0001 00000000 0x0 0x0
0xffffae8000021100 0001 00000000 0x0 0x0
0xffffae8000021180 0001 00000000 0x0 0x0
0xffffae8000021200 0001 00000000 0x0 0x0
0xffffae8000021280 0001 00000000 0x0 0x0
0xffffae8000021300 0001 00000000 0x0 0x0
0xffffae8000021380 0001 00000000 0x0 0x0
0xffffae8000021400 0001 00000000 0x0 0x0
0xffffae8000021480 0001 00000000 0x0 0x0
0xffffae8000021500 0001 00000000 0x0 0x0
0xffffae8000021580 0001 00000000 0x0 0x0
0xffffae8000021600 0001 00000000 0x0 0x0
0xffffae8000021680 0001 00000000 0x0 0x0
0xffffae8000021700 0001 00000000 0x0 0x0
0xffffae8000021780 0001 00000000 0x0 0x0
0xffffae8000021800 0001 00000000 0x0 0x0
0xffffae8000021880 0001 00000000 0x0 0x0
0xffffae8000021900 0001 00000000 0x0 0x0
0xffffae8000021980 0001 00000000 0x0 0x0
0xffffae8000021a00 0001 00000000 0x0 0x0
0xffffae8000021a80 0001 00000000 0x0 0x0
0xffffae8000021b00 0001 00000000 0x0 0x0
0xffffae8000021b80 0001 00000000 0x0 0x0
0xffffae8000021c00 0001 00000000 0x0 0x0
0xffffae8000021c80 0001 00000000 0x0 0x0
0xffffae8000021d00 0001 00000000 0x0 0x0
0xffffae8000021d80 0001 00000000 0x0 0x0
0xffffae8000021e00 0001 00000000 0x0 0x0
0xffffae8000021e80 0001 00000000 0x0 0x0
0xffffae8000021f00 0001 00000000 0x0 0x0
0xffffae8000021f80 0001 00000000 0x0 0x0
0xffffae8000022000 0001 00000000 0x0 0x0
0xffffae8000022080 0001 00000000 0x0 0x0
0xffffae8000022100 0001 00000000 0x0 0x0
0xffffae8000022180 0001 00000000 0x0 0x0
0xffffae8000022200 0001 00000000 0x0 0x0
0xffffae8000022280 0001 00000000 0x0 0x0
0xffffae8000022300 0001 00000000 0x0 0x0
0xffffae8000022380 0001 00000000 0x0 0x0
0xffffae8000022400 0001 00000000 0x0 0x0
0xffffae8000022480 0001 00000000 0x0 0x0
0xffffae8000022500 0001 00000000 0x0 0x0
0xffffae8000022580 0001 00000000 0x0 0x0
0xffffae8000022600 0001 00000000 0x0 0x0
0xffffae8000022680 0001 00000000 0x0 0x0
0xffffae8000022700 0001 00000000 0x0 0x0
0xffffae8000022780 0001 00000000 0x0 0x0
0xffffae8000022800 0001 00000000 0x0 0x0
0xffffae8000022880 0001 00000000 0x0 0x0
0xffffae8000022900 0001 00000000 0x0 0x0
0xffffae8000022980 0001 00000000 0x0 0x0
0xffffae8000022a00 0001 00000000 0x0 0x0
0xffffae8000022a80 0001 00000000 0x0 0x0
0xffffae8000022b00 0001 00000000 0x0 0x0
0xffffae8000022b80 0001 00000000 0x0 0x0
0xffffae8000022c00 0001 00000000 0x0 0x0
0xffffae8000022c80 0001 00000000 0x0 0x0
0xffffae8000022d00 0001 00000000 0x0 0x0
0xffffae8000022d80 0001 00000000 0x0 0x0
0xffffae8000022e00 0001 00000000 0x0 0x0
0xffffae8000022e80 0001 00000000 0x0 0x0
0xffffae8000022f00 0001 00000000 0x0 0x0
0xffffae8000022f80 0001 00000000 0x0 0x0
0xffffae8000023000 0001 00000000 0x0 0x0
0xffffae8000023080 0001 00000000 0x0 0x0
0xffffae8000023100 0001 00000000 0x0 0x0
0xffffae8000023180 0001 00000000 0x0 0x0
0xffffae8000023200 0001 00000000 0x0 0x0
0xffffae8000023280 0001 00000000 0x0 0x0
0xffffae8000023300 0001 00000000 0x0 0x0
0xffffae8000023380 0001 00000000 0x0 0x0
0xffffae8000023400 0001 00000000 0x0 0x0
0xffffae8000023480 0001 00000000 0x0 0x0
0xffffae8000023500 0001 00000000 0x0 0x0
0xffffae8000023580 0001 00000000 0x0 0x0
0xffffae8000023600 0001 00000000 0x0 0x0
0xffffae8000023680 0001 00000000 0x0 0x0
0xffffae8000023700 0001 00000000 0x0 0x0
0xffffae8000023780 0001 00000000 0x0 0x0
0xffffae8000023800 0001 00000000 0x0 0x0
0xffffae8000023880 0001 00000000 0x0 0x0
0xffffae8000023900 0001 00000000 0x0 0x0
0xffffae8000023980 0001 00000000 0x0 0x0
0xffffae8000023a00 0001 00000000 0x0 0x0
0xffffae8000023a80 0001 00000000 0x0 0x0
0xffffae8000023b00 0001 00000000 0x0 0x0
0xffffae8000023b80 0001 00000000 0x0 0x0
0xffffae8000023c00 0001 00000000 0x0 0x0
0xffffae8000023c80 0001 00000000 0x0 0x0
0xffffae8000023d00 0001 00000000 0x0 0x0
0xffffae8000023d80 0001 00000000 0x0 0x0
0xffffae8000023e00 0001 00000000 0x0 0x0
0xffffae8000023e80 0001 00000000 0x0 0x0
0xffffae8000023f00 0001 00000000 0x0 0x0
0xffffae8000023f80 0001 00000000 0x0 0x0
0xffffae8000024000 0001 00000000 0x0 0x0
0xffffae8000024080 0001 00000000 0x0 0x0
0xffffae8000024100 0001 00000000 0x0 0x0
0xffffae8000024180 0001 00000000 0x0 0x0
0xffffae8000024200 0001 00000000 0x0 0x0
0xffffae8000024280 0001 00000000 0x0 0x0
0xffffae8000024300 0001 00000000 0x0 0x0
0xffffae8000024380 0001 00000000 0x0 0x0
0xffffae8000024400 0001 00000000 0x0 0x0
0xffffae8000024480 0001 00000000 0x0 0x0
0xffffae8000024500 0001 00000000 0x0 0x0
0xffffae8000024580 0001 00000000 0x0 0x0
0xffffae8000024600 0001 00000000 0x0 0x0
0xffffae8000024680 0001 00000000 0x0 0x0
0xffffae8000024700 0001 00000000 0x0 0x0
0xffffae8000024780 0001 00000000 0x0 0x0
0xffffae8000024800 0001 00000000 0x0 0x0
0xffffae8000024880 0001 00000000 0x0 0x0
0xffffae8000024900 0001 00000000 0x0 0x0
0xffffae8000024980 0001 00000000 0x0 0x0
0xffffae8000024a00 0001 00000000 0x0 0x0
0xffffae8000024a80 0001 00000000 0x0 0x0
0xffffae8000024b00 0001 00000000 0x0 0x0
0xffffae8000024b80 0001 00000000 0x0 0x0
0xffffae8000024c00 0001 00000000 0x0 0x0
0xffffae8000024c80 0001 00000000 0x0 0x0
0xffffae8000024d00 0001 00000000 0x0 0x0
0xffffae8000024d80 0001 00000000 0x0 0x0
0xffffae8000024e00 0001 00000000 0x0 0x0
0xffffae8000024e80 0001 00000000 0x0 0x0
0xffffae8000024f00 0001 00000000 0x0 0x0
0xffffae8000024f80 0001 00000000 0x0 0x0
0xffffae8000025000 0001 00000000 0x0 0x0
0xffffae8000025080 0001 00000000 0x0 0x0
0xffffae8000025100 0001 00000000 0x0 0x0
0xffffae8000025180 0001 00000000 0x0 0x0
0xffffae8000025200 0001 00000000 0x0 0x0
0xffffae8000025280 0001 00000000 0x0 0x0
0xffffae8000025300 0001 00000000 0x0 0x0
0xffffae8000025380 0001 00000000 0x0 0x0
0xffffae8000025400 0001 00000000 0x0 0x0
0xffffae8000025480 0001 00000000 0x0 0x0
0xffffae8000025500 0001 00000000 0x0 0x0
0xffffae8000025580 0001 00000000 0x0 0x0
0xffffae8000025600 0001 00000000 0x0 0x0
0xffffae8000025680 0001 00000000 0x0 0x0
0xffffae8000025700 0001 00000000 0x0 0x0
0xffffae8000025780 0001 00000000 0x0 0x0
0xffffae8000025800 0001 00000000 0x0 0x0
0xffffae8000025880 0001 00000000 0x0 0x0
0xffffae8000025900 0001 00000000 0x0 0x0
0xffffae8000025980 0001 00000000 0x0 0x0
0xffffae8000025a00 0001 00000000 0x0 0x0
0xffffae8000025a80 0001 00000000 0x0 0x0
0xffffae8000025b00 0001 00000000 0x0 0x0
0xffffae8000025b80 0001 00000000 0x0 0x0
0xffffae8000025c00 0001 00000000 0x0 0x0
0xffffae8000025c80 0001 00000000 0x0 0x0
0xffffae8000025d00 0001 00000000 0x0 0x0
0xffffae8000025d80 0001 00000000 0x0 0x0
0xffffae8000025e00 0001 00000000 0x0 0x0
0xffffae8000025e80 0001 00000000 0x0 0x0
0xffffae8000025f00 0001 00000000 0x0 0x0
0xffffae8000025f80 0001 00000000 0x0 0x0
0xffffae8000026000 0001 00000000 0x0 0x0
0xffffae8000026080 0001 00000000 0x0 0x0
0xffffae8000026100 0001 00000000 0x0 0x0
0xffffae8000026180 0001 00000000 0x0 0x0
0xffffae8000026200 0001 00000000 0x0 0x0
0xffffae8000026280 0001 00000000 0x0 0x0
0xffffae8000026300 0001 00000000 0x0 0x0
0xffffae8000026380 0001 00000000 0x0 0x0
0xffffae8000026400 0001 00000000 0x0 0x0
0xffffae8000026480 0001 00000000 0x0 0x0
0xffffae8000026500 0001 00000000 0x0 0x0
0xffffae8000026580 0001 00000000 0x0 0x0
0xffffae8000026600 0001 00000000 0x0 0x0
0xffffae8000026680 0001 00000000 0x0 0x0
0xffffae8000026700 0001 00000000 0x0 0x0
0xffffae8000026780 0001 00000000 0x0 0x0
0xffffae8000026800 0001 00000000 0x0 0x0
0xffffae8000026880 0001 00000000 0x0 0x0
0xffffae8000026900 0001 00000000 0x0 0x0
0xffffae8000026980 0001 00000000 0x0 0x0
0xffffae8000026a00 0001 00000000 0x0 0x0
0xffffae8000026a80 0001 00000000 0x0 0x0
0xffffae8000026b00 0001 00000000 0x0 0x0
0xffffae8000026b80 0001 00000000 0x0 0x0
0xffffae8000026c00 0001 00000000 0x0 0x0
0xffffae8000026c80 0001 00000000 0x0 0x0
0xffffae8000026d00 0001 00000000 0x0 0x0
0xffffae8000026d80 0001 00000000 0x0 0x0
0xffffae8000026e00 0001 00000000 0x0 0x0
0xffffae8000026e80 0001 00000000 0x0 0x0
0xffffae8000026f00 0001 00000000 0x0 0x0
0xffffae8000026f80 0001 00000000 0x0 0x0
0xffffae8000027000 0001 00000000 0x0 0x0
0xffffae8000027080 0001 00000000 0x0 0x0
0xffffae8000027100 0001 00000000 0x0 0x0
0xffffae8000027180 0001 00000000 0x0 0x0
0xffffae8000027200 0001 00000000 0x0 0x0
0xffffae8000027280 0001 00000000 0x0 0x0
0xffffae8000027300 0001 00000000 0x0 0x0
0xffffae8000027380 0001 00000000 0x0 0x0
0xffffae8000027400 0001 00000000 0x0 0x0
0xffffae8000027480 0001 00000000 0x0 0x0
0xffffae8000027500 0001 00000000 0x0 0x0
0xffffae8000027580 0001 00000000 0x0 0x0
0xffffae8000027600 0001 00000000 0x0 0x0
0xffffae8000027680 0001 00000000 0x0 0x0
0xffffae8000027700 0001 00000000 0x0 0x0
0xffffae8000027780 0001 00000000 0x0 0x0
0xffffae8000027800 0001 00000000 0x0 0x0
0xffffae8000027880 0001 00000000 0x0 0x0
0xffffae8000027900 0001 00000000 0x0 0x0
0xffffae8000027980 0001 00000000 0x0 0x0
0xffffae8000027a00 0001 00000000 0x0 0x0
0xffffae8000027a80 0001 00000000 0x0 0x0
0xffffae8000027b00 0001 00000000 0x0 0x0
0xffffae8000027b80 0001 00000000 0x0 0x0
0xffffae8000027c00 0001 00000000 0x0 0x0
0xffffae8000027c80 0001 00000000 0x0 0x0
0xffffae8000027d00 0001 00000000 0x0 0x0
0xffffae8000027d80 0001 00000000 0x0 0x0
0xffffae8000027e00 0001 00000000 0x0 0x0
0xffffae8000027e80 0001 00000000 0x0 0x0
0xffffae8000027f00 0001 00000000 0x0 0x0
0xffffae8000027f80 0001 00000000 0x0 0x0
0xffffae8000028000 0001 00000000 0x0 0x0
0xffffae8000028080 0001 00000000 0x0 0x0
0xffffae8000028100 0001 00000000 0x0 0x0
0xffffae8000028180 0001 00000000 0x0 0x0
0xffffae8000028200 0001 00000000 0x0 0x0
0xffffae8000028280 0001 00000000 0x0 0x0
0xffffae8000028300 0001 00000000 0x0 0x0
0xffffae8000028380 0001 00000000 0x0 0x0
0xffffae8000028400 0001 00000000 0x0 0x0
0xffffae8000028480 0001 00000000 0x0 0x0
0xffffae8000028500 0001 00000000 0x0 0x0
0xffffae8000028580 0001 00000000 0x0 0x0
0xffffae8000028600 0001 00000000 0x0 0x0
0xffffae8000028680 0001 00000000 0x0 0x0
0xffffae8000028700 0001 00000000 0x0 0x0
0xffffae8000028780 0001 00000000 0x0 0x0
0xffffae8000028800 0001 00000000 0x0 0x0
0xffffae8000028880 0001 00000000 0x0 0x0
0xffffae8000028900 0001 00000000 0x0 0x0
0xffffae8000028980 0001 00000000 0x0 0x0
0xffffae8000028a00 0001 00000000 0x0 0x0
0xffffae8000028a80 0001 00000000 0x0 0x0
0xffffae8000028b00 0001 00000000 0x0 0x0
0xffffae8000028b80 0001 00000000 0x0 0x0
0xffffae8000028c00 0001 00000000 0x0 0x0
0xffffae8000028c80 0001 00000000 0x0 0x0
0xffffae8000028d00 0001 00000000 0x0 0x0
0xffffae8000028d80 0001 00000000 0x0 0x0
0xffffae8000028e00 0001 00000000 0x0 0x0
0xffffae8000028e80 0001 00000000 0x0 0x0
0xffffae8000028f00 0001 00000000 0x0 0x0
0xffffae8000028f80 0001 00000000 0x0 0x0
0xffffae8000029000 0001 00000000 0x0 0x0
0xffffae8000029080 0001 00000000 0x0 0x0
0xffffae8000029100 0001 00000000 0x0 0x0
0xffffae8000029180 0001 00000000 0x0 0x0
0xffffae8000029200 0001 00000000 0x0 0x0
0xffffae8000029280 0001 00000000 0x0 0x0
0xffffae8000029300 0001 00000000 0x0 0x0
0xffffae8000029380 0001 00000000 0x0 0x0
0xffffae8000029400 0001 00000000 0x0 0x0
0xffffae8000029480 0001 00000000 0x0 0x0
0xffffae8000029500 0001 00000000 0x0 0x0
0xffffae8000029580 0001 00000000 0x0 0x0
0xffffae8000029600 0001 00000000 0x0 0x0
0xffffae8000029680 0001 00000000 0x0 0x0
0xffffae8000029700 0001 00000000 0x0 0x0
0xffffae8000029780 0001 00000000 0x0 0x0
0xffffae8000029800 0001 00000000 0x0 0x0
0xffffae8000029880 0001 00000000 0x0 0x0
0xffffae8000029900 0001 00000000 0x0 0x0
0xffffae8000029980 0001 00000000 0x0 0x0
0xffffae8000029a00 0001 00000000 0x0 0x0
0xffffae8000029a80 0001 00000000 0x0 0x0
0xffffae8000029b00 0001 00000000 0x0 0x0
0xffffae8000029b80 0001 00000000 0x0 0x0
0xffffae8000029c00 0001 00000000 0x0 0x0
0xffffae8000029c80 0001 00000000 0x0 0x0
0xffffae8000029d00 0001 00000000 0x0 0x0
0xffffae8000029d80 0001 00000000 0x0 0x0
0xffffae8000029e00 0001 00000000 0x0 0x0
0xffffae8000029e80 0001 00000000 0x0 0x0
0xffffae8000029f00 0001 00000000 0x0 0x0
0xffffae8000029f80 0001 00000000 0x0 0x0
0xffffae800002a000 0001 00000000 0x0 0x0
0xffffae800002a080 0001 00000000 0x0 0x0
0xffffae800002a100 0001 00000000 0x0 0x0
0xffffae800002a180 0001 00000000 0x0 0x0
0xffffae800002a200 0001 00000000 0x0 0x0
0xffffae800002a280 0001 00000000 0x0 0x0
0xffffae800002a300 0001 00000000 0x0 0x0
0xffffae800002a380 0001 00000000 0x0 0x0
0xffffae800002a400 0001 00000000 0x0 0x0
0xffffae800002a480 0001 00000000 0x0 0x0
0xffffae800002a500 0001 00000000 0x0 0x0
0xffffae800002a580 0001 00000000 0x0 0x0
0xffffae800002a600 0001 00000000 0x0 0x0
0xffffae800002a680 0001 00000000 0x0 0x0
0xffffae800002a700 0001 00000000 0x0 0x0
0xffffae800002a780 0001 00000000 0x0 0x0
0xffffae800002a800 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Sep 1, 2023, 3:37:57 AM9/1/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 23ee83f7c0ae c.7: mention that C11 and C17 have been publi..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=16a29cc0680000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=6f9c60d2aae4350626f0
compiler: Debian clang version 15.0.6

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16678d8fa80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=17d4bbcba80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a2246aa2875c/disk-23ee83f7.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/f5e0702a2a8a/netbsd-23ee83f7.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6f9c60...@syzkaller.appspotmail.com

[ 48.6992097] panic: MSan: Uninitialized Pool Memory From m_get()

[ 48.6992097] cpu1: Begin traceback...
[ 48.7191897] vpanic() at netbsd:vpanic+0xc9d
[ 48.7691909] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[ 48.8191946] __msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
[ 48.8191946] __msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
executing program
executing program
executing program
[ 48.8691884] fd_getfile() at netbsd:fd_getfile+0x594
[ 48.9191932] unp_send() at netbsd:unp_send+0x992 unp_internalize sys/kern/uipc_usrreq.c:1570 [inline]
[ 48.9191932] unp_send() at netbsd:unp_send+0x992 sys/kern/uipc_usrreq.c:477
[ 48.9791884] sosend() at netbsd:sosend+0x426c
[ 49.0191900] do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x1597 sys/kern/uipc_syscalls.c:629
[ 49.0691894] do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x2b7 sys/kern/uipc_syscalls.c:679
[ 49.1191932] compat_43_sys_sendmsg() at netbsd:compat_43_sys_sendmsg+0x5fb sys/compat/common/uipc_syscalls_43.c:385
[ 49.1791892] sys_syscall() at netbsd:sys_syscall+0x2ac sy_call sys/sys/syscallvar.h:65 [inline]
[ 49.1791892] sys_syscall() at netbsd:sys_syscall+0x2ac sys/kern/sys_syscall.c:90
[ 49.2291894] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 49.2291894] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 49.2491947] --- syscall (number 114 via SYS_syscall) ---
[ 49.2591877] netbsd:syscall+0x60c:
[ 49.2691900] cpu1: End traceback...
[ 49.2691900] fatal breakpoint trap in supervisor mode
[ 49.2791865] trap type 1 code 0 rip 0xffffffff8023686d cs 0x8 rflags 0x286 cr2 0x20002340 ilevel 0x5 rsp 0xffffbc80c78371c0
[ 49.2891833] curlwp 0xffffbc8012bbb900 pid 813.813 lowest kstack 0xffffbc80c78302c0
Stopped in pid 813.813 (syz-executor2447) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
__msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
__msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
fd_getfile() at netbsd:fd_getfile+0x594
unp_send() at netbsd:unp_send+0x992 unp_internalize sys/kern/uipc_usrreq.c:1570 [inline]
unp_send() at netbsd:unp_send+0x992 sys/kern/uipc_usrreq.c:477
sosend() at netbsd:sosend+0x426c
do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x1597 sys/kern/uipc_syscalls.c:629
do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x2b7 sys/kern/uipc_syscalls.c:679
compat_43_sys_sendmsg() at netbsd:compat_43_sys_sendmsg+0x5fb sys/compat/common/uipc_syscalls_43.c:385

sys_syscall() at netbsd:sys_syscall+0x2ac sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x2ac sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 114 via SYS_syscall) ---
netbsd:syscall+0x60c:
Panic string: MSan: Uninitialized Pool Memory From m_get()

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1241 1241 2 0 0 ffffbc8013442980 syz-executor2447
1239 1239 2 0 0 ffffbc8013442540 syz-executor2447
1199 1199 2 0 0 ffffbc8013442100 syz-executor2447
1243 1243 2 0 0 ffffbc8012c48940 syz-executor2447
829 829 2 1 0 ffffbc8012c48500 syz-executor2447
929 929 2 1 0 ffffbc8012c480c0 syz-executor2447
813 > 813 7 1 0 ffffbc8012bbb900 syz-executor2447
1260 1260 2 0 140 ffffbc8012bbb4c0 syz-executor2447
942 942 3 1 180 ffffbc8012bbb080 syz-executor2447 nanoslp
449 449 3 1 180 ffffbc801251d300 syz-executor2447 nanoslp
988 988 3 0 180 ffffbc8012b8d8c0 syz-executor2447 nanoslp
1238 1238 3 0 180 ffffbc80122ff6c0 sshd select
1151 1151 3 0 180 ffffbc80122ffb00 getty nanoslp
1225 1225 3 1 180 ffffbc80122ff280 getty nanoslp
1224 1224 3 0 180 ffffbc80121ffac0 getty nanoslp
863 863 3 0 1c0 ffffbc80121fc200 getty ttyraw
1095 1095 3 0 180 ffffbc801238f700 sshd select
1094 1094 3 1 180 ffffbc801238f2c0 powerd kqueue
562 562 3 0 180 ffffbc80125fdbc0 syslogd kqueue
746 746 3 0 180 ffffbc8012b8d480 dhcpcd poll
742 742 3 0 180 ffffbc801251d740 dhcpcd poll
745 745 3 0 180 ffffbc8012b8d040 dhcpcd poll
602 602 3 0 180 ffffbc80125fd780 dhcpcd poll
292 292 3 0 180 ffffbc80125fd340 dhcpcd poll
485 485 3 0 180 ffffbc801238fb40 dhcpcd poll
291 291 3 0 180 ffffbc801251db80 dhcpcd poll
1 1 3 0 180 ffffbc8011ede100 init wait
0 864 3 0 200 ffffbc80121fc640 physiod physiod
0 196 3 1 200 ffffbc80121ff680 pooldrain pooldrain
0 195 2 0 240 ffffbc80121ff240 ioflush
0 194 3 0 200 ffffbc80121fca80 pgdaemon pgdaemon
0 167 3 0 200 ffffbc801216ba40 usb7 usbevt
0 172 3 0 200 ffffbc801216b600 usb6 usbevt
0 170 3 0 200 ffffbc801216b1c0 usb5 usbevt
0 168 3 0 200 ffffbc801213ca00 usb4 usbevt
0 166 3 0 200 ffffbc801213c5c0 usb3 usbevt
0 165 3 0 200 ffffbc801213c180 usb2 usbevt
0 31 3 0 200 ffffbc80120859c0 usb1 usbevt
0 63 3 0 200 ffffbc8012085580 usb0 usbevt
0 126 3 1 200 ffffbc8012085140 usbtask-dr usbtsk
0 125 3 1 200 ffffbc8011ede980 usbtask-hc usbtsk
0 124 3 0 200 ffffbc80103f4b00 swwreboot swwreboot
0 123 3 0 200 ffffbc8011ede540 npfgc0 npfgcw
0 122 3 1 200 ffffbc8011ed1940 rt_free rt_free
0 121 3 1 200 ffffbc8011ed1500 unpgc unpgc
0 120 3 0 200 ffffbc8011ed10c0 key_timehandler key_timehandler
0 119 3 1 200 ffffbc8011ecd900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffbc8011ecd4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffbc8011ecd080 nd6_timer nd6_timer
0 116 3 1 200 ffffbc8011eaa8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffbc8011eaa480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffbc8011cecb80 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffbc8011cec740 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffbc8011ceebc0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffbc8011cee780 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffbc8011eaa040 rt_timer rt_timer
0 109 3 0 200 ffffbc8011cee340 vmem_rehash vmem_rehash
0 100 3 0 200 ffffbc8011cec300 entbutler entropy
0 99 3 1 200 ffffbc80117e0b40 viomb balloon
0 98 3 1 200 ffffbc80117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffbc80117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffbc80103f46c0 scsibus0 sccomp
0 29 3 0 200 ffffbc80103f4280 pms0 pmsreset
0 28 3 1 200 ffffbc80103d9ac0 xcall/1 xcall
0 27 1 1 200 ffffbc80103d9680 softser/1
0 26 1 1 200 ffffbc80103d9240 softclk/1
0 25 1 1 200 ffffbc80103d7a80 softbio/1
0 24 1 1 200 ffffbc80103d7640 softnet/1
0 23 1 1 201 ffffbc80103d7200 idle/1
0 22 3 0 200 ffffbc800f1e3a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffbc800f1e3600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffbc800f1e31c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffbc800f1e1a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffbc800f1e15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffbc800f1e1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffbc800f1db9c0 sysmon smtaskq
0 15 3 0 200 ffffbc800f1db580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffbc800f1db140 pmfevent pmfevent
0 13 3 0 200 ffffbc800f1d9980 sopendfree sopendfr
0 12 3 0 200 ffffbc800f1d9540 ifwdog ifwdog
0 11 3 0 200 ffffbc800f1d9100 iflnkst iflnkst
0 10 3 0 200 ffffbc800f1cf940 nfssilly nfssilly
0 9 3 0 200 ffffbc800f1cf500 vdrain vdrain
0 8 3 1 200 ffffbc800f1cf0c0 modunload mod_unld
0 7 3 0 200 ffffbc800ebdb900 xcall/0 xcall
0 6 1 0 200 ffffbc800ebdb4c0 softser/0
0 5 1 0 200 ffffbc800ebdb080 softclk/0
0 4 1 0 200 ffffbc800ebd98c0 softbio/0
0 3 1 0 200 ffffbc800ebd9480 softnet/0
0 2 1 0 201 ffffbc800ebd9040 idle/0
0 > 0 7 0 240 ffffffff8686ea80 swapper
[Locks tracked through LWPs]

****** LWP 1243.1243 (syz-executor2447) @ 0xffffbc8012c48940, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffbc8012bb8a80
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffbc8012c48940 last held: 0xffffbc8012c48940
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 829.829 (syz-executor2447) @ 0xffffbc8012c48500, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:amap_ctor+0xdf sys/uvm/uvm_amap.c:265)
lock address : ffffbc801338c600
type : sleep/adaptive
initialized : netbsd:amap_ctor+0xdf

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 0

relevant lwp : 0xffffbc8012c48500 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x1d08
unlocked* : netbsd:uvm_fault_upper_enter+0x12e9
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffbc801251d740, l_stat=3

relevant lwp : 0xffffbc801251d740 last held: 000000000000000000