assert failed: !samepage (3)

0 views

Skip to first unread message

syzbot

unread,

Apr 18, 2024, 6:54:24 PMApr 18

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: c41df0aeb584 Fix types in pmap_page_clear_attributes so th..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=174a41d7180000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=cf529fcd28ef2ae7e941
compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/8b95cc531e19/disk-c41df0ae.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/17e95eab0667/netbsd-c41df0ae.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cf529f...@syzkaller.appspotmail.com

[ 599.4807060] panic: kernel diagnostic assertion "!samepage" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/arch/x86/x86/pmap.c", line 5213
[ 599.4906953] cpu1: Begin traceback...
[ 599.5406961] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288
[ 599.6806955] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 599.7906950] pmap_enter_ma() at netbsd:pmap_enter_ma+0x194f sys/arch/x86/x86/pmap.c:5213
[ 599.8806972] pmap_enter_default() at netbsd:pmap_enter_default+0x7d sys/arch/x86/x86/pmap.c:4976
[ 599.9806959] uvm_fault_upper_enter() at netbsd:uvm_fault_upper_enter+0x2ab sys/uvm/uvm_fault.c:1697
[ 600.0906967] uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper_direct sys/uvm/uvm_fault.c:1664 [inline]
[ 600.0906967] uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper sys/uvm/uvm_fault.c:1520 [inline]
[ 600.0906967] uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 sys/uvm/uvm_fault.c:910
[ 600.1906979] uvm_fault_wire() at netbsd:uvm_fault_wire+0xac sys/uvm/uvm_fault.c:2634
[ 600.2806967] uvm_map_pageable() at netbsd:uvm_map_pageable+0xbef sys/uvm/uvm_map.c:3575
[ 600.3806954] sys_mlock() at netbsd:sys_mlock+0x2ce sys/uvm/uvm_mmap.c:767
[ 600.4806961] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 600.4806961] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 600.5806967] syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline]
[ 600.5806967] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 600.5806967] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137
[ 600.6006967] --- syscall (number 203 via SYS_syscall) ---
[ 600.6306968] netbsd:syscall+0x28b:
[ 600.6406981] cpu1: End traceback...
[ 600.6406981] fatal breakpoint trap in supervisor mode
[ 600.6506959] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x20000000 ilevel 0 rsp 0xffff9202486e08d0
[ 600.6606962] curlwp 0xffff8a41be376040 pid 885.894 lowest kstack 0xffff9202486dc2c0
Stopped in pid 885.894 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
pmap_enter_ma() at netbsd:pmap_enter_ma+0x194f sys/arch/x86/x86/pmap.c:5213
pmap_enter_default() at netbsd:pmap_enter_default+0x7d sys/arch/x86/x86/pmap.c:4976
uvm_fault_upper_enter() at netbsd:uvm_fault_upper_enter+0x2ab sys/uvm/uvm_fault.c:1697
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper_direct sys/uvm/uvm_fault.c:1664 [inline]
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper sys/uvm/uvm_fault.c:1520 [inline]
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 sys/uvm/uvm_fault.c:910
uvm_fault_wire() at netbsd:uvm_fault_wire+0xac sys/uvm/uvm_fault.c:2634
uvm_map_pageable() at netbsd:uvm_map_pageable+0xbef sys/uvm/uvm_map.c:3575
sys_mlock() at netbsd:sys_mlock+0x2ce sys/uvm/uvm_mmap.c:767
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137
--- syscall (number 203 via SYS_syscall) ---
netbsd:syscall+0x28b:
Panic string: kernel diagnostic assertion "!samepage" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/arch/x86/x86/pmap.c", line 5213
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
893 23935 2 0 0 ffff8a41c783b9c0 syz-executor.1
893 893 2 0 10000000 ffff8a41d7e82100 syz-executor.1
891 891 3 0 180 ffff8a41d7e82980 syz-executor.1 parked
890 892 2 0 0 ffff8a41ae49b300 syz-executor.2
890 890 2 0 10000000 ffff8a41d384e040 syz-executor.2
885 > 894 7 1 0 ffff8a41be376040 syz-executor.4
885 888 2 1 0 ffff8a41e2f04ac0 syz-executor.4
885 885 2 1 10000000 ffff8a41adb5e700 syz-executor.4
4458 877 2 1 100100 ffff8a41ec3b72c0 syz-executor.0
4458 14187 2 0 100100 ffff8a41d7e82540 syz-executor.0
4458 4458 2 0 10000040 ffff8a41d635e500 syz-executor.0
6758 6758 2 0 140 ffff8a41dd4409c0 syz-executor.4
868 868 3 0 180 ffff8a41d384e8c0 syz-executor.2 parked
4674 4674 3 0 180 ffff8a41e3543b00 syz-executor.5 parked
1856 1856 2 1 140 ffff8a41e35436c0 syz-executor.0
831 831 2 1 140 ffff8a41a10719c0 syz-executor.2
3124 3124 2 1 140 ffff8a41d11f7640 syz-executor.1
18215 18215 2 0 0 ffff8a41ce2cc5c0 syz-executor.3
18913 18913 3 0 180 ffff8a41dd5601c0 syz-executor.0 parked
6557 6557 3 1 180 ffff8a41dd560600 syz-executor.4 parked
21077 21077 3 0 180 ffff8a41ccd97780 syz-executor.0 parked
19196 19196 3 1 180 ffff8a41dd638a80 syz-executor.5 parked
17826 17826 3 0 180 ffff8a41dc7e15c0 syz-executor.5 parked
18063 18063 3 0 180 ffff8a41dc7e1a00 syz-executor.5 parked
16459 16459 3 0 180 ffff8a41e2f04240 syz-executor.5 parked
15403 15403 3 0 180 ffff8a41ccd97bc0 syz-executor.2 parked
17612 17612 3 0 180 ffff8a41cdd40b00 syz-executor.2 parked
14755 14755 3 0 180 ffff8a41a5a19980 syz-executor.4 parked
13053 13053 3 1 180 ffff8a41ae2e5bc0 syz-executor.0 parked
12876 12876 3 0 180 ffff8a41d384e480 syz-executor.0 parked
10793 10793 3 0 180 ffff8a41d11f7a80 syz-executor.4 parked
14171 14171 3 0 180 ffff8a41ce676240 syz-executor.0 parked
11392 11392 3 0 180 ffff8a41cf118700 syz-executor.2 parked
11606 11606 3 0 180 ffff8a41cedc6080 syz-executor.2 parked
12384 10431 3 0 1100000 ffff8a41cedc6900 syz-executor.2 vfork
12384 12384 2 1 11000040 ffff8a41c650e540 syz-executor.2
9320 9320 3 0 180 ffff8a41ce676ac0 syz-executor.0 parked
6794 6794 3 1 1c0 ffff8a41a2490200 getty ttyraw
6641 6641 3 0 180 ffff8a41cc345300 syz-executor.3 parked
6501 6501 3 1 180 ffff8a41cf118b40 syz-executor.4 parked
8097 8097 3 1 180 ffff8a41ce2cca00 syz-executor.5 parked
6728 6728 3 0 180 ffff8a41d11f7200 syz-executor.3 parked
6502 5874 3 0 11100000 ffff8a41d2f6f600 syz-executor.3 vfork
6502 6502 2 0 11000040 ffff8a41a95585c0 syz-executor.3
8757 6127 3 1 11100000 ffff8a41b3bab340 syz-executor.5 vfork
8757 8757 2 1 11000040 ffff8a41ab7b59c0 syz-executor.5
4836 4836 3 0 180 ffff8a41a7698700 syz-executor.3 parked
8263 8263 3 1 180 ffff8a41b3bab780 syz-executor.3 parked
7614 7133 3 0 1100000 ffff8a41c783b140 syz-executor.3 vfork
7614 5112 3 1 1100000 ffff8a41b240a6c0 syz-executor.3 vfork
7614 7614 2 1 11000040 ffff8a41c6757940 syz-executor.3
7497 7497 3 0 180 ffff8a41b07c5600 syz-executor.3 parked
4602 4602 3 0 180 ffff8a41a1950900 syz-executor.5 parked
5680 4418 3 0 1100000 ffff8a41a1ad3600 syz-executor.5 vfork
5680 5680 2 1 11000040 ffff8a41b7693300 syz-executor.5
4851 4851 3 0 180 ffff8a41a9d7c640 syz-executor.0 parked
4755 4755 3 0 180 ffff8a41a1ad31c0 syz-executor.0 parked
8155 8155 3 0 180 ffff8a41c650e980 syz-executor.1 parked
6065 4845 3 0 1100000 ffff8a41a1e6f540 syz-executor.1 vfork
6065 6065 2 1 11000040 ffff8a41aeb21080 syz-executor.1
7772 5565 3 0 1100000 ffff8a41b1d81ac0 syz-executor.0 vfork
7772 4747 3 0 1100000 ffff8a41b1d81240 syz-executor.0 vfork
7772 7772 2 1 11000040 ffff8a41a8e5a4c0 syz-executor.0
7900 7900 3 1 180 ffff8a41a0f63b40 syz-executor.4 parked
4497 4497 3 0 180 ffff8a41a8e5a080 syz-executor.3 parked
4511 4511 3 0 180 ffff8a41be376480 syz-executor.3 parked
4486 6096 3 0 1100000 ffff8a41c650e100 syz-executor.3 vfork
4486 4690 3 0 1100000 ffff8a41c6757500 syz-executor.3 vfork
4486 4486 2 0 11000040 ffff8a41b3babbc0 syz-executor.3
3214 3214 3 0 180 ffff8a41a2490640 syz-executor.0 parked
4345 7228 3 0 1100000 ffff8a41ae49b740 syz-executor.0 vfork
4345 4345 2 0 11000040 ffff8a41a1e1ea00 syz-executor.0
4245 4245 3 1 180 ffff8a41ae2e5340 syz-executor.1 parked
7367 6705 3 1 1100000 ffff8a41a0f63700 syz-executor.1 vfork
7367 7367 2 1 11000040 ffff8a41a9d7c200 syz-executor.1
3882 3882 3 0 180 ffff8a41a11f7340 syz-executor.4 parked
5678 5678 3 1 180 ffff8a41a9d7ca80 syz-executor.0 parked
3459 3459 3 1 180 ffff8a41b1d81680 syz-executor.0 parked
4150 4150 3 0 180 ffff8a41b240ab00 syz-executor.3 parked
3393 3393 3 0 180 ffff8a41a7698b40 syz-executor.5 parked
2967 2967 3 1 180 ffff8a41a908b8c0 syz-executor.2 parked
2883 2883 3 1 180 ffff8a41a908b480 syz-executor.1 parked
5716 5716 3 0 180 ffff8a41a0d95b00 syz-executor.1 parked
5052 5052 3 0 180 ffff8a41b7693740 syz-executor.4 parked
3759 3759 3 0 180 ffff8a41adb5eb40 syz-executor.0 parked
4550 4550 3 1 180 ffff8a41a1067300 syz-executor.2 parked
1616 1616 3 1 180 ffff8a41ab7b5580 syz-executor.3 parked
3253 3253 3 0 180 ffff8a41a5a19540 syz-executor.3 parked
2081 2282 3 1 1100000 ffff8a41a5a19100 syz-executor.3 vfork
2081 2622 3 0 1100000 ffff8a41ab7b5140 syz-executor.3 vfork
2081 2081 2 0 11000040 ffff8a41ae516500 syz-executor.3
2868 2868 3 0 180 ffff8a41adb5e2c0 syz-executor.0 parked
2261 2261 3 0 180 ffff8a41ae516940 syz-executor.2 parked
2893 2893 3 1 180 ffff8a41a908b040 syz-executor.2 parked
2792 2226 3 0 1100000 ffff8a41ae5160c0 syz-executor.2 vfork
2792 971 3 0 1100000 ffff8a41aeb21900 syz-executor.2 vfork
2792 2792 2 1 11000040 ffff8a41aeb214c0 syz-executor.2
1233 3360 3 1 180 ffff8a41a76982c0 syz-fuzzer parked
1233 1206 3 1 180 ffff8a41a2490a80 syz-fuzzer parked
1233 1200 3 0 180 ffff8a41a1cb60c0 syz-fuzzer wait
1233 1247 3 1 180 ffff8a41a1cb6500 syz-fuzzer parked
1233 829 2 1 140 ffff8a41a0d95280 syz-fuzzer
1233 941 3 1 180 ffff8a41a0d956c0 syz-fuzzer wait
1233 990 3 0 180 ffff8a41a0aacac0 syz-fuzzer parked
1233 1238 3 0 180 ffff8a41a19504c0 syz-fuzzer wait
1233 1241 3 0 180 ffff8a41a27d5280 syz-fuzzer parked
1233 1080 3 1 180 ffff8a41a1e6f100 syz-fuzzer parked
1233 449 3 1 180 ffff8a41a1e6f980 syz-fuzzer wait
1233 1226 3 0 180 ffff8a41a11dd480 syz-fuzzer wait
1233 1231 3 1 180 ffff8a41a1e1e180 syz-fuzzer parked
1233 1230 2 0 140 ffff8a41a1e1e5c0 syz-fuzzer
1233 1233 3 1 180 ffff8a41a1067b80 syz-fuzzer parked
1004 1004 3 0 180 ffff8a41a0a97200 sshd select
1184 1184 3 0 180 ffff8a41a27d56c0 getty nanoslp
1195 1195 3 0 180 ffff8a41a27d5b00 getty nanoslp
1082 1082 3 0 180 ffff8a41a283d240 getty nanoslp
1107 1107 3 0 180 ffff8a41a283dac0 sshd select
1088 1088 3 0 180 ffff8a41a1071580 powerd kqueue
812 812 3 1 180 ffff8a41a1ad3a40 syslogd kqueue
747 747 3 0 180 ffff8a41a11dd040 dhcpcd poll
742 742 3 1 180 ffff8a41a1950080 dhcpcd poll
466 466 3 1 180 ffff8a41a1071140 dhcpcd poll
602 602 3 0 180 ffff8a41a11f7780 dhcpcd poll
292 292 3 0 180 ffff8a41a0f632c0 dhcpcd poll
485 485 3 0 180 ffff8a41a11f7bc0 dhcpcd poll
291 291 3 1 180 ffff8a41a11dd8c0 dhcpcd poll
1 1 3 0 180 ffff8a4198887100 init wait
0 884 3 1 200 ffff8a41cf1182c0 poolthread pooljob
0 21845 5 0 200 ffff8a41cdd406c0 (zombie)
0 15198 3 0 200 ffff8a41a1cb6940 ktrace ktrwait
0 13468 3 0 200 ffff8a41ce676680 ktrace ktrwait
0 10660 3 1 200 ffff8a41c67570c0 ktrace ktrwait
0 11567 3 1 200 ffff8a41d635e0c0 ktrace ktrwait
0 4646 3 1 200 ffff8a41a283d680 ktrace ktrwait
0 6871 3 0 200 ffff8a41be3768c0 ktrace ktrwait
0 2597 3 1 200 ffff8a41b07c5a40 ktrace ktrwait
0 7238 3 0 200 ffff8a41b240a280 ktrace ktrwait
0 4481 3 1 200 ffff8a41a8e5a900 ktrace ktrwait
0 6487 3 0 200 ffff8a41a9558a00 ktrace ktrwait
0 4341 3 1 200 ffff8a41b7693b80 ktrace ktrwait
0 6199 3 1 200 ffff8a41a9558180 ktrace ktrwait
0 968 3 0 200 ffff8a41a0a97640 physiod physiod
0 196 3 0 200 ffff8a41a0aac680 pooldrain pooldrain
0 195 2 0 240 ffff8a41a0aac240 ioflush
0 194 3 1 200 ffff8a41a0a97a80 pgdaemon pgdaemon
0 170 3 0 200 ffff8a419e9c6a40 usb7 usbevt
0 169 3 0 200 ffff8a419e9c6600 usb6 usbevt
0 168 3 0 200 ffff8a419e9c61c0 usb5 usbevt
0 167 3 0 200 ffff8a419b959a00 usb4 usbevt
0 166 3 1 200 ffff8a419b9595c0 usb3 usbevt
0 165 3 0 200 ffff8a419b959180 usb2 usbevt
0 31 3 1 200 ffff8a41998f49c0 usb1 usbevt
0 63 3 1 200 ffff8a41998f4580 usb0 usbevt
0 126 3 1 200 ffff8a41998f4140 usbtask-dr usbtsk
0 125 3 1 200 ffff8a4198887980 usbtask-hc usbtsk
0 124 3 0 200 ffff8a4196c95b00 swwreboot swwreboot
0 123 3 0 200 ffff8a4198887540 npfgc0 npfgcw
0 122 3 1 200 ffff8a4198855940 rt_free rt_free
0 121 3 0 200 ffff8a4198855500 unpgc unpgc
0 120 2 1 200 ffff8a41988550c0 key_timehandler
0 119 3 1 200 ffff8a4198847900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff8a41988474c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff8a4198847080 nd6_timer nd6_timer
0 116 3 1 200 ffff8a41988328c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff8a4198832480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff8a4198832040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff8a41987debc0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff8a41986ff740 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff8a41986ffb80 icmp_wqinput/0 icmp_wqinput
0 110 2 1 200 ffff8a41987de340 rt_timer
0 109 3 0 200 ffff8a41987de780 vmem_rehash vmem_rehash
0 100 3 0 200 ffff8a41986ff300 entbutler entropy
0 99 3 1 200 ffff8a419813eb40 viomb balloon
0 98 3 1 200 ffff8a419813e700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff8a419813e2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffff8a4196c956c0 scsibus0 sccomp
0 29 3 0 200 ffff8a4196c95280 pms0 pmsreset
0 28 3 1 200 ffff8a4196bb5ac0 xcall/1 xcall
0 27 1 1 200 ffff8a4196bb5680 softser/1
0 26 1 1 200 ffff8a4196bb5240 softclk/1
0 25 1 1 200 ffff8a4196b90a80 softbio/1
0 24 1 1 200 ffff8a4196b90640 softnet/1
0 23 1 1 201 ffff8a4196b90200 idle/1
0 22 3 0 200 ffff8a42c4f31a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff8a42c4f31600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff8a42c4f311c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff8a42c4f44a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff8a42c4f445c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff8a42c4f44180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff8a42c4f579c0 sysmon smtaskq
0 15 3 1 200 ffff8a42c4f57580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff8a42c4f57140 pmfevent pmfevent
0 13 3 0 200 ffff8a42c4f6e980 sopendfree sopendfr
0 12 3 0 200 ffff8a42c4f6e540 ifwdog ifwdog
0 11 3 0 200 ffff8a42c4f6e100 iflnkst iflnkst
0 10 3 1 200 ffff8a42c5f97940 nfssilly nfssilly
0 9 3 1 200 ffff8a42c5f97500 pooldisp pooldisp
0 8 3 1 200 ffff8a42c5f970c0 modunload mod_unld
0 7 3 0 200 ffff8a42c5fc2900 xcall/0 xcall
0 6 1 0 200 ffff8a42c5fc24c0 softser/0
0 5 1 0 200 ffff8a42c5fc2080 softclk/0
0 4 1 0 200 ffff8a42c5fed8c0 softbio/0
0 3 1 0 200 ffff8a42c5fed480 softnet/0
0 2 1 0 201 ffff8a42c5fed040 idle/0
0 > 0 7 0 240 ffffffff8678ac00 swapper
[Locks tracked through LWPs]

****** LWP 890.892 (syz-executor.2) @ 0xffff8a41ae49b300, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xbf sys/kern/vfs_vnode.c:1438)
lock address : ffff8a41d62c9740
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xbf
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41ae49b300 last held: 0xffff8a41ae49b300
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xffff8a41ae49b300 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:cache_vnode_init+0x3d sys/kern/vfs_cache.c:1148)
lock address : ffff8a41d62c9780
type : sleep/adaptive
initialized : netbsd:cache_vnode_init+0x3d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41ae49b300 last held: 0xffff8a41ae49b300
last locked* : netbsd:cache_lookup+0x482
unlocked : netbsd:namei_tryemulroot+0x2abd
owner/count : 0xffff8a41ae49b300 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 885.894 (syz-executor.4) @ 0xffff8a41be376040, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)
lock address : ffff8a41dff09100
type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8a41be376040 last held: 0xffff8a41be376040
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : netbsd:uvm_fault_lower_enter+0x86a
owner/count : 0xffff8a41be376040 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2872)
lock address : ffff8a41d11f1380
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8a41be376040 last held: 0xffff8a41be376040
last locked* : netbsd:pmap_enter_ma+0x3c0
unlocked : netbsd:pmap_enter_ma+0xb24
owner field : 0xffff8a41be376040 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 885.888 (syz-executor.4) @ 0xffff8a41e2f04ac0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x71 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x71
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8a41e2f04ac0 last held: 000000000000000000
last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 18215.18215 (syz-executor.3) @ 0xffff8a41ce2cc5c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x4c5 sys/kern/kern_fork.c:366)
lock address : ffff8a41a1b8fa90
type : sleep/adaptive
initialized : netbsd:fork1+0x4c5
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41ce2cc5c0 last held: 0xffff8a41ce2cc5c0
last locked* : netbsd:exit1+0x393
unlocked : netbsd:execve_runproc+0x2c3b
owner/count : 0xffff8a41ce2cc5c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_map_setup+0x282 sys/uvm/uvm_map.c:4786)
lock address : netbsd:kernel_map_store+0x8
type : sleep/adaptive
initialized : netbsd:uvm_map_setup+0x282
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41ce2cc5c0 last held: 0xffff8a41ce2cc5c0
last locked* : netbsd:vm_map_lock+0x146
unlocked : netbsd:uvm_unmap1+0x6b
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:uvm_obj_init+0xee sys/uvm/uvm_object.c:70)
lock address : ffff8a41e7915700
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0xee
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41ce2cc5c0 last held: 0xffff8a41ce2cc5c0
last locked* : netbsd:uvm_map_lock_entry+0xe5
unlocked : netbsd:uvm_fault_lower_enter+0x840
owner/count : 0xffff8a41ce2cc5c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_bootstrap+0xcc sys/arch/x86/x86/pmap.c:1237)
lock address : netbsd:kernel_pmap_store+0x180
type : sleep/adaptive
initialized : netbsd:pmap_bootstrap+0xcc
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41ce2cc5c0 last held: 000000000000000000
last locked : netbsd:pmap_unwire+0x8a
unlocked* : netbsd:pmap_unwire+0x2c8
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffff8a41a1950080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8a41a1950080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 466.466 (dhcpcd) @ 0xffff8a41a1071140, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8a41a1071140 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffff8a41a11f7bc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a41a11f7bc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffff8a41a11dd8c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8a41a11dd8c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffff8a4196bb5240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8a4196bb5240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff8a42c4f6e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8a42c4f6e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8678ac00, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8678ac00 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8a41be376040 last held: 0xffff8a41be376040
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff920000007180 0045 00000000 0x0 0x0
0xffff920000007200 0045 00000000 0x0 0x0
0xffff920000007280 0045 00000000 0x0 0x0
0xffff920000007300 0045 00000000 0x0 0x0
0xffff920000007380 0045 00000000 0x0 0x0
0xffff920000007400 0045 00000000 0x0 0x0
0xffff920000007480 0045 00000000 0x0 0x0
0xffff920000007500 0045 00000000 0x0 0x0
0xffff920000007580 0045 00000000 0x0 0x0
0xffff920000007600 0045 00000000 0x0 0x0
0xffff920000007680 0045 00000000 0x0 0x0
0xffff920000007700 0041 00000000 0x0 0x0
0xffff920000007780 0041 00000000 0x0 0x0
0xffff920000007800 0041 00000000 0x0 0x0
0xffff920000007880 0041 00000000 0x0 0x0
0xffff920000007900 0041 00000000 0x0 0x0
0xffff920000007980 0041 00000000 0x0 0x0
0xffff920000007a00 0041 00000000 0x0 0x0
0xffff920000007a80 0041 00000000 0x0 0x0
0xffff920000007b00 0041 00000000 0x0 0x0
0xffff920000007b80 0041 00000000 0x0 0x0
0xffff920000007c00 0041 00000000 0x0 0x0
0xffff920000007c80 0041 00000000 0x0 0x0
0xffff920000007d00 0041 00000000 0x0 0x0
0xffff920000007d80 0041 00000000 0x0 0x0
0xffff920000007e00 0041 00000000 0x0 0x0
0xffff920000007e80 0041 00000000 0x0 0x0
0xffff920000007f00 0041 00000000 0x0 0x0
0xffff920000007f80 0041 00000000 0x0 0x0
0xffff920000008000 0041 00000000 0x0 0x0
0xffff920000008080 0041 00000000 0x0 0x0
0xffff920000008100 0041 00000000 0x0 0x0
0xffff920000008180 0041 00000000 0x0 0x0
0xffff920000008200 0041 00000000 0x0 0x0
0xffff920000008280 0041 00000000 0x0 0x0
0xffff920000008300 0041 00000000 0x0 0x0
0xffff920000008380 0041 00000000 0x0 0x0
0xffff920000008400 0041 00000000 0x0 0x0
0xffff920000008480 0041 00000000 0x0 0x0
0xffff920000008500 0041 00000000 0x0 0x0
0xffff920000008580 0041 00000000 0x0 0x0
0xffff920000008600 0045 00000000 0x0 0x0
0xffff920000008680 0041 00000000 0x0 0x0
0xffff920000008700 0041 00000000 0x0 0x0
0xffff920000008780 0041 00000000 0x0 0x0
0xffff920000008800 0041 00000000 0x0 0x0
0xffff920000008880 0041 00000000 0x0 0x0
0xffff920000008900 0041 00000000 0x0 0x0
0xffff920000008980 0041 00000000 0x0 0x0
0xffff920000008a00 0041 00000000 0x0 0x0
0xffff920000008a80 0041 00000000 0x0 0x0
0xffff920000008b00 0041 00000000 0x0 0x0
0xffff920000008b80 0041 00000000 0x0 0x0
0xffff920000008c00 0041 00000000 0x0 0x0
0xffff920000008c80 0041 00000000 0x0 0x0
0xffff920000008d00 0045 00000000 0x0 0x0
0xffff920000008d80 0041 00000000 0x0 0x0
0xffff920000008e00 0041 00000000 0x0 0x0
0xffff920000008e80 0041 00000000 0x0 0x0
0xffff920000008f00 0041 00000000 0x0 0x0
0xffff920000008f80 0041 00000000 0x0 0x0
0xffff920000009000 0041 00000000 0x0 0x0
0xffff920000009080 0041 00000000 0x0 0x0
0xffff920000009100 0041 00000000 0x0 0x0
0xffff920000009180 0045 00000000 0x0 0x0
0xffff920000009200 0041 00000000 0x0 0x0
0xffff920000009280 0041 00000000 0x0 0x0
0xffff920000009300 0041 00000000 0x0 0x0
0xffff920000009380 0041 00000000 0x0 0x0
0xffff920000009400 0041 00000000 0x0 0x0
0xffff920000009480 0041 00000000 0x0 0x0
0xffff920000009500 0041 00000000 0x0 0x0
0xffff920000009580 0041 00000000 0x0 0x0
0xffff920000009600 0041 00000000 0x0 0x0
0xffff920000009680 0041 00000000 0x0 0x0
0xffff920000009700 0041 00000000 0x0 0x0
0xffff920000009780 0041 00000000 0x0 0x0
0xffff920000009800 0041 00000000 0x0 0x0
0xffff920000009880 0041 00000000 0x0 0x0
0xffff920000009900 0041 00000000 0x0 0x0
0xffff920000009980 0041 00000000 0x0 0x0
0xffff920000009a00 0041 00000000 0x0 0x0
0xffff920000009a80 0041 00000000 0x0 0x0
0xffff920000009b00 0041 00000000 0x0 0x0
0xffff920000009b80 0041 00000000 0x0 0x0
0xffff920000009c00 0041 00000000 0x0 0x0
0xffff920000009c80 0041 00000000 0x0 0x0
0xffff920000009d00 0041 00000000 0x0 0x0
0xffff920000009d80 0041 00000000 0x0 0x0
0xffff920000009e00 0041 00000000 0x0 0x0
0xffff920000009e80 0041 00000000 0x0 0x0
0xffff920000009f00 0041 00000000 0x0 0x0
0xffff920000009f80 0045 00000000 0x0 0x0
0xffff92000000a000 0041 00000000 0x0 0x0
0xffff92000000a080 0041 00000000 0x0 0x0
0xffff92000000a100 0041 00000000 0x0 0x0
0xffff92000000a180 0041 00000000 0x0 0x0
0xffff92000000a200 0041 00000000 0x0 0x0
0xffff92000000a280 0041 00000000 0x0 0x0
0xffff92000000a300 0041 00000000 0x0 0x0
0xffff92000000a380 0041 00000000 0x0 0x0
0xffff92000000a400 0041 00000000 0x0 0x0
0xffff92000000a480 0041 00000000 0x0 0x0
0xffff92000000a500 0041 00000000 0x0 0x0
0xffff92000000a580 0041 00000000 0x0 0x0
0xffff92000000a600 0041 00000000 0x0 0x0
0xffff92000000a680 0041 00000000 0x0 0x0
0xffff92000000a700 0041 00000000 0x0 0x0
0xffff92000000a780 0041 00000000 0x0 0x0
0xffff92000000a800 0041 00000000 0x0 0x0
0xffff92000000a880 0041 00000000 0x0 0x0
0xffff92000000a900 0041 00000000 0x0 0x0
0xffff92000000a980 0041 00000000 0x0 0x0
0xffff92000000aa00 0041 00000000 0x0 0x0
0xffff92000000aa80 0041 00000000 0x0 0x0
0xffff92000000ab00 0041 00000000 0x0 0x0
0xffff92000000ab80 0041 00000000 0x0 0x0
0xffff92000000ac00 0041 00000000 0x0 0x0
0xffff92000000ac80 0041 00000000 0x0 0x0
0xffff92000000ad00 0041 00000000 0x0 0x0
0xffff92000000ad80 0041 00000000 0x0 0x0
0xffff92000000ae00 0041 00000000 0x0 0x0
0xffff92000000ae80 0041 00000000 0x0 0x0
0xffff92000000af00 0041 00000000 0x0 0x0
0xffff92000000af80 0041 00000000 0x0 0x0
0xffff92000000b000 0045 00000000 0x0 0x0
0xffff92000000b080 0041 00000000 0x0 0x0
0xffff92000000b100 0041 00000000 0x0 0x0
0xffff92000000b180 0041 00000000 0x0 0x0
0xffff92000000b200 0045 00000000 0x0 0x0
0xffff92000000b280 0041 00000000 0x0 0x0
0xffff92000000b300 0045 00000000 0x0 0x0
0xffff92000000b380 0045 00000000 0x0 0x0
0xffff92000000b400 0045 00000000 0x0 0x0
0xffff92000000b480 0045 00000000 0x0 0x0
0xffff92000000b500 0045 00000000 0x0 0x0
0xffff92000000b580 0041 00000000 0x0 0x0
0xffff92000000b600 0045 00000000 0x0 0x0
0xffff92000000b680 0045 00000000 0x0 0x0
0xffff92000000b700 0045 00000000 0x0 0x0
0xffff92000000b780 0045 00000000 0x0 0x0
0xffff92000000b800 0045 00000000 0x0 0x0
0xffff92000000b880 0045 00000000 0x0 0x0
0xffff92000000b900 0045 00000000 0x0 0x0
0xffff92000000b980 0045 00000000 0x0 0x0
0xffff92000000ba00 0045 00000000 0x0 0x0
0xffff92000000ba80 0045 00000000 0x0 0x0
0xffff92000000bb00 0045 00000000 0x0 0x0
0xffff92000000bb80 0045 00000000 0x0 0x0
0xffff92000000bc00 0045 00000000 0x0 0x0
0xffff92000000bc80 0045 00000000 0x0 0x0
0xffff92000000bd00 0045 00000000 0x0 0x0
0xffff92000000bd80 0045 00000000 0x0 0x0
0xffff92000000be00 0045 00000000 0x0 0x0
0xffff92000000be80 0045 00000000 0x0 0x0
0xffff92000000bf00 0045 00000000 0x0 0x0
0xffff92000000bf80 0045 00000000 0x0 0x0
0xffff92000000c000 0045 00000000 0x0 0x0
0xffff92000000c080 0045 00000000 0x0 0x0
0xffff92000000c100 0045 00000000 0x0 0x0
0xffff92000000c180 0045 00000000 0x0 0x0
0xffff92000000c200 0045 00000000 0x0 0x0
0xffff92000000c280 0045 00000000 0x0 0x0
0xffff92000000c300 0045 00000000 0x0 0x0
0xffff92000000c380 0045 00000000 0x0 0x0
0xffff92000000c400 0045 00000000 0x0 0x0
0xffff92000000c480 0045 00000000 0x0 0x0
0xffff92000000c500 0045 00000000 0x0 0x0
0xffff92000000c580 0045 00000000 0x0 0x0
0xffff92000000c600 0045 00000000 0x0 0x0
0xffff92000000c680 0045 00000000 0x0 0x0
0xffff92000000c700 0045 00000000 0x0 0x0
0xffff92000000c780 0045 00000000 0x0 0x0
0xffff92000000c800 0041 00000000 0x0 0x0
0xffff92000000c880 0045 00000000 0x0 0x0
0xffff92000000c900 0045 00000000 0x0 0x0
0xffff92000000c980 0045 00000000 0x0 0x0
0xffff92000000ca00 0041 00000000 0x0 0x0
0xffff92000000ca80 0045 00000000 0x0 0x0
0xffff92000000cb00 0045 00000000 0x0 0x0
0xffff92000000cb80 0045 00000000 0x0 0x0
0xffff92000000cc00 0041 00000000 0x0 0x0
0xffff92000000cc80 0041 00000000 0x0 0x0
0xffff92000000cd00 0041 00000000 0x0 0x0
0xffff92000000cd80 0045 00000000 0x0 0x0
0xffff92000000ce00 0041 00000000 0x0 0x0
0xffff92000000ce80 0045 00000000 0x0 0x0
0xffff92000000cf00 0041 00000000 0x0 0x0
0xffff92000000cf80 0041 00000000 0x0 0x0
0xffff92000000d000 0041 00000000 0x0 0x0
0xffff92000000d080 0041 00000000 0x0 0x0
0xffff92000000d100 0041 00000000 0x0 0x0
0xffff92000000d180 0041 00000000 0x0 0x0
0xffff92000000d200 0041 00000000 0x0 0x0
0xffff92000000d280 0041 00000000 0x0 0x0
0xffff92000000d300 0041 00000000 0x0 0x0
0xffff92000000d380 0041 00000000 0x0 0x0
0xffff92000000d400 0041 00000000 0x0 0x0
0xffff92000000d480 0041 00000000 0x0 0x0
0xffff92000000d500 0041 00000000 0x0 0x0
0xffff92000000d580 0041 00000000 0x0 0x0
0xffff92000000d600 0041 00000000 0x0 0x0
0xffff92000000d680 0041 00000000 0x0 0x0
0xffff92000000d700 0041 00000000 0x0 0x0
0xffff92000000d780 0041 00000000 0x0 0x0
0xffff92000000d800 0045 00000000 0x0 0x0
0xffff92000000d880 0041 00000000 0x0 0x0
0xffff92000000d900 0041 00000000 0x0 0x0
0xffff92000000d980 0041 00000000 0x0 0x0
0xffff92000000da00 0041 00000000 0x0 0x0
0xffff92000000da80 0041 00000000 0x0 0x0
0xffff92000000db00 0045 00000000 0x0 0x0
0xffff92000000db80 0041 00000000 0x0 0x0
0xffff92000000dc00 0045 00000000 0x0 0x0
0xffff92000000dc80 0045 00000000 0x0 0x0
0xffff92000000dd00 0041 00000000 0x0 0x0
0xffff92000000dd80 0041 00000000 0x0 0x0
0xffff92000000de00 0045 00000000 0x0 0x0
0xffff92000000de80 0045 00000000 0x0 0x0
0xffff92000000df00 0041 00000000 0x0 0x0
0xffff92000000df80 0045 00000000 0x0 0x0
0xffff92000000e000 0045 00000000 0x0 0x0
0xffff92000000e080 0045 00000000 0x0 0x0
0xffff92000000e100 0045 00000000 0x0 0x0
0xffff92000000e180 0041 00000000 0x0 0x0
0xffff92000000e200 0041 00000000 0x0 0x0
0xffff92000000e280 0041 00000000 0x0 0x0
0xffff92000000e300 0045 00000000 0x0 0x0
0xffff92000000e380 0045 00000000 0x0 0x0
0xffff92000000e400 0041 00000000 0x0 0x0
0xffff92000000e480 0041 00000000 0x0 0x0
0xffff92000000e500 0041 00000000 0x0 0x0
0xffff92000000e580 0045 00000000 0x0 0x0
0xffff92000000e600 0041 00000000 0x0 0x0
0xffff92000000e680 0041 00000000 0x0 0x0
0xffff92000000e700 0045 00000000 0x0 0x0
0xffff92000000e780 0045 00000000 0x0 0x0
0xffff92000000e800 0041 00000000 0x0 0x0
0xffff92000000e880 0045 00000000 0x0 0x0
0xffff92000000e900 0041 00000000 0x0 0x0
0xffff92000000e980 0041 00000000 0x0 0x0
0xffff92000000ea00 0041 00000000 0x0 0x0
0xffff92000000ea80 0045 00000000 0x0 0x0
0xffff92000000eb00 0045 00000000 0x0 0x0
0xffff92000000eb80 0041 00000000 0x0 0x0
0xffff92000000ec00 0045 00000000 0x0 0x0
0xffff92000000ec80 0041 00000000 0x0 0x0
0xffff92000000ed00 0041 00000000 0x0 0x0
0xffff92000000ed80 0041 00000000 0x0 0x0
0xffff92000000ee00 0041 00000000 0x0 0x0
0xffff92000000ee80 0041 00000000 0x0 0x0
0xffff92000000ef00 0041 00000000 0x0 0x0
0xffff92000000ef80 0041 00000000 0x0 0x0
0xffff92000000f000 0041 00000000 0x0 0x0
0xffff92000000f080 0041 00000000 0x0 0x0
0xffff92000000f100 0041 00000000 0x0 0x0
0xffff92000000f180 0041 00000000 0x0 0x0
0xffff92000000f200 0041 00000000 0x0 0x0
0xffff92000000f280 0045 00000000 0x0 0x0
0xffff92000000f300 0041 00000000 0x0 0x0
0xffff92000000f380 0045 00000000 0x0 0x0
0xffff92000000f400 0045 00000000 0x0 0x0
0xffff92000000f480 0041 00000000 0x0 0x0
0xffff92000000f500 0045 00000000 0x0 0x0
0xffff92000000f580 0041 00000000 0x0 0x0
0xffff92000000f600 0045 00000000 0x0 0x0
0xffff92000000f680 0041 00000000 0x0 0x0
0xffff92000000f700 0041 00000000 0x0 0x0
0xffff92000000f780 0041 00000000 0x0 0x0
0xffff92000000f800 0041 00000000 0x0 0x0
0xffff92000000f880 0045 00000000 0x0 0x0
0xffff92000000f900 0041 00000000 0x0 0x0
0xffff92000000f980 0041 00000000 0x0 0x0
0xffff92000000fa00 0041 00000000 0x0 0x0
0xffff92000000fa80 0041 00000000 0x0 0x0
0xffff92000000fb00 0041 00000000 0x0 0x0
0xffff92000000fb80 0041 00000000 0x0 0x0
0xffff92000000fc00 0041 00000000 0x0 0x0
0xffff92000000fc80 0041 00000000 0x0 0x0
0xffff92000000fd00 0045 00000000 0x0 0x0
0xffff92000000fd80 0045 00000000 0x0 0x0
0xffff92000000fe00 0041 00000000 0x0 0x0
0xffff92000000fe80 0045 00000000 0x0 0x0
0xffff92000000ff00 0041 00000000 0x0 0x0
0xffff92000000ff80 0041 00000000 0x0 0x0
0xffff920000010000 0041 00000000 0x0 0x0
0xffff920000010080 0045 00000000 0x0 0x0
0xffff920000010100 0041 00000000 0x0 0x0
0xffff920000010180 0041 00000000 0x0 0x0
0xffff920000010200 0045 00000000 0x0 0x0
0xffff920000010280 0041 00000000 0x0 0x0
0xffff920000010300 0041 00000000 0x0 0x0
0xffff920000010380 0041 00000000 0x0 0x0
0xffff920000010400 0041 00000000 0x0 0x0
0xffff920000010480 0041 00000000 0x0 0x0
0xffff920000010500 0045 00000000 0x0 0x0
0xffff920000010580 0041 00000000 0x0 0x0
0xffff920000010600 0041 00000000 0x0 0x0
0xffff920000010680 0041 00000000 0x0 0x0
0xffff920000010700 0041 00000000 0x0 0x0
0xffff920000010780 0041 00000000 0x0 0x0
0xffff920000010800 0041 00000000 0x0 0x0
0xffff920000010880 0041 00000000 0x0 0x0
0xffff920000010900 0041 00000000 0x0 0x0
0xffff920000010980 0045 00000000 0x0 0x0
0xffff920000010a00 0045 00000000 0x0 0x0
0xffff920000010a80 0041 00000000 0x0 0x0
0xffff920000010b00 0045 00000000 0x0 0x0
0xffff920000010b80 0041 00000000 0x0 0x0
0xffff920000010c00 0041 00000000 0x0 0x0
0xffff920000010c80 0041 00000000 0x0 0x0
0xffff920000010d00 0041 00000000 0x0 0x0
0xffff920000010d80 0041 00000000 0x0 0x0
0xffff920000010e00 0041 00000000 0x0 0x0
0xffff920000010e80 0045 00000000 0x0 0x0
0xffff920000010f00 0041 00000000 0x0 0x0
0xffff920000010f80 0045 00000000 0x0 0x0
0xffff920000011000 0041 00000000 0x0 0x0
0xffff920000011080 0041 00000000 0x0 0x0
0xffff920000011100 0041 00000000 0x0 0x0
0xffff920000011180 0041 00000000 0x0 0x0
0xffff920000011200 0041 00000000 0x0 0x0
0xffff920000011280 0041 00000000 0x0 0x0
0xffff920000011300 0041 00000000 0x0 0x0
0xffff920000011380 0041 00000000 0x0 0x0
0xffff920000011400 0041 00000000 0x0 0x0
0xffff920000011480 0041 00000000 0x0 0x0
0xffff920000011500 0041 00000000 0x0 0x0
0xffff920000011580 0041 00000000 0x0 0x0
0xffff920000011600 0041 00000000 0x0 0x0
0xffff920000011680 0045 00000000 0x0 0x0
0xffff920000011700 0041 00000000 0x0 0x0
0xffff920000011780 0041 00000000 0x0 0x0
0xffff920000011800 0041 00000000 0x0 0x0
0xffff920000011880 0041 00000000 0x0 0x0
0xffff920000011900 0041 00000000 0x0 0x0
0xffff920000011980 0041 00000000 0x0 0x0
0xffff920000011a00 0045 00000000 0x0 0x0
0xffff920000011a80 0041 00000000 0x0 0x0
0xffff920000011b00 0041 00000000 0x0 0x0
0xffff920000011b80 0041 00000000 0x0 0x0
0xffff920000011c00 0045 00000000 0x0 0x0
0xffff920000011c80 0045 00000000 0x0 0x0
0xffff920000011d00 0041 00000000 0x0 0x0
0xffff920000011d80 0041 00000000 0x0 0x0
0xffff920000011e00 0041 00000000 0x0 0x0
0xffff920000011e80 0041 00000000 0x0 0x0
0xffff920000011f00 0045 00000000 0x0 0x0
0xffff920000011f80 0045 00000000 0x0 0x0
0xffff920000012000 0041 00000000 0x0 0x0
0xffff920000012080 0041 00000000 0x0 0x0
0xffff920000012100 0045 00000000 0x0 0x0
0xffff920000012180 0045 00000000 0x0 0x0
0xffff920000012200 0041 00000000 0x0 0x0
0xffff920000012280 0041 00000000 0x0 0x0
0xffff920000012300 0041 00000000 0x0 0x0
0xffff920000012380 0041 00000000 0x0 0x0
0xffff920000012400 0041 00000000 0x0 0x0
0xffff920000012480 0041 00000000 0x0 0x0
0xffff920000012500 0041 00000000 0x0 0x0
0xffff920000012580 0041 00000000 0x0 0x0
0xffff920000012600 0041 00000000 0x0 0x0
0xffff920000012680 0041 00000000 0x0 0x0
0xffff920000012700 0041 00000000 0x0 0x0
0xffff920000012780 0041 00000000 0x0 0x0
0xffff920000012800 0041 00000000 0x0 0x0
0xffff920000012880 0041 00000000 0x0 0x0
0xffff920000012900 0041 00000000 0x0 0x0
0xffff920000012980 0041 00000000 0x0 0x0
0xffff920000012a00 0041 00000000 0x0 0x0
0xffff920000012a80 0045 00000000 0x0 0x0
0xffff920000012b00 0001 00000000 0x0 0x0
0xffff920000012b80 0001 00000000 0x0 0x0
0xffff920000012c00 0001 00000000 0x0 0x0
0xffff920000012c80 0001 00000000 0x0 0x0
0xffff920000012d00 0001 00000000 0x0 0x0
0xffff920000012d80 0001 00000000 0x0 0x0
0xffff920000012e00 0001 00000000 0x0 0x0
0xffff920000012e80 0001 00000000 0x0 0x0
0xffff920000012f00 0001 00000000 0x0 0x0
0xffff920000012f80 0001 00000000 0x0 0x0
0xffff920000013000 0001 00000000 0x0 0x0
0xffff920000013080 0001 00000000 0x0 0x0
0xffff920000013100 0001 00000000 0x0 0x0
0xffff920000013180 0001 00000000 0x0 0x0
0xffff920000013200 0001 00000000 0x0 0x0
0xffff920000013280 0001 00000000 0x0 0x0
0xffff920000013300 0001 00000000 0x0 0x0
0xffff920000013380 0001 00000000 0x0 0x0
0xffff920000013400 0001 00000000 0x0 0x0
0xffff920000013480 0001 00000000 0x0 0x0
0xffff920000013500 0001 00000000 0x0 0x0
0xffff920000013580 0001 00000000 0x0 0x0
0xffff920000013600 0001 00000000 0x0 0x0
0xffff920000013680 0001 00000000 0x0 0x0
0xffff920000013700 0001 00000000 0x0 0x0
0xffff920000013780 0001 00000000 0x0 0x0
0xffff920000013800 0001 00000000 0x0 0x0
0xffff920000013880 0001 00000000 0x0 0x0
0xffff920000013900 0001 00000000 0x0 0x0
0xffff920000013980 0001 00000000 0x0 0x0
0xffff920000013a00 0001 00000000 0x0 0x0
0xffff920000013a80 0001 00000000 0x0 0x0
0xffff920000013b00 0001 00000000 0x0 0x0
0xffff920000013b80 0001 00000000 0x0 0x0
0xffff920000013c00 0001 00000000 0x0 0x0
0xffff920000013c80 0001 00000000 0x0 0x0
0xffff920000013d00 0001 00000000 0x0 0x0
0xffff920000013d80 0001 00000000 0x0 0x0
0xffff920000013e00 0001 00000000 0x0 0x0
0xffff920000013e80 0001 00000000 0x0 0x0
0xffff920000013f00 0001 00000000 0x0 0x0
0xffff920000013f80 0001 00000000 0x0 0x0
0xffff920000014000 0001 00000000 0x0 0x0
0xffff920000014080 0001 00000000 0x0 0x0
0xffff920000014100 0001 00000000 0x0 0x0
0xffff920000014180 0001 00000000 0x0 0x0
0xffff920000014200 0001 00000000 0x0 0x0
0xffff920000014280 0001 00000000 0x0 0x0
0xffff920000014300 0001 00000000 0x0 0x0
0xffff920000014380 0001 00000000 0x0 0x0
0xffff920000014400 0001 00000000 0x0 0x0
0xffff920000014480 0001 00000000 0x0 0x0
0xffff920000014500 0001 00000000 0x0 0x0
0xffff920000014580 0001 00000000 0x0 0x0
0xffff920000014600 0041 00000000 0x0 0x0
0xffff920000014680 0041 00000000 0x0 0x0
0xffff920000014700 0041 00000000 0x0 0x0
0xffff920000014780 0041 00000000 0x0 0x0
0xffff920000014800 0041 00000000 0x0 0x0
0xffff920000014880 0041 00000000 0x0 0x0
0xffff920000014900 0041 00000000 0x0 0x0
0xffff920000014980 0041 00000000 0x0 0x0
0xffff920000014a00 0041 00000000 0x0 0x0
0xffff920000014a80 0041 00000000 0x0 0x0
0xffff920000014b00 0041 00000000 0x0 0x0
0xffff920000014b80 0041 00000000 0x0 0x0
0xffff920000014c00 0041 00000000 0x0 0x0
0xffff920000014c80 0041 00000000 0x0 0x0
0xffff920000014d00 0041 00000000 0x0 0x0
0xffff920000014d80 0041 00000000 0x0 0x0
0xffff920000014e00 0041 00000000 0x0 0x0
0xffff920000014e80 0041 00000000 0x0 0x0
0xffff920000014f00 0041 00000000 0x0 0x0
0xffff920000014f80 0041 00000000 0x0 0x0
0xffff920000015000 0041 00000000 0x0 0x0
0xffff920000015080 0041 00000000 0x0 0x0
0xffff920000015100 0041 00000000 0x0 0x0
0xffff920000015180 0041 00000000 0x0 0x0
0xffff920000015200 0041 00000000 0x0 0x0
0xffff920000015280 0041 00000000 0x0 0x0
0xffff920000015300 0041 00000000 0x0 0x0
0xffff920000015380 0041 00000000 0x0 0x0
0xffff920000015400 0041 00000000 0x0 0x0
0xffff920000015480 0041 00000000 0x0 0x0
0xffff920000015500 0041 00000000 0x0 0x0
0xffff920000015580 0041 00000000 0x0 0x0
0xffff920000015600 0041 00000000 0x0 0x0
0xffff920000015680 0041 00000000 0x0 0x0
0xffff920000015700 0041 00000000 0x0 0x0
0xffff920000015780 0041 00000000 0x0 0x0
0xffff920000015800 0041 00000000 0x0 0x0
0xffff920000015880 0041 00000000 0x0 0x0
0xffff920000015900 0041 00000000 0x0 0x0
0xffff920000015980 0041 00000000 0x0 0x0
0xffff920000015a00 0041 00000000 0x0 0x0
0xffff920000015a80 0041 00000000 0x0 0x0
0xffff920000015b00 0001 00000000 0x0 0x0
0xffff920000015b80 0001 00000000 0x0 0x0
0xffff920000015c00 0001 00000000 0x0 0x0
0xffff920000015c80 0001 00000000 0x0 0x0
0xffff920000015d00 0001 00000000 0x0 0x0
0xffff920000015d80 0001 00000000 0x0 0x0
0xffff920000015e00 0001 00000000 0x0 0x0
0xffff920000015e80 0001 00000000 0x0 0x0
0xffff920000015f00 0001 00000000 0x0 0x0
0xffff920000015f80 0001 00000000 0x0 0x0
0xffff920000016000 0001 00000000 0x0 0x0
0xffff920000016080 0001 00000000 0x0 0x0
0xffff920000016100 0001 00000000 0x0 0x0
0xffff920000016180 0001 00000000 0x0 0x0
0xffff920000016200 0001 00000000 0x0 0x0
0xffff920000016280 0001 00000000 0x0 0x0
0xffff920000016300 0001 00000000 0x0 0x0
0xffff920000016380 0001 00000000 0x0 0x0
0xffff920000016400 0001 00000000 0x0 0x0
0xffff920000016480 0001 00000000 0x0 0x0
0xffff920000016500 0001 00000000 0x0 0x0
0xffff920000016580 0001 00000000 0x0 0x0
0xffff920000016600 0001 00000000 0x0 0x0
0xffff920000016680 0001 00000000 0x0 0x0
0xffff920000016700 0001 00000000 0x0 0x0
0xffff920000016780 0001 00000000 0x0 0x0
0xffff920000016800 0001 00000000 0x0 0x0
0xffff920000016880 0001 00000000 0x0 0x0
0xffff920000016900 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Apr 20, 2024, 6:54:18 PMApr 20

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 7202b8032419 libntp: clean up MKREPRO_TIMESTAMP handling
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=12f4b480980000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=cf529fcd28ef2ae7e941
compiler: g++ (Debian 12.2.0-14) 12.2.0

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1545920d180000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11f4aef7180000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/2c187e2a8219/disk-7202b803.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/0c757bee3f26/netbsd-7202b803.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cf529f...@syzkaller.appspotmail.com

[ 58.7111400] panic: kernel diagnostic assertion "!samepage" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/arch/x86/x86/pmap.c", line 5213
[ 58.7111400] cpu0: Begin traceback...
[ 58.7311390] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288
[ 58.7911369] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 58.8311367] pmap_enter_ma() at netbsd:pmap_enter_ma+0x194f sys/arch/x86/x86/pmap.c:5213
[ 58.8711379] pmap_enter_default() at netbsd:pmap_enter_default+0x7d sys/arch/x86/x86/pmap.c:4976
[ 58.9211393] uvm_fault_upper_enter() at netbsd:uvm_fault_upper_enter+0x2ab sys/uvm/uvm_fault.c:1697
[ 58.9711358] uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper_direct sys/uvm/uvm_fault.c:1664 [inline]
[ 58.9711358] uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper sys/uvm/uvm_fault.c:1520 [inline]
[ 58.9711358] uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 sys/uvm/uvm_fault.c:910
[ 59.0111407] uvm_fault_wire() at netbsd:uvm_fault_wire+0xac sys/uvm/uvm_fault.c:2634
[ 59.0511361] physio() at netbsd:physio+0x799 sys/kern/kern_physio.c:353
[ 59.0911360] cdev_read() at netbsd:cdev_read+0x14d sys/kern/subr_devsw.c:1489
[ 59.1311352] spec_read() at netbsd:spec_read+0x6b6 sys/miscfs/specfs/spec_vnops.c:1110
[ 59.1711378] VOP_READ() at netbsd:VOP_READ+0x138 sys/kern/vnode_if.c:785
[ 59.2211387] vn_read() at netbsd:vn_read+0x27d sys/kern/vfs_vnops.c:677
[ 59.2611427] do_filereadv.part.0() at netbsd:do_filereadv.part.0+0x56b
[ 59.3111359] do_filereadv() at netbsd:do_filereadv+0x53 sys/kern/sys_generic.c:197
[ 59.3511397] sys_preadv() at netbsd:sys_preadv+0x54 sys/kern/vfs_syscalls.c:3032
[ 59.3911375] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 59.3911375] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 59.4311366] syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline]
[ 59.4311366] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 59.4311366] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137
[ 59.4516825] --- syscall (number 289 via SYS_syscall) ---
[ 59.4611335] netbsd:syscall+0x28b:
[ 59.4711461] cpu0: End traceback...
[ 59.4711461] fatal breakpoint trap in supervisor mode
[ 59.4711461] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x71c4a9597000 ilevel 0 rsp 0xffff9e82481ca4e0
[ 59.4912107] curlwp 0xffff9caf48c67480 pid 1644.1591 lowest kstack 0xffff9e82481c62c0
Stopped in pid 1644.1591 (syz-executor2649) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
pmap_enter_ma() at netbsd:pmap_enter_ma+0x194f sys/arch/x86/x86/pmap.c:5213
pmap_enter_default() at netbsd:pmap_enter_default+0x7d sys/arch/x86/x86/pmap.c:4976
uvm_fault_upper_enter() at netbsd:uvm_fault_upper_enter+0x2ab sys/uvm/uvm_fault.c:1697
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper_direct sys/uvm/uvm_fault.c:1664 [inline]
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 uvm_fault_upper sys/uvm/uvm_fault.c:1520 [inline]
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3074 sys/uvm/uvm_fault.c:910
uvm_fault_wire() at netbsd:uvm_fault_wire+0xac sys/uvm/uvm_fault.c:2634

physio() at netbsd:physio+0x799 sys/kern/kern_physio.c:353
cdev_read() at netbsd:cdev_read+0x14d sys/kern/subr_devsw.c:1489
spec_read() at netbsd:spec_read+0x6b6 sys/miscfs/specfs/spec_vnops.c:1110
VOP_READ() at netbsd:VOP_READ+0x138 sys/kern/vnode_if.c:785
vn_read() at netbsd:vn_read+0x27d sys/kern/vfs_vnops.c:677
do_filereadv.part.0() at netbsd:do_filereadv.part.0+0x56b
do_filereadv() at netbsd:do_filereadv+0x53 sys/kern/sys_generic.c:197
sys_preadv() at netbsd:sys_preadv+0x54 sys/kern/vfs_syscalls.c:3032
sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137

--- syscall (number 289 via SYS_syscall) ---

netbsd:syscall+0x28b:
Panic string: kernel diagnostic assertion "!samepage" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/arch/x86/x86/pmap.c", line 5213
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1592 1737 3 1 180 ffff9caf499159c0 syz-executor2649 parked
1592 1767 2 0 0 ffff9caf5023e300 syz-executor2649
1592 1592 2 0 10000140 ffff9caf49b265c0 syz-executor2649
1743 1503 3 0 180 ffff9caf4a515a80 syz-executor2649 parked
1743 1711 2 0 0 ffff9caf49915140 syz-executor2649
1743 1743 2 0 10000140 ffff9caf49fa0080 syz-executor2649
1742 1747 3 1 180 ffff9caf4a5d71c0 syz-executor2649 parked
1742 1745 3 1 0 ffff9caf49fa04c0 syz-executor2649 physio
1742 1742 2 1 10040140 ffff9caf4997f980 syz-executor2649
1594 1751 3 0 180 ffff9caf48c678c0 syz-executor2649 parked
1594 1663 2 0 0 ffff9caf4a545700 syz-executor2649
1594 1594 2 0 10000140 ffff9caf4a5d7600 syz-executor2649
1644 1741 3 0 40180 ffff9caf49b26a00 syz-executor2649 parked
1644 > 1591 7 0 40000 ffff9caf48c67480 syz-executor2649
1644 1644 2 0 10000140 ffff9caf5023e740 syz-executor2649
1585 1458 3 1 180 ffff9caf4a627ac0 syz-executor2649 parked
1585 1736 3 1 0 ffff9caf4a545b40 syz-executor2649 physio
1585 1585 2 0 10000140 ffff9caf4a627680 syz-executor2649
990 990 2 0 140 ffff9caf48c67040 syz-executor2649
942 942 2 1 140 ffff9caf48b77700 syz-executor2649
1243 > 1243 7 1 140 ffff9caf48c0cb00 syz-executor2649
813 813 2 0 140 ffff9caf49b26180 syz-executor2649
1120 1120 2 1 140 ffff9caf486a7200 syz-executor2649
449 449 2 1 140 ffff9caf489d5b00 syz-executor2649
1242 1242 3 0 180 ffff9caf4a515200 syz-executor2649 nanoslp
1237 1237 3 0 180 ffff9caf4869cac0 sshd select
1216 1216 3 1 180 ffff9caf48c0c280 getty nanoslp
1223 1223 3 0 180 ffff9caf48c0c6c0 getty nanoslp
1184 1184 3 0 180 ffff9caf489d56c0 getty nanoslp
1195 1195 3 0 180 ffff9caf489d5280 getty ttyraw
1098 1098 3 0 180 ffff9caf4a5452c0 sshd select
1094 1094 3 0 180 ffff9caf4997f540 powerd kqueue
702 702 3 0 180 ffff9caf48f97bc0 syslogd kqueue
746 746 3 0 180 ffff9caf48d18b80 dhcpcd poll
742 742 3 1 180 ffff9caf48b77b40 dhcpcd poll
466 466 3 0 180 ffff9caf4997f100 dhcpcd poll
598 598 3 1 180 ffff9caf48f97340 dhcpcd poll
292 292 3 0 180 ffff9caf48d18300 dhcpcd poll
485 485 3 1 180 ffff9caf48d18740 dhcpcd poll
291 291 3 1 180 ffff9caf48f97780 dhcpcd poll
1 1 3 0 180 ffff9caf40484140 init wait
0 985 2 0 200 ffff9caf486a7640 physiod
0 196 3 0 200 ffff9caf4869c680 pooldrain pooldrain
0 195 3 1 200 ffff9caf4869c240 ioflush syncer
0 194 3 0 200 ffff9caf486a7a80 pgdaemon pgdaemon
0 170 3 0 200 ffff9caf465dea40 usb7 usbevt
0 169 3 0 200 ffff9caf465de600 usb6 usbevt
0 168 3 0 200 ffff9caf465de1c0 usb5 usbevt
0 167 3 0 200 ffff9caf43559a00 usb4 usbevt
0 166 3 0 200 ffff9caf435595c0 usb3 usbevt
0 165 3 0 200 ffff9caf43559180 usb2 usbevt
0 31 3 0 200 ffff9caf404849c0 usb1 usbevt
0 63 3 0 200 ffff9caf402ff740 usb0 usbevt
0 126 3 0 200 ffff9caf402ffb80 usbtask-dr usbtsk
0 125 3 1 200 ffff9caf403de340 usbtask-hc usbtsk
0 124 3 0 200 ffff9caf3e895b00 swwreboot swwreboot
0 123 3 0 200 ffff9caf40484580 npfgc0 npfgcw
0 122 3 1 200 ffff9caf4045a980 rt_free rt_free
0 121 3 1 200 ffff9caf4045a540 unpgc unpgc
0 120 3 0 200 ffff9caf4045a100 key_timehandler key_timehandler
0 119 3 1 200 ffff9caf4044d940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff9caf4044d500 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff9caf4044d0c0 nd6_timer nd6_timer
0 116 3 1 200 ffff9caf40440900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff9caf404404c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff9caf40440080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff9caf404138c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff9caf40413480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff9caf40413040 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff9caf403debc0 rt_timer rt_timer
0 109 3 0 200 ffff9caf403de780 vmem_rehash vmem_rehash
0 100 3 0 200 ffff9caf402ff300 entbutler entropy
0 99 3 1 200 ffff9caf3fd3eb40 viomb balloon
0 98 3 1 200 ffff9caf3fd3e700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff9caf3fd3e2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff9caf3e8956c0 scsibus0 sccomp
0 29 3 1 200 ffff9caf3e895280 pms0 pmsreset
0 28 3 1 200 ffff9caf3e7b5ac0 xcall/1 xcall
0 27 1 1 200 ffff9caf3e7b5680 softser/1
0 26 1 1 200 ffff9caf3e7b5240 softclk/1
0 25 1 1 200 ffff9caf3e790a80 softbio/1
0 24 1 1 200 ffff9caf3e790640 softnet/1
0 23 1 1 201 ffff9caf3e790200 idle/1
0 22 3 0 200 ffff9cb06cb31a40 lnxsyswq lnxsyswq
0 21 3 1 200 ffff9cb06cb31600 lnxubdwq lnxubdwq
0 20 3 0 200 ffff9cb06cb311c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffff9cb06cb44a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffff9cb06cb445c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff9cb06cb44180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff9cb06cb579c0 sysmon smtaskq
0 15 3 0 200 ffff9cb06cb57580 pmfsuspend pmfsuspend
0 14 3 1 200 ffff9cb06cb57140 pmfevent pmfevent
0 13 3 1 200 ffff9cb06cb6e980 sopendfree sopendfr
0 12 3 0 200 ffff9cb06cb6e540 ifwdog ifwdog
0 11 3 0 200 ffff9cb06cb6e100 iflnkst iflnkst
0 10 3 0 200 ffff9cb06db97940 nfssilly nfssilly
0 9 3 0 200 ffff9cb06db97500 pooldisp pooldisp
0 8 3 0 200 ffff9cb06db970c0 modunload mod_unld
0 7 3 0 200 ffff9cb06dbc2900 xcall/0 xcall
0 6 1 0 200 ffff9cb06dbc24c0 softser/0
0 5 1 0 200 ffff9cb06dbc2080 softclk/0
0 4 1 0 200 ffff9cb06dbed8c0 softbio/0
0 3 1 0 200 ffff9cb06dbed480 softnet/0
0 2 1 0 201 ffff9cb06dbed040 idle/0
0 0 2 0 240 ffffffff8678ae40 swapper
[Locks tracked through LWPs]

****** LWP 1592.1767 (syz-executor2649) @ 0xffff9caf5023e300, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x71 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x71
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9caf5023e300 last held: 000000000000000000

last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1743.1711 (syz-executor2649) @ 0xffff9caf49915140, l_stat=2

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9caf49915140 last held: 000000000000000000

last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1742.1745 (syz-executor2649) @ 0xffff9caf49fa04c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)

lock address : ffff9caf4d07b4c0

type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff9caf49fa04c0 last held: 0xffff9caf49fa04c0

last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : netbsd:uvm_fault_lower_enter+0x86a

owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x71 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x71
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff9caf49fa04c0 last held: 000000000000000000

last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1594.1663 (syz-executor2649) @ 0xffff9caf4a545700, l_stat=2

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9caf4a545700 last held: 000000000000000000

last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1644.1591 (syz-executor2649) @ 0xffff9caf48c67480, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)

lock address : ffff9caf4d07bf40

type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9caf48c67480 last held: 0xffff9caf48c67480
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : netbsd:uvm_map_unlock_entry+0xaa
owner/count : 0xffff9caf48c67480 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2872)

lock address : ffff9caf4a0f8b80

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9caf48c67480 last held: 0xffff9caf48c67480
last locked* : netbsd:pmap_enter_ma+0x3c0
unlocked : netbsd:pmap_extract+0x2c8
owner field : 0xffff9caf48c67480 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x71 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x71
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9caf48c67480 last held: 000000000000000000

last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1585.1736 (syz-executor2649) @ 0xffff9caf4a545b40, l_stat=3

*** Locks held: none

*** Locks wanted:

relevant lwp : 0xffff9caf4a545b40 last held: 000000000000000000

last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x252
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffff9caf48b77b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff9caf48b77b40 last held: 000000000000000000