assert failed: mutex_owned(&sc->sc_dk.dk_openlock)

0 views
Skip to first unread message

syzbot

unread,
Apr 22, 2023, 3:00:47 PM4/22/23
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: b81cb1f3238e KASSERT(kpreempt_disabled()) before accessing..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=10de4348280000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=d4dc610473cacc5183dd
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d31d7df70ec3/disk-b81cb1f3.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/563dc6d8dbab/netbsd-b81cb1f3.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d4dc61...@syzkaller.appspotmail.com

[ 1384.4822249] panic: kernel diagnostic assertion "mutex_owned(&sc->sc_dk.dk_openlock)" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/dkwedge/dk.c", line 336
[ 1384.4822249] uhub5: device problem, disabling port 1
[ 1384.5031114] cpu1: Begin traceback...
[ 1384.5422063] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:292
[ 1384.6722069] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 1384.7722074] dkwedge_add() at netbsd:dkwedge_add+0x213a dkwedge_size_increase sys/dev/dkwedge/dk.c:336 [inline]
[ 1384.7722074] dkwedge_add() at netbsd:dkwedge_add+0x213a sys/dev/dkwedge/dk.c:415
[ 1384.8622067] dkwedge_discover_gpt() at netbsd:dkwedge_discover_gpt+0x9b7 sys/dev/dkwedge/dkwedge_gpt.c:280
[ 1384.9622060] dkwedge_discover() at netbsd:dkwedge_discover+0x274 sys/dev/dkwedge/dk.c:1073
[ 1385.0522086] disk_ioctl() at netbsd:disk_ioctl+0x44d sys/kern/subr_disk.c:647
[ 1385.1422062] dk_ioctl() at netbsd:dk_ioctl+0x190 sys/dev/dksubr.c:642
[ 1385.2322068] sdioctl() at netbsd:sdioctl+0x6b4 sys/dev/scsipi/sd.c:1005
[ 1385.3222160] cdev_ioctl() at netbsd:cdev_ioctl+0x162 sys/kern/subr_devsw.c:1525
[ 1385.4122375] spec_ioctl() at netbsd:spec_ioctl+0xf2 sys/miscfs/specfs/spec_vnops.c:1329
[ 1385.5022062] VOP_IOCTL() at netbsd:VOP_IOCTL+0x149 sys/kern/vnode_if.c:934
[ 1385.6022078] vn_ioctl() at netbsd:vn_ioctl+0x195 sys/kern/vfs_vnops.c:873
[ 1385.7022102] sys_ioctl() at netbsd:sys_ioctl+0xd88 sys/kern/sys_generic.c:675
[ 1385.7922073] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 1385.7922073] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 1385.8922078] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 1385.8922078] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 1385.8922078] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 1385.9122092] --- syscall (number 54 via SYS_syscall) ---
[ 1385.9422081] netbsd:syscall+0x2da:
[ 1385.9422081] cpu1: End traceback...
[ 1385.9422081] fatal breakpoint trap in supervisor mode
[ 1385.9522090] trap type 1 code 0 rip 0xffffffff80235485 cs 0x8 rflags 0x246 cr2 0x708385e07000 ilevel 0 rsp 0xffffd502492b8630
[ 1385.9622199] curlwp 0xfffff5fd618dc5c0 pid 3121.3131 lowest kstack 0xffffd502492b42c0
Stopped in pid 3121.3131 (syz-executor.0) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:292
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
dkwedge_add() at netbsd:dkwedge_add+0x213a dkwedge_size_increase sys/dev/dkwedge/dk.c:336 [inline]
dkwedge_add() at netbsd:dkwedge_add+0x213a sys/dev/dkwedge/dk.c:415
dkwedge_discover_gpt() at netbsd:dkwedge_discover_gpt+0x9b7 sys/dev/dkwedge/dkwedge_gpt.c:280
dkwedge_discover() at netbsd:dkwedge_discover+0x274 sys/dev/dkwedge/dk.c:1073
disk_ioctl() at netbsd:disk_ioctl+0x44d sys/kern/subr_disk.c:647
dk_ioctl() at netbsd:dk_ioctl+0x190 sys/dev/dksubr.c:642
sdioctl() at netbsd:sdioctl+0x6b4 sys/dev/scsipi/sd.c:1005
cdev_ioctl() at netbsd:cdev_ioctl+0x162 sys/kern/subr_devsw.c:1525
spec_ioctl() at netbsd:spec_ioctl+0xf2 sys/miscfs/specfs/spec_vnops.c:1329
VOP_IOCTL() at netbsd:VOP_IOCTL+0x149 sys/kern/vnode_if.c:934
vn_ioctl() at netbsd:vn_ioctl+0x195 sys/kern/vfs_vnops.c:873
sys_ioctl() at netbsd:sys_ioctl+0xd88 sys/kern/sys_generic.c:675
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: kernel diagnostic assertion "mutex_owned(&sc->sc_dk.dk_openlock)" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/dkwedge/dk.c", line 336
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
3121 >3131 7 1 0 fffff5fd618dc5c0 syz-executor.0
3121 3121 2 1 10000000 fffff5fd619e21c0 syz-executor.0
3005 3251 2 1 100 fffff5fd600d2100 syz-executor.1
3005 3005 2 0 10000000 fffff5fd3f02c700 syz-executor.1
3129 1442 2 1 100 fffff5fd5fffc500 syz-executor.4
3129 3129 2 0 10000000 fffff5fd5b36bbc0 syz-executor.4
2406 2849 3 0 180 fffff5fd59d49740 syz-executor.5 parked
2406 2179 2 1 100 fffff5fd4709f9c0 syz-executor.5
2406 2406 2 1 10000000 fffff5fd618dca00 syz-executor.5
2181 3252 2 0 0 fffff5fd5b7398c0 syz-executor.2
2181 2041 2 0 100 fffff5fd4d2c4ac0 syz-executor.2
2181 2181 2 0 10000000 fffff5fd600d2540 syz-executor.2
3126 3126 2 0 140 fffff5fd4709f580 syz-executor.1
3285 2252 3 0 1100000 fffff5fd5fffc940 syz-executor.1 tstile
3285 3285 2 1 11000040 fffff5fd59d49b80 syz-executor.1
2901 2783 3 0 1100000 fffff5fd4709f140 syz-executor.1 tstile
2901 2901 2 1 11000040 fffff5fd600d2980 syz-executor.1
2653 2266 3 0 1100000 fffff5fd59d49300 syz-executor.1 tstile
2653 2653 2 1 11000040 fffff5fd5fffc0c0 syz-executor.1
2647 2647 3 1 1c0 fffff5fd5b739040 syz-executor.3 pipe_rd
1790 1790 2 0 140 fffff5fd4e8eea80 syz-executor.4
2646 1694 3 0 1100000 fffff5fd43da7580 syz-executor.1 tstile
2646 2646 2 1 11000040 fffff5fd565dd700 syz-executor.1
2634 1575 3 0 1100000 fffff5fd565dd2c0 syz-executor.1 tstile
2634 2634 2 1 11000040 fffff5fd4d2c4680 syz-executor.1
1507 2643 3 1 1100000 fffff5fd5b739480 syz-executor.1 tstile
1507 1507 2 1 11000040 fffff5fd54bc56c0 syz-executor.1
1428 1320 3 0 1100000 fffff5fd3253d940 syz-executor.1 tstile
1428 1428 2 1 11000040 fffff5fd54bc5280 syz-executor.1
1360 2513 3 0 1100000 fffff5fd3effc4c0 syz-executor.1 tstile
1360 1360 2 1 11000040 fffff5fd4e8ee640 syz-executor.1
1886 1362 3 0 1100000 fffff5fd4d2c4240 syz-executor.1 tstile
1886 1886 2 1 11000040 fffff5fd54bc5b00 syz-executor.1
2486 1174 3 0 1100000 fffff5fd4e8ee200 syz-executor.1 tstile
2486 2486 2 1 11000040 fffff5fd43dba980 syz-executor.1
2153 1093 3 1 1100000 fffff5fd4a529a40 syz-executor.1 tstile
2153 2153 2 1 11000040 fffff5fd43dba540 syz-executor.1
1153 1021 3 1 1100000 fffff5fd3f379500 syz-executor.1 tstile
1153 1153 2 1 11000040 fffff5fd3effc900 syz-executor.1
994 2249 3 0 1100000 fffff5fd4a529600 syz-executor.1 tstile
994 994 2 1 11000040 fffff5fd3ef8d780 syz-executor.1
2208 806 3 1 1100000 fffff5fd43dba100 syz-executor.1 tstile
2208 2208 2 1 11000040 fffff5fd43da7140 syz-executor.1
911 1188 3 1 1100000 fffff5fd3f02c2c0 syz-executor.1 tstile
911 911 2 1 11000040 fffff5fd46de45c0 syz-executor.1
1587 1869 3 0 1100000 fffff5fd3ede5b80 syz-executor.1 tstile
1587 1587 2 1 11000040 fffff5fd4a5291c0 syz-executor.1
1755 1631 3 0 1100000 fffff5fd3f379940 syz-executor.1 tstile
1755 1755 2 1 11000040 fffff5fd46de4180 syz-executor.1
549 1589 3 0 1100000 fffff5fd43da79c0 syz-executor.1 tstile
549 549 2 1 11000040 fffff5fd3effc080 syz-executor.1
656 656 3 1 180 fffff5fd3237c900 syz-executor.4 parked
652 657 2 1 1000040 fffff5fd34c7f1c0 syz-executor.4
652 658 3 1 1100000 fffff5fd3ea19ac0 syz-executor.4 vfork
499 499 3 1 180 fffff5fd3f4478c0 syz-executor.1 parked
496 501 2 1 1000040 fffff5fd3f447480 syz-executor.1
496 498 3 1 11100000 fffff5fd36646640 syz-executor.1 vfork
495 495 3 1 180 fffff5fd3f3790c0 syz-executor.4 parked
494 494 3 1 180 fffff5fd3f447040 syz-executor.4 parked
875 1516 3 1 11100000 fffff5fd3ede5740 syz-executor.4 vfork
875 875 2 1 11000040 fffff5fd3f02cb40 syz-executor.4
1351 1351 3 0 180 fffff5fd36646a80 syz-executor.1 parked
323 709 3 0 11100000 fffff5fd3edacb00 syz-executor.1 vfork
323 323 2 1 11000040 fffff5fd3edac280 syz-executor.1
1344 1344 3 0 180 fffff5fd3ede5300 syz-executor.4 parked
1086 447 3 0 11100000 fffff5fd3ef8dbc0 syz-executor.4 vfork
1086 1086 2 1 11000040 fffff5fd3ea19680 syz-executor.4
1353 1353 3 1 180 fffff5fd3ef8d340 syz-executor.1 parked
1200 1209 3 1 11100000 fffff5fd3edac6c0 syz-executor.1 vfork
1200 1200 2 1 11000040 fffff5fd326f2100 syz-executor.1
1383 1383 2 1 140 fffff5fd36646200 syz-executor.2
1132 1132 2 1 140 fffff5fd34c7f600 syz-executor.5
1245 1245 2 0 140 fffff5fd33507a00 syz-executor.0
942 2490 3 1 100001c0 fffff5fd3253d0c0 syz-fuzzer wait
942 1201 3 0 180 fffff5fd3253d500 syz-fuzzer parked
942 1240 3 1 180 fffff5fd34c7fa40 syz-fuzzer wait
942 990 3 0 180 fffff5fd3237c080 syz-fuzzer wait
942 829 3 0 180 fffff5fd31e38300 syz-fuzzer wait
942 958 2 0 140 fffff5fd335075c0 syz-fuzzer
942 1241 3 0 180 fffff5fd32368480 syz-fuzzer wait
942 1239 3 1 180 fffff5fd3158c280 syz-fuzzer parked
942 929 3 1 180 fffff5fd3158c6c0 syz-fuzzer parked
942 449 3 1 180 fffff5fd312a5ac0 syz-fuzzer parked
942 1130 3 0 1c0 fffff5fd3237c4c0 syz-fuzzer wait
942 1231 3 0 180 fffff5fd326f2980 syz-fuzzer parked
942 1223 2 0 140 fffff5fd31bfb340 syz-fuzzer
942 942 3 1 180 fffff5fd3127f200 syz-fuzzer parked
1238 1238 3 0 180 fffff5fd3158cb00 sshd select
1222 1222 3 1 180 fffff5fd33507180 getty nanoslp
1082 1082 3 1 180 fffff5fd3313e580 getty nanoslp
1224 1224 3 1 180 fffff5fd3313e9c0 getty nanoslp
1216 1216 3 0 1c0 fffff5fd31e38b80 getty ttyraw
1102 1102 3 0 180 fffff5fd3313e140 sshd select
1023 1023 3 1 180 fffff5fd317cfb40 powerd kqueue
812 812 3 0 180 fffff5fd326f2540 syslogd kqueue
559 559 3 0 180 fffff5fd323688c0 dhcpcd poll
747 747 3 1 180 fffff5fd31e38740 dhcpcd poll
742 742 3 1 180 fffff5fd317cf700 dhcpcd poll
602 602 3 1 180 fffff5fd32368040 dhcpcd poll
292 292 3 0 180 fffff5fd31bfbbc0 dhcpcd poll
485 485 3 1 180 fffff5fd31bfb780 dhcpcd poll
291 291 3 1 180 fffff5fd317cf2c0 dhcpcd poll
1 1 3 1 180 fffff5fd29053980 init wait
0 557 3 0 200 fffff5fd3127f640 physiod physiod
0 196 3 0 200 fffff5fd312a5680 pooldrain pooldrain
0 195 2 0 240 fffff5fd312a5240 ioflush
0 194 3 1 200 fffff5fd3127fa80 pgdaemon pgdaemon
0 170 2 0 240 fffff5fd2f1bfa40 usb7
0 169 2 0 240 fffff5fd2f1bf600 usb6
0 168 3 0 200 fffff5fd2f1bf1c0 usb5 usbevt
0 167 3 1 200 fffff5fd2c162a00 usb4 usbevt
0 166 3 0 200 fffff5fd2c1625c0 usb3 usbevt
0 165 3 1 200 fffff5fd2c162180 usb2 usbevt
0 31 3 1 240 fffff5fd290bd9c0 usb1 tstile
0 63 3 0 200 fffff5fd290bd580 usb0 usbevt
0 126 3 1 200 fffff5fd28ef0740 usbtask-dr usbtsk
0 125 3 1 200 fffff5fd28ef0b80 usbtask-hc usbtsk
0 124 3 0 200 fffff5fd274a1b00 swwreboot swwreboot
0 123 3 0 200 fffff5fd290bd140 npfgc0 npfgcw
0 122 3 1 200 fffff5fd29053540 rt_free rt_free
0 121 3 1 200 fffff5fd29053100 unpgc unpgc
0 120 3 0 200 fffff5fd29066940 key_timehandler key_timehandler
0 119 3 1 200 fffff5fd29066500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 fffff5fd290660c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 fffff5fd29049900 nd6_timer nd6_timer
0 116 3 1 200 fffff5fd290494c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 fffff5fd29049080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 fffff5fd290248c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 fffff5fd29024480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 fffff5fd29024040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 fffff5fd28fe7bc0 icmp_wqinput/0 icmp_wqinput
0 110 2 1 200 fffff5fd28fe7340 rt_timer
0 109 3 0 200 fffff5fd28fe7780 vmem_rehash vmem_rehash
0 100 3 1 200 fffff5fd28ef0300 entbutler entropy
0 99 2 0 240 fffff5fd28950b40 viomb
0 98 3 1 200 fffff5fd28950700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 fffff5fd289502c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 fffff5fd274a16c0 scsibus0 sccomp
0 29 3 0 200 fffff5fd274a1280 pms0 pmsreset
0 28 3 1 200 fffff5fd273acac0 xcall/1 xcall
0 27 1 1 200 fffff5fd273ac680 softser/1
0 26 1 1 200 fffff5fd273ac240 softclk/1
0 25 1 1 200 fffff5fd27387a80 softbio/1
0 24 1 1 200 fffff5fd27387640 softnet/1
0 23 1 1 201 fffff5fd27387200 idle/1
0 22 3 0 200 fffff5fe5572da40 lnxsyswq lnxsyswq
0 21 3 1 200 fffff5fe5572d600 lnxubdwq lnxubdwq
0 20 3 1 200 fffff5fe5572d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 fffff5fe55734a00 lnxlngwq lnxlngwq
0 18 3 1 200 fffff5fe557345c0 lnxhipwq lnxhipwq
0 17 3 1 200 fffff5fe55734180 lnxrcugc lnxrcugc
0 16 3 0 200 fffff5fe557539c0 sysmon smtaskq
0 15 3 1 200 fffff5fe55753580 pmfsuspend pmfsuspend
0 14 3 0 200 fffff5fe55753140 pmfevent pmfevent
0 13 3 0 200 fffff5fe5575e980 sopendfree sopendfr
0 12 3 0 200 fffff5fe5575e540 ifwdog ifwdog
0 11 3 0 200 fffff5fe5575e100 iflnkst iflnkst
0 10 3 0 200 fffff5fe56793940 nfssilly nfssilly
0 9 3 0 200 fffff5fe56793500 vdrain vdrain
0 8 3 0 200 fffff5fe567930c0 modunload mod_unld
0 7 3 0 200 fffff5fe567ba900 xcall/0 xcall
0 6 1 0 200 fffff5fe567ba4c0 softser/0
0 5 1 0 200 fffff5fe567ba080 softclk/0
0 4 1 0 200 fffff5fe567e98c0 softbio/0
0 3 1 0 200 fffff5fe567e9480 softnet/0
0 2 1 0 201 fffff5fe567e9040 idle/0
0 > 0 7 0 240 ffffffff86748080 swapper
[Locks tracked through LWPs]

****** LWP 3121.3131 (syz-executor.0) @ 0xfffff5fd618dc5c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:disk_init+0x7d sys/kern/subr_disk.c:169)
lock address : fffff5fd28ef4428
type : sleep/adaptive
initialized : netbsd:disk_init+0x7d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd618dc5c0 last held: 0xfffff5fd618dc5c0
last locked* : netbsd:dkwedge_add+0x152
unlocked : netbsd:dkwedge_delall1+0x27f
owner field : 0xfffff5fd618dc5c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x71 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x71
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd618dc5c0 last held: 000000000000000000
last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x266
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3005.3251 (syz-executor.1) @ 0xfffff5fd600d2100, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x71 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type : sleep/adaptive
initialized : netbsd:config_init+0x71
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd600d2100 last held: 000000000000000000
last locked : netbsd:device_lookup_acquire+0x2d
unlocked* : netbsd:device_lookup_acquire+0x266
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3129.1442 (syz-executor.4) @ 0xfffff5fd5fffc500, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vfs_mountalloc+0x103 sys/kern/vfs_mount.c:158)
lock address : fffff5fe56c69800
type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0x103
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd5fffc500 last held: 0xfffff5fd5fffc500
last locked* : netbsd:genfs_renamelock_enter+0x2e
unlocked : netbsd:do_sys_renameat+0x1025
owner field : 0xfffff5fd5fffc500 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : fffff5fd5d078280
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd5fffc500 last held: 0xfffff5fd5fffc500
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xfffff5fd5fffc500 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3285.2252 (syz-executor.1) @ 0xfffff5fd5fffc940, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd5fffc940 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2901.2783 (syz-executor.1) @ 0xfffff5fd4709f140, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd4709f140 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2653.2266 (syz-executor.1) @ 0xfffff5fd59d49300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd59d49300 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2646.1694 (syz-executor.1) @ 0xfffff5fd43da7580, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd43da7580 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2634.1575 (syz-executor.1) @ 0xfffff5fd565dd2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd565dd2c0 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1507.2643 (syz-executor.1) @ 0xfffff5fd5b739480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd5b739480 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1428.1320 (syz-executor.1) @ 0xfffff5fd3253d940, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd3253d940 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1360.2513 (syz-executor.1) @ 0xfffff5fd3effc4c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd3effc4c0 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1886.1362 (syz-executor.1) @ 0xfffff5fd4d2c4240, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd4d2c4240 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2486.1174 (syz-executor.1) @ 0xfffff5fd4e8ee200, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd4e8ee200 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2153.1093 (syz-executor.1) @ 0xfffff5fd4a529a40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd4a529a40 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1153.1021 (syz-executor.1) @ 0xfffff5fd3f379500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd3f379500 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 994.2249 (syz-executor.1) @ 0xfffff5fd4a529600, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd4a529600 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 2208.806 (syz-executor.1) @ 0xfffff5fd43dba100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd43dba100 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 911.1188 (syz-executor.1) @ 0xfffff5fd3f02c2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd3f02c2c0 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1587.1869 (syz-executor.1) @ 0xfffff5fd3ede5b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd3ede5b80 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 1755.1631 (syz-executor.1) @ 0xfffff5fd3f379940, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd3f379940 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 549.1589 (syz-executor.1) @ 0xfffff5fd43da79c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283)
lock address : ffffd5000f9866f0
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x2b2
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff5fd43da79c0 last held: 0xfffff5fd43da79c0
last locked* : netbsd:vhci_usb_detach+0x172
unlocked : netbsd:vhci_fd_read+0x652
owner field : 0xfffff5fd43da79c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xfffff5fd290bd9c0

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd43da79c0 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

****** LWP 499.499 (syz-executor.1) @ 0xfffff5fd3f4478c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd3f4478c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 495.495 (syz-executor.4) @ 0xfffff5fd3f3790c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd3f3790c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1351.1351 (syz-executor.1) @ 0xfffff5fd36646a80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff5fd36646a80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1353.1353 (syz-executor.1) @ 0xfffff5fd3ef8d340, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd3ef8d340 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 747.747 (dhcpcd) @ 0xfffff5fd31e38740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd31e38740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xfffff5fd317cf700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd317cf700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xfffff5fd31bfb780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd31bfb780 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xfffff5fd317cf2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd317cf2c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.168 (usb5) @ 0xfffff5fd2f1bf1c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xfffff5fd2f1bf1c0 last held: 0xfffff5fd618dc5c0
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

****** LWP 0.31 (usb1) @ 0xfffff5fd290bd9c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280)
lock address : ffffd5000f9864c8
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x1cb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 18
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd290bd9c0 last held: 0xfffff5fd290bd9c0
last locked* : netbsd:usbd_transfer+0x350
unlocked : netbsd:usbd_setup_pipe_flags+0x13c
owner field : 0xfffff5fd290bd9c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 18 waiting writers: 0xfffff5fd43da79c0 0xfffff5fd3f379940 0xfffff5fd3ede5b80 0xfffff5fd3f02c2c0 0xfffff5fd43dba100 0xfffff5fd4a529600 0xfffff5fd3f379500 0xfffff5fd4a529a40 0xfffff5fd4e8ee200 0xfffff5fd4d2c4240 0xfffff5fd3effc4c0 0xfffff5fd3253d940 0xfffff5fd5b739480 0xfffff5fd565dd2c0 0xfffff5fd43da7580 0xfffff5fd59d49300 0xfffff5fd4709f140 0xfffff5fd5fffc940

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283)
lock address : ffffd5000f9866f0
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x2b2
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff5fd290bd9c0 last held: 0xfffff5fd43da79c0
last locked* : netbsd:vhci_usb_detach+0x172
unlocked : netbsd:vhci_fd_read+0x652
owner field : 0xfffff5fd43da79c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xfffff5fd290bd9c0

****** LWP 0.11 (iflnkst) @ 0xfffff5fe5575e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff5fe5575e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xfffff5fe567ba080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff5fe567ba080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86748080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86748080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:main+0x106 sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x106
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86748080 last held: 0xfffff5fd2f1bf1c0
last locked* : netbsd:sleepq_block+0x827
unlocked : netbsd:kpause+0x254
curcpu holds : 0 wanted by: 000000000000000000

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xfffff5fd618dc5c0 last held: 0xfffff5fd618dc5c0
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffd50000007180 0045 00000000 0x0 0x0
0xffffd50000007200 0045 00000000 0x0 0x0
0xffffd50000007280 0045 00000000 0x0 0x0
0xffffd50000007300 0045 00000000 0x0 0x0
0xffffd50000007380 0045 00000000 0x0 0x0
0xffffd50000007400 0045 00000000 0x0 0x0
0xffffd50000007480 0045 00000000 0x0 0x0
0xffffd50000007500 0045 00000000 0x0 0x0
0xffffd50000007580 0045 00000000 0x0 0x0
0xffffd50000007600 0045 00000000 0x0 0x0
0xffffd50000007680 0041 00000000 0x0 0x0
0xffffd50000007700 0041 00000000 0x0 0x0
0xffffd50000007780 0041 00000000 0x0 0x0
0xffffd50000007800 0041 00000000 0x0 0x0
0xffffd50000007880 0045 00000000 0x0 0x0
0xffffd50000007900 0045 00000000 0x0 0x0
0xffffd50000007980 0041 00000000 0x0 0x0
0xffffd50000007a00 0041 00000000 0x0 0x0
0xffffd50000007a80 0041 00000000 0x0 0x0
0xffffd50000007b00 0041 00000000 0x0 0x0
0xffffd50000007b80 0041 00000000 0x0 0x0
0xffffd50000007c00 0041 00000000 0x0 0x0
0xffffd50000007c80 0041 00000000 0x0 0x0
0xffffd50000007d00 0041 00000000 0x0 0x0
0xffffd50000007d80 0041 00000000 0x0 0x0
0xffffd50000007e00 0041 00000000 0x0 0x0
0xffffd50000007e80 0041 00000000 0x0 0x0
0xffffd50000007f00 0041 00000000 0x0 0x0
0xffffd50000007f80 0041 00000000 0x0 0x0
0xffffd50000008000 0041 00000000 0x0 0x0
0xffffd50000008080 0041 00000000 0x0 0x0
0xffffd50000008100 0041 00000000 0x0 0x0


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
Reply all
Reply to author
Forward
0 new messages