panic:AS an: Unauthorized Access In ADDR: Addr ADDR [NUM bytes, read, RedZonePartial]

0 views

Skip to first unread message

syzbot

unread,

Jun 18, 2024, 2:35:22 AM (8 days ago) Jun 18

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: c67fa90f5dc2 lint: don't warn about unused C23 [[maybe_unu..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1624d446980000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=3751175bd3fb70abaf86
compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/ff7089d02adf/disk-c67fa90f.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/1d933feae98d/netbsd-c67fa90f.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+375117...@syzkaller.appspotmail.com

[ 647.3430546] panic:AS an: Unauthorized Access In 0xffffffff819097d6: Addr 0xffffad80143f7840 [8 bytes, read, RedZonePartial]

[ 647.3530219] cpu1: Begin traceback...
[ 647.3730238] vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288
1970/01/01 00:02:53 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 647.4430215] panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084
[ 647.5130227] kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 647.5130227] kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201
[ 647.5630278] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
[ 647.5630278] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:364 [inline]
[ 647.5630278] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
[ 647.5630278] __asan_load8() at netbsd:__asan_load8+0x251 sys/kern/subr_asan.c:1208
[ 647.6230247] nfs_export_update_30() at netbsd:nfs_export_update_30+0x7e sys/nfs/nfs_export.c:430
[ 647.6730226] vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 sys/kern/vfs_hooks.c:138
[ 647.7330228] do_sys_mount() at netbsd:do_sys_mount+0xbf2 mount_update sys/kern/vfs_syscalls.c:391 [inline]
[ 647.7330228] do_sys_mount() at netbsd:do_sys_mount+0xbf2 sys/kern/vfs_syscalls.c:612
[ 647.7830228] sys___mount50() at netbsd:sys___mount50+0x89 sys/kern/vfs_syscalls.c:537
[ 647.8330242] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 647.8330242] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 647.8930219] syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline]
[ 647.8930219] syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 647.8930219] syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137
[ 647.9030223] --- syscall (number 410 via SYS_syscall) ---
[ 647.9230213] netbsd:syscall+0x35c:
[ 647.9230213] cpu1: End traceback...
[ 647.9330244] fatal breakpoint trap in supervisor mode
[ 647.9330244] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x709705837000 ilevel 0 rsp 0xffffad824a0699a0
[ 647.9430233] curlwp 0xffffad8012cf5200 pid 10403.14642 lowest kstack 0xffffad824a0622c0
Stopped in pid 10403.14642 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288
panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084
kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201
__asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
__asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:364 [inline]
__asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
__asan_load8() at netbsd:__asan_load8+0x251 sys/kern/subr_asan.c:1208
nfs_export_update_30() at netbsd:nfs_export_update_30+0x7e sys/nfs/nfs_export.c:430
vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 sys/kern/vfs_hooks.c:138
do_sys_mount() at netbsd:do_sys_mount+0xbf2 mount_update sys/kern/vfs_syscalls.c:391 [inline]
do_sys_mount() at netbsd:do_sys_mount+0xbf2 sys/kern/vfs_syscalls.c:612
sys___mount50() at netbsd:sys___mount50+0x89 sys/kern/vfs_syscalls.c:537
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137
--- syscall (number 410 via SYS_syscall) ---
netbsd:syscall+0x35c:
Panic string: ASan: Unauthorized Access In 0xffffffff819097d6: Addr 0xffffad80143f7840 [8 bytes, read, RedZonePartial]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
13995 13995 3 0 0 ffffad8012cab4c0 ifconfig xclow
9966 9966 2 1 0 ffffad8012c08640 syz-executor.3
11205 11205 3 0 180 ffffad8013483140 syz-executor.2 wait
14300 11322 2 0 0 ffffad8012c9a040 syz-executor.0
14300>14300 7 0 10000000 ffffad8014696b00 syz-executor.0
10572 10572 2 1 1000000 ffffad80147b3b40 syz-executor.5
10403>14642 7 1 0 ffffad8012cf5200 syz-executor.1
10403 10403 2 1 10040000 ffffad8014209140 syz-executor.1
10226 10226 2 1 1000000 ffffad8012ba09c0 syz-executor.4
10573 10573 2 1 140 ffffad8013492a00 syz-executor.3
10130 10130 2 1 140 ffffad8012beea40 syz-executor.0
13917 13917 2 1 140 ffffad8012dc70c0 syz-executor.1
6816 6816 3 1 180 ffffad8014444640 syz-executor.4 parked
8288 8288 3 1 180 ffffad8013dc7a40 syz-executor.4 parked
2188 2188 3 0 180 ffffad8013f0fb40 syz-executor.1 parked
2206 2200 3 0 11100000 ffffad8013421700 syz-executor.1 vfork
2206 2206 2 1 11000040 ffffad8012d5bbc0 syz-executor.1
6332 6332 3 1 180 ffffad8013380180 syz-executor.1 parked
6068 6068 3 0 180 ffffad8012c9a480 syz-executor.5 parked
5332 2093 3 0 11100000 ffffad8012dc7500 syz-executor.5 vfork
5332 5332 2 1 11000040 ffffad8013354140 syz-executor.5
1179 1179 3 0 180 ffffad8013460940 syz-executor.0 parked
1863 1863 3 1 180 ffffad8012dc7940 syz-executor.5 parked
917 917 3 1 180 ffffad8012c84780 syz-executor.1 parked
915 5172 3 1 11100000 ffffad80133805c0 syz-executor.1 vfork
915 915 2 1 11000040 ffffad8013460500 syz-executor.1
703 703 3 1 180 ffffad80129c1b40 syz-executor.1 parked
655 655 3 1 180 ffffad8012d5b780 syz-executor.3 parked
500 500 3 1 180 ffffad80126d9bc0 syz-executor.0 parked
3541 3541 3 0 180 ffffad8012cf5a80 syz-executor.2 parked
3392 2512 3 0 11100000 ffffad8012cf5640 syz-executor.2 vfork
3392 3392 2 1 11000040 ffffad8013441780 syz-executor.2
1589 1589 3 0 180 ffffad8012d0db00 syz-executor.3 parked
1626 716 3 0 11100000 ffffad8012cb50c0 syz-executor.3 vfork
1626 1626 2 1 11000040 ffffad8012bee600 syz-executor.3
1238 1093 5 0 11100100 ffffad8013380a00 syz-fuzzer
1238 1663 3 0 0 ffffad8013468540 syz-fuzzer xclow
1238 1339 3 0 100000 ffffad8012d7e040 syz-fuzzer xclow
1238 1106 2 1 100100 ffffad8013e71b00 syz-fuzzer
1238 1210 2 1 100100 ffffad8013e716c0 syz-fuzzer
1238 991 2 1 100100 ffffad8013dee640 syz-fuzzer
1238 830 2 1 100100 ffffad8013dc71c0 syz-fuzzer
1238 801 2 1 100100 ffffad8013421b40 syz-fuzzer
1238 1107 2 1 100100 ffffad8013437300 syz-fuzzer
1238 1081 3 0 100000 ffffad8012a77480 syz-fuzzer xclow
1238 1233 2 1 100140 ffffad8012a77040 syz-fuzzer
1238 1238 5 0 100100 ffffad8012ad60c0 syz-fuzzer
1222 1222 3 0 180 ffffad8012ad6500 sshd select
1225 1225 3 0 180 ffffad80126d7740 getty nanoslp
1229 1229 3 1 180 ffffad80126d9340 getty nanoslp
1226 1226 3 1 180 ffffad8012990ac0 getty nanoslp
1223 1223 3 1 180 ffffad8012a2f740 getty ttyraw
814 814 3 0 180 ffffad80133aaa80 sshd select
1065 1065 3 1 180 ffffad8012d17b40 powerd kqueue
800 800 3 0 180 ffffad8013437b80 syslogd kqueue
606 606 3 0 180 ffffad8012c4bb40 dhcpcd poll
744 744 3 0 180 ffffad8012ab3900 dhcpcd poll
559 559 3 0 180 ffffad8012c2b280 dhcpcd poll
603 603 3 1 180 ffffad8012c84340 dhcpcd poll
487 487 3 0 180 ffffad8012d95900 dhcpcd poll
292 292 3 0 180 ffffad8012d954c0 dhcpcd poll
485 485 3 0 180 ffffad8012d95080 dhcpcd poll
1 1 3 0 180 ffffad80128679c0 init wait
0 10026 3 1 200 ffffad8012d02680 ktrace ktrwait
0 11830 3 1 200 ffffad8013468980 poolthread pooljob
0 8440 5 0 200 ffffad8013492180 (zombie)
0 9291 3 0 200 ffffad8012c08a80 ktrace ktrwait
0 10840 3 0 200 ffffad8014880740 ktrace ktrwait
0 4739 3 0 200 ffffad80126d7b80 ktrace ktrwait
0 4080 3 0 200 ffffad8012ab34c0 ktrace ktrwait
0 4681 3 1 200 ffffad8012bd0180 acctwatch actwat
0 2408 3 0 200 ffffad8012cb5940 ktrace ktrwait
0 1507 3 0 200 ffffad80133aa200 ktrace ktrwait
0 824 3 0 200 ffffad80129c0280 physiod physiod
0 196 3 1 200 ffffad80129c12c0 pooldrain pooldrain
0 195 3 0 200 ffffad80129c0b00 ioflush syncer
0 194 3 0 200 ffffad80129c06c0 pgdaemon pgdaemon
0 167 3 0 200 ffffad8012990680 usb7 usbevt
0 172 3 0 200 ffffad8012990240 usb6 usbevt
0 170 3 0 200 ffffad801293ba80 usb5 usbevt
0 168 3 0 200 ffffad801293b640 usb4 usbevt
0 166 3 1 200 ffffad801293b200 usb3 usbevt
0 165 3 0 200 ffffad80128d1a40 usb2 usbevt
0 31 3 1 200 ffffad80128d1600 usb1 usbevt
0 63 3 1 200 ffffad80128d11c0 usb0 usbevt
0 126 3 0 200 ffffad801287ba00 usbtask-dr usbtsk
0 125 3 1 200 ffffad801287b5c0 usbtask-hc usbtsk
0 124 3 0 200 ffffad8010d66b00 swwreboot swwreboot
0 123 3 1 200 ffffad801287b180 npfgc0 npfgcw
0 122 3 0 200 ffffad8012867580 rt_free rt_free
0 121 3 0 200 ffffad8012867140 unpgc unpgc
0 120 3 0 200 ffffad8012707980 key_timehandler key_timehandler
0 119 3 1 200 ffffad8012707540 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffad8012707100 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffad80126fd940 nd6_timer nd6_timer
0 116 3 1 200 ffffad80126fd500 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffad80126fd0c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffad80126ed900 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffad80126ed4c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffad80126ed080 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffad80126db8c0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffad80126db040 rt_timer rt_timer
0 109 3 0 200 ffffad80126d9780 vmem_rehash vmem_rehash
0 100 3 1 200 ffffad80126d7300 entbutler entropy
0 99 3 1 200 ffffad80120bdb40 viomb balloon
0 98 3 1 200 ffffad80120bd700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffad80120bd2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffad8010d666c0 scsibus0 sccomp
0 29 3 0 200 ffffad8010d66280 pms0 pmsreset
0 28 2 1 200 ffffad8010cacac0 xcall/1
0 27 1 1 200 ffffad8010cac680 softser/1
0 26 1 1 200 ffffad8010cac240 softclk/1
0 25 1 1 200 ffffad8010ca9a80 softbio/1
0 24 1 1 200 ffffad8010ca9640 softnet/1
0 23 1 1 201 ffffad8010ca9200 idle/1
0 22 3 0 200 ffffad800fb55a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffad800fb55600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffad800fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffad800fb54a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffad800fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffad800fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffad800fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffffad800fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffad800fb4d140 pmfevent pmfevent
0 13 3 0 200 ffffad800fb4a980 sopendfree sopendfr
0 12 3 0 200 ffffad800fb4a540 ifwdog ifwdog
0 11 3 1 200 ffffad800fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffad800fb3b940 nfssilly nfssilly
0 9 3 0 200 ffffad800fb3b500 pooldisp pooldisp
0 8 3 1 200 ffffad800fb3b0c0 modunload mod_unld
0 7 3 0 200 ffffad800fb32900 xcall/0 xcall
0 6 1 0 200 ffffad800fb324c0 softser/0
0 5 1 0 200 ffffad800fb32080 softclk/0
0 4 1 0 200 ffffad800fb308c0 softbio/0
0 3 1 0 200 ffffad800fb30480 softnet/0
0 2 1 0 201 ffffad800fb30040 idle/0
0 0 2 1 240 ffffffff83350000 swapper
[Locks tracked through LWPs]

****** LWP 9966.9966 (syz-executor.3) @ 0xffffad8012c08640, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:lwp_ctl_alloc+0x77b sys/kern/kern_lwp.c:1952)
lock address : ffffad8014afea00
type : sleep/adaptive
initialized : netbsd:lwp_ctl_alloc+0x77b
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8012c08640 last held: 0xffffad8012c08640
last locked* : netbsd:lwp_ctl_alloc+0x125
unlocked : 0
owner field : 0xffffad8012c08640 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 11205.11205 (syz-executor.2) @ 0xffffad8013483140, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x3f sys/kern/subr_kcov.c:461)
lock address : ffffad80149a5640
type : sleep/adaptive
initialized : netbsd:kcov_open+0x3f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8013483140 last held: 0xffffad8013483140
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_obj_init+0xa0 sys/uvm/uvm_object.c:70)
lock address : ffffad8014993880
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0xa0
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8013483140 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x4537
unlocked* : netbsd:uvm_fault_lower_enter+0x5f0
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 10403.14642 (syz-executor.1) @ 0xffffad8012cf5200, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fstrans_init+0x20 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8012cf5200 last held: 0xffffad8012cf5200
last locked* : netbsd:vfs_suspend+0x1a7
unlocked : netbsd:mount_domount+0xb91
owner field : 0xffffad8012cf5200 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vfs_mountalloc+0xbc sys/kern/vfs_mount.c:163)
lock address : ffffad8014b7bc40
type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0xbc
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8012cf5200 last held: 0xffffad8012cf5200
last locked* : netbsd:do_sys_mount+0xab9
unlocked : netbsd:mount_domount+0x847
owner field : 0xffffad8012cf5200 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:vfsinit+0x27f sys/kern/vfs_init.c:440)
lock address : netbsd:vfs_hooks_lock
type : sleep/adaptive
initialized : netbsd:vfsinit+0x27f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8012cf5200 last held: 0xffffad8012cf5200
last locked* : netbsd:vfs_hooks_reexport+0x2c
unlocked : netbsd:dounmount+0x20d
owner field : 0xffffad8012cf5200 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 744.744 (dhcpcd) @ 0xffffad8012ab3900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8012ab3900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 559.559 (dhcpcd) @ 0xffffad8012c2b280, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8012c2b280 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffad8012d954c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8012d954c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffad8012d95080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8012d95080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffad8010cac240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad8010cac240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffad800fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad800fb4a100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffad800fb32080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad800fb32080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83350000, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff83350000 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:main+0x11e sys/kern/init_main.c:304)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x11e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8014696b00 last held: 0xffffad800fb324c0
last locked* : netbsd:softint_dispatch+0x865
unlocked : netbsd:softint_dispatch+0x890
curcpu holds : 0 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:com_attach_subr+0x127 sys/dev/ic/com.c:565)
lock address : ffffad8010c03d20
type : spin
initialized : netbsd:com_attach_subr+0x127
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8014696b00 last held: 0xffffad800fb324c0
last locked* : netbsd:comstart+0x171
unlocked : netbsd:comintr+0x73c
owner field : 0x0000000000000800 wait/spin: 0/1

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8012cf5200 last held: 0xffffad8012cf5200
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffad8000017180 0041 00000000 0x0 0x0
0xffffad8000017200 0041 00000000 0x0 0x0
0xffffad8000017280 0041 00000000 0x0 0x0
0xffffad8000017300 0041 00000000 0x0 0x0
0xffffad8000017380 0041 00000000 0x0 0x0
0xffffad8000017400 0041 00000000 0x0 0x0
0xffffad8000017480 0041 00000000 0x0 0x0
0xffffad8000017500 0041 00000000 0x0 0x0
0xffffad8000017580 0041 00000000 0x0 0x0
0xffffad8000017600 0041 00000000 0x0 0x0
0xffffad8000017680 0041 00000000 0x0 0x0
0xffffad8000017700 0041 00000000 0x0 0x0
0xffffad8000017780 0041 00000000 0x0 0x0
0xffffad8000017800 0041 00000000 0x0 0x0
0xffffad8000017880 0041 00000000 0x0 0x0
0xffffad8000017900 0041 00000000 0x0 0x0
0xffffad8000017980 0041 00000000 0x0 0x0
0xffffad8000017a00 0041 00000000 0x0 0x0
0xffffad8000017a80 0041 00000000 0x0 0x0
0xffffad8000017b00 0041 00000000 0x0 0x0
0xffffad8000017b80 0041 00000000 0x0 0x0
0xffffad8000017c00 0041 00000000 0x0 0x0
0xffffad8000017c80 0041 00000000 0x0 0x0
0xffffad8000017d00 0041 00000000 0x0 0x0
0xffffad8000017d80 0041 00000000 0x0 0x0
0xffffad8000017e00 0041 00000000 0x0 0x0
0xffffad8000017e80 0041 00000000 0x0 0x0
0xffffad8000017f00 0041 00000000 0x0 0x0
0xffffad8000017f80 0041 00000000 0x0 0x0
0xffffad8000018000 0041 00000000 0x0 0x0
0xffffad8000018080 0041 00000000 0x0 0x0
0xffffad8000018100 0041 00000000 0x0 0x0
0xffffad8000018180 0041 00000000 0x0 0x0
0xffffad8000018200 0041 00000000 0x0 0x0
0xffffad8000018280 0041 00000000 0x0 0x0
0xffffad8000018300 0041 00000000 0x0 0x0
0xffffad8000018380 0041 00000000 0x0 0x0
0xffffad8000018400 0041 00000000 0x0 0x0
0xffffad8000018480 0041 00000000 0x0 0x0
0xffffad8000018500 0041 00000000 0x0 0x0
0xffffad8000018580 0041 00000000 0x0 0x0
0xffffad8000018600 0041 00000000 0x0 0x0
0xffffad8000018680 0041 00000000 0x0 0x0
0xffffad8000018700 0041 00000000 0x0 0x0
0xffffad8000018780 0041 00000000 0x0 0x0
0xffffad8000018800 0041 00000000 0x0 0x0
0xffffad8000018880 0041 00000000 0x0 0x0
0xffffad8000018900 0041 00000000 0x0 0x0
0xffffad8000018980 0041 00000000 0x0 0x0
0xffffad8000018a00 0041 00000000 0x0 0x0
0xffffad8000018a80 0041 00000000 0x0 0x0
0xffffad8000018b00 0041 00000000 0x0 0x0
0xffffad8000018b80 0041 00000000 0x0 0x0
0xffffad8000018c00 0041 00000000 0x0 0x0
0xffffad8000018c80 0041 00000000 0x0 0x0
0xffffad8000018d00 0041 00000000 0x0 0x0
0xffffad8000018d80 0041 00000000 0x0 0x0
0xffffad8000018e00 0041 00000000 0x0 0x0
0xffffad8000018e80 0041 00000000 0x0 0x0
0xffffad8000018f00 0041 00000000 0x0 0x0
0xffffad8000018f80 0041 00000000 0x0 0x0
0xffffad8000019000 0041 00000000 0x0 0x0
0xffffad8000019080 0041 00000000 0x0 0x0
0xffffad8000019100 0041 00000000 0x0 0x0
0xffffad8000019180 0041 00000000 0x0 0x0
0xffffad8000019200 0041 00000000 0x0 0x0
0xffffad8000019280 0041 00000000 0x0 0x0
0xffffad8000019300 0041 00000000 0x0 0x0
0xffffad8000019380 0041 00000000 0x0 0x0
0xffffad8000019400 0041 00000000 0x0 0x0
0xffffad8000019480 0041 00000000 0x0 0x0
0xffffad8000019500 0041 00000000 0x0 0x0
0xffffad8000019580 0041 00000000 0x0 0x0
0xffffad8000019600 0041 00000000 0x0 0x0
0xffffad8000019680 0041 00000000 0x0 0x0
0xffffad8000019700 0041 00000000 0x0 0x0
0xffffad8000019780 0041 00000000 0x0 0x0
0xffffad8000019800 0041 00000000 0x0 0x0
0xffffad8000019880 0041 00000000 0x0 0x0
0xffffad8000019900 0041 00000000 0x0 0x0
0xffffad8000019980 0041 00000000 0x0 0x0
0xffffad8000019a00 0041 00000000 0x0 0x0
0xffffad8000019a80 0041 00000000 0x0 0x0
0xffffad8000019b00 0041 00000000 0x0 0x0
0xffffad8000019b80 0041 00000000 0x0 0x0
0xffffad8000019c00 0041 00000000 0x0 0x0
0xffffad8000019c80 0041 00000000 0x0 0x0
0xffffad8000019d00 0041 00000000 0x0 0x0
0xffffad8000019d80 0041 00000000 0x0 0x0
0xffffad8000019e00 0041 00000000 0x0 0x0
0xffffad8000019e80 0041 00000000 0x0 0x0
0xffffad8000019f00 0041 00000000 0x0 0x0
0xffffad8000019f80 0041 00000000 0x0 0x0
0xffffad800001a000 0041 00000000 0x0 0x0
0xffffad800001a080 0041 00000000 0x0 0x0
0xffffad800001a100 0041 00000000 0x0 0x0
0xffffad800001a180 0041 00000000 0x0 0x0
0xffffad800001a200 0041 00000000 0x0 0x0
0xffffad800001a280 0041 00000000 0x0 0x0
0xffffad800001a300 0041 00000000 0x0 0x0
0xffffad800001a380 0041 00000000 0x0 0x0
0xffffad800001a400 0041 00000000 0x0 0x0
0xffffad800001a480 0041 00000000 0x0 0x0
0xffffad800001a500 0041 00000000 0x0 0x0
0xffffad800001a580 0041 00000000 0x0 0x0
0xffffad800001a600 0041 00000000 0x0 0x0
0xffffad800001a680 0041 00000000 0x0 0x0
0xffffad800001a700 0041 00000000 0x0 0x0
0xffffad800001a780 0041 00000000 0x0 0x0
0xffffad800001a800 0041 00000000 0x0 0x0
0xffffad800001a880 0041 00000000 0x0 0x0
0xffffad800001a900 0041 00000000 0x0 0x0
0xffffad800001a980 0041 00000000 0x0 0x0
0xffffad800001aa00 0041 00000000 0x0 0x0
0xffffad800001aa80 0041 00000000 0x0 0x0
0xffffad800001ab00 0041 00000000 0x0 0x0
0xffffad800001ab80 0041 00000000 0x0 0x0
0xffffad800001ac00 0041 00000000 0x0 0x0
0xffffad800001ac80 0041 00000000 0x0 0x0
0xffffad800001ad00 0041 00000000 0x0 0x0
0xffffad800001ad80 0041 00000000 0x0 0x0
0xffffad800001ae00 0041 00000000 0x0 0x0
0xffffad800001ae80 0041 00000000 0x0 0x0
0xffffad800001af00 0041 00000000 0x0 0x0
0xffffad800001af80 0041 00000000 0x0 0x0
0xffffad800001b000 0041 00000000 0x0 0x0
0xffffad800001b080 0041 00000000 0x0 0x0
0xffffad800001b100 0041 00000000 0x0 0x0
0xffffad800001b180 0041 00000000 0x0 0x0
0xffffad800001b200 0041 00000000 0x0 0x0
0xffffad800001b280 0041 00000000 0x0 0x0
0xffffad800001b300 0041 00000000 0x0 0x0
0xffffad800001b380 0041 00000000 0x0 0x0
0xffffad800001b400 0041 00000000 0x0 0x0
0xffffad800001b480 0041 00000000 0x0 0x0
0xffffad800001b500 0041 00000000 0x0 0x0
0xffffad800001b580 0041 00000000 0x0 0x0
0xffffad800001b600 0041 00000000 0x0 0x0
0xffffad800001b680 0041 00000000 0x0 0x0
0xffffad800001b700 0041 00000000 0x0 0x0
0xffffad800001b780 0041 00000000 0x0 0x0
0xffffad800001b800 0041 00000000 0x0 0x0
0xffffad800001b880 0041 00000000 0x0 0x0
0xffffad800001b900 0041 00000000 0x0 0x0
0xffffad800001b980 0041 00000000 0x0 0x0
0xffffad800001ba00 0041 00000000 0x0 0x0
0xffffad800001ba80 0041 00000000 0x0 0x0
0xffffad800001bb00 0041 00000000 0x0 0x0
0xffffad800001bb80 0001 00000000 0x0 0x0
0xffffad800001bc00 0001 00000000 0x0 0x0
0xffffad800001bc80 0001 00000000 0x0 0x0
0xffffad800001bd00 0001 00000000 0x0 0x0
0xffffad800001bd80 0001 00000000 0x0 0x0
0xffffad800001be00 0001 00000000 0x0 0x0
0xffffad800001be80 0001 00000000 0x0 0x0
0xffffad800001bf00 0001 00000000 0x0 0x0
0xffffad800001bf80 0001 00000000 0x0 0x0
0xffffad800001c000 0001 00000000 0x0 0x0
0xffffad800001c080 0001 00000000 0x0 0x0
0xffffad800001c100 0001 00000000 0x0 0x0
0xffffad800001c180 0001 00000000 0x0 0x0
0xffffad800001c200 0001 00000000 0x0 0x0
0xffffad800001c280 0001 00000000 0x0 0x0
0xffffad800001c300 0001 00000000 0x0 0x0
0xffffad800001c380 0001 00000000 0x0 0x0
0xffffad800001c400 0001 00000000 0x0 0x0
0xffffad800001c480 0001 00000000 0x0 0x0
0xffffad800001c500 0001 00000000 0x0 0x0
0xffffad800001c580 0001 00000000 0x0 0x0
0xffffad800001c600 0001 00000000 0x0 0x0
0xffffad800001c680 0001 00000000 0x0 0x0
0xffffad800001c700 0001 00000000 0x0 0x0
0xffffad800001c780 0001 00000000 0x0 0x0
0xffffad800001c800 0001 00000000 0x0 0x0
0xffffad800001c880 0001 00000000 0x0 0x0
0xffffad800001c900 0001 00000000 0x0 0x0
0xffffad800001c980 0001 00000000 0x0 0x0
0xffffad800001ca00 0001 00000000 0x0 0x0
0xffffad800001ca80 0001 00000000 0x0 0x0
0xffffad800001cb00 0001 00000000 0x0 0x0
0xffffad800001cb80 0001 00000000 0x0 0x0
0xffffad800001cc00 0001 00000000 0x0 0x0
0xffffad800001cc80 0001 00000000 0x0 0x0
0xffffad800001cd00 0001 00000000 0x0 0x0
0xffffad800001cd80 0001 00000000 0x0 0x0
0xffffad800001ce00 0001 00000000 0x0 0x0
0xffffad800001ce80 0001 00000000 0x0 0x0
0xffffad800001cf00 0001 00000000 0x0 0x0
0xffffad800001cf80 0001 00000000 0x0 0x0
0xffffad800001d000 0001 00000000 0x0 0x0
0xffffad800001d080 0001 00000000 0x0 0x0
0xffffad800001d100 0001 00000000 0x0 0x0
0xffffad800001d180 0001 00000000 0x0 0x0
0xffffad800001d200 0001 00000000 0x0 0x0
0xffffad800001d280 0001 00000000 0x0 0x0
0xffffad800001d300 0001 00000000 0x0 0x0
0xffffad800001d380 0001 00000000 0x0 0x0
0xffffad800001d400 0001 00000000 0x0 0x0
0xffffad800001d480 0001 00000000 0x0 0x0
0xffffad800001d500 0001 00000000 0x0 0x0
0xffffad800001d580 0001 00000000 0x0 0x0
0xffffad800001d600 0001 00000000 0x0 0x0
0xffffad800001d680 0001 00000000 0x0 0x0
0xffffad800001d700 0001 00000000 0x0 0x0
0xffffad800001d780 0001 00000000 0x0 0x0
0xffffad800001d800 0001 00000000 0x0 0x0
0xffffad800001d880 0001 00000000 0x0 0x0
0xffffad800001d900 0001 00000000 0x0 0x0
0xffffad800001d980 0001 00000000 0x0 0x0
0xffffad800001da00 0001 00000000 0x0 0x0
0xffffad800001da80 0001 00000000 0x0 0x0
0xffffad800001db00 0001 00000000 0x0 0x0
0xffffad800001db80 0001 00000000 0x0 0x0
0xffffad800001dc00 0001 00000000 0x0 0x0
0xffffad800001dc80 0001 00000000 0x0 0x0
0xffffad800001dd00 0001 00000000 0x0 0x0
0xffffad800001dd80 0001 00000000 0x0 0x0
0xffffad800001de00 0001 00000000 0x0 0x0
0xffffad800001de80 0001 00000000 0x0 0x0
0xffffad800001df00 0001 00000000 0x0 0x0
0xffffad800001df80 0001 00000000 0x0 0x0
0xffffad800001e000 0001 00000000 0x0 0x0
0xffffad800001e080 0001 00000000 0x0 0x0
0xffffad800001e100 0001 00000000 0x0 0x0
0xffffad800001e180 0001 00000000 0x0 0x0
0xffffad800001e200 0001 00000000 0x0 0x0
0xffffad800001e280 0001 00000000 0x0 0x0
0xffffad800001e300 0001 00000000 0x0 0x0
0xffffad800001e380 0001 00000000 0x0 0x0
0xffffad800001e400 0001 00000000 0x0 0x0
0xffffad800001e480 0001 00000000 0x0 0x0
0xffffad800001e500 0001 00000000 0x0 0x0
0xffffad800001e580 0001 00000000 0x0 0x0
0xffffad800001e600 0001 00000000 0x0 0x0
0xffffad800001e680 0001 00000000 0x0 0x0
0xffffad800001e700 0001 00000000 0x0 0x0
0xffffad800001e780 0001 00000000 0x0 0x0
0xffffad800001e800 0001 00000000 0x0 0x0
0xffffad800001e880 0001 00000000 0x0 0x0
0xffffad800001e900 0001 00000000 0x0 0x0
0xffffad800001e980 0001 00000000 0x0 0x0
0xffffad800001ea00 0001 00000000 0x0 0x0
0xffffad800001ea80 0001 00000000 0x0 0x0
0xffffad800001eb00 0001 00000000 0x0 0x0
0xffffad800001eb80 0001 00000000 0x0 0x0
0xffffad800001ec00 0001 00000000 0x0 0x0
0xffffad800001ec80 0001 00000000 0x0 0x0
0xffffad800001ed00 0001 00000000 0x0 0x0
0xffffad800001ed80 0001 00000000 0x0 0x0
0xffffad800001ee00 0001 00000000 0x0 0x0
0xffffad800001ee80 0001 00000000 0x0 0x0
0xffffad800001ef00 0001 00000000 0x0 0x0
0xffffad800001ef80 0001 00000000 0x0 0x0
0xffffad800001f000 0001 00000000 0x0 0x0
0xffffad800001f080 0001 00000000 0x0 0x0
0xffffad800001f100 0001 00000000 0x0 0x0
0xffffad800001f180 0001 00000000 0x0 0x0
0xffffad800001f200 0001 00000000 0x0 0x0
0xffffad800001f280 0001 00000000 0x0 0x0
0xffffad800001f300 0001 00000000 0x0 0x0
0xffffad800001f380 0001 00000000 0x0 0x0
0xffffad800001f400 0001 00000000 0x0 0x0
0xffffad800001f480 0001 00000000 0x0 0x0
0xffffad800001f500 0001 00000000 0x0 0x0
0xffffad800001f580 0001 00000000 0x0 0x0
0xffffad800001f600 0001 00000000 0x0 0x0
0xffffad800001f680 0001 00000000 0x0 0x0
0xffffad800001f700 0001 00000000 0x0 0x0
0xffffad800001f780 0001 00000000 0x0 0x0
0xffffad800001f800 0001 00000000 0x0 0x0
0xffffad800001f880 0001 00000000 0x0 0x0
0xffffad800001f900 0001 00000000 0x0 0x0
0xffffad800001f980 0001 00000000 0x0 0x0
0xffffad800001fa00 0001 00000000 0x0 0x0
0xffffad800001fa80 0001 00000000 0x0 0x0
0xffffad800001fb00 0001 00000000 0x0 0x0
0xffffad800001fb80 0001 00000000 0x0 0x0
0xffffad800001fc00 0001 00000000 0x0 0x0
0xffffad800001fc80 0001 00000000 0x0 0x0
0xffffad800001fd00 0001 00000000 0x0 0x0
0xffffad800001fd80 0001 00000000 0x0 0x0
0xffffad800001fe00 0001 00000000 0x0 0x0
0xffffad800001fe80 0001 00000000 0x0 0x0
0xffffad800001ff00 0001 00000000 0x0 0x0
0xffffad800001ff80 0001 00000000 0x0 0x0
0xffffad8000020000 0001 00000000 0x0 0x0
0xffffad8000020080 0001 00000000 0x0 0x0
0xffffad8000020100 0001 00000000 0x0 0x0
0xffffad8000020180 0001 00000000 0x0 0x0
0xffffad8000020200 0001 00000000 0x0 0x0
0xffffad8000020280 0001 00000000 0x0 0x0
0xffffad8000020300 0001 00000000 0x0 0x0
0xffffad8000020380 0001 00000000 0x0 0x0
0xffffad8000020400 0001 00000000 0x0 0x0
0xffffad8000020480 0001 00000000 0x0 0x0
0xffffad8000020500 0001 00000000 0x0 0x0
0xffffad8000020580 0001 00000000 0x0 0x0
0xffffad8000020600 0001 00000000 0x0 0x0
0xffffad8000020680 0001 00000000 0x0 0x0
0xffffad8000020700 0001 00000000 0x0 0x0
0xffffad8000020780 0001 00000000 0x0 0x0
0xffffad8000020800 0001 00000000 0x0 0x0
0xffffad8000020880 0001 00000000 0x0 0x0
0xffffad8000020900 0001 00000000 0x0 0x0
0xffffad8000020980 0001 00000000 0x0 0x0
0xffffad8000020a00 0001 00000000 0x0 0x0
0xffffad8000020a80 0001 00000000 0x0 0x0
0xffffad8000020b00 0001 00000000 0x0 0x0
0xffffad8000020b80 0001 00000000 0x0 0x0
0xffffad8000020c00 0001 00000000 0x0 0x0
0xffffad8000020c80 0001 00000000 0x0 0x0
0xffffad8000020d00 0001 00000000 0x0 0x0
0xffffad8000020d80 0001 00000000 0x0 0x0
0xffffad8000020e00 0001 00000000 0x0 0x0
0xffffad8000020e80 0001 00000000 0x0 0x0
0xffffad8000020f00 0001 00000000 0x0 0x0
0xffffad8000020f80 0001 00000000 0x0 0x0
0xffffad8000021000 0001 00000000 0x0 0x0
0xffffad8000021080 0001 00000000 0x0 0x0
0xffffad8000021100 0001 00000000 0x0 0x0
0xffffad8000021180 0001 00000000 0x0 0x0
0xffffad8000021200 0001 00000000 0x0 0x0
0xffffad8000021280 0001 00000000 0x0 0x0
0xffffad8000021300 0001 00000000 0x0 0x0
0xffffad8000021380 0001 00000000 0x0 0x0
0xffffad8000021400 0001 00000000 0x0 0x0
0xffffad8000021480 0001 00000000 0x0 0x0
0xffffad8000021500 0001 00000000 0x0 0x0
0xffffad8000021580 0001 00000000 0x0 0x0
0xffffad8000021600 0001 00000000 0x0 0x0
0xffffad8000021680 0001 00000000 0x0 0x0
0xffffad8000021700 0001 00000000 0x0 0x0
0xffffad8000021780 0001 00000000 0x0 0x0
0xffffad8000021800 0001 00000000 0x0 0x0
0xffffad8000021880 0001 00000000 0x0 0x0
0xffffad8000021900 0001 00000000 0x0 0x0
0xffffad8000021980 0001 00000000 0x0 0x0
0xffffad8000021a00 0001 00000000 0x0 0x0
0xffffad8000021a80 0001 00000000 0x0 0x0
0xffffad8000021b00 0001 00000000 0x0 0x0
0xffffad8000021b80 0001 00000000 0x0 0x0
0xffffad8000021c00 0001 00000000 0x0 0x0
0xffffad8000021c80 0001 00000000 0x0 0x0
0xffffad8000021d00 0001 00000000 0x0 0x0
0xffffad8000021d80 0001 00000000 0x0 0x0
0xffffad8000021e00 0001 00000000 0x0 0x0
0xffffad8000021e80 0001 00000000 0x0 0x0
0xffffad8000021f00 0001 00000000 0x0 0x0
0xffffad8000021f80 0001 00000000 0x0 0x0
0xffffad8000022000 0001 00000000 0x0 0x0
0xffffad8000022080 0001 00000000 0x0 0x0
0xffffad8000022100 0001 00000000 0x0 0x0
0xffffad8000022180 0001 00000000 0x0 0x0
0xffffad8000022200 0001 00000000 0x0 0x0
0xffffad8000022280 0001 00000000 0x0 0x0
0xffffad8000022300 0001 00000000 0x0 0x0
0xffffad8000022380 0001 00000000 0x0 0x0
0xffffad8000022400 0001 00000000 0x0 0x0
0xffffad8000022480 0001 00000000 0x0 0x0
0xffffad8000022500 0001 00000000 0x0 0x0
0xffffad8000022580 0001 00000000 0x0 0x0
0xffffad8000022600 0001 00000000 0x0 0x0
0xffffad8000022680 0001 00000000 0x0 0x0
0xffffad8000022700 0001 00000000 0x0 0x0
0xffffad8000022780 0001 00000000 0x0 0x0
0xffffad8000022800 0001 00000000 0x0 0x0
0xffffad8000022880 0001 00000000 0x0 0x0
0xffffad8000022900 0001 00000000 0x0 0x0
0xffffad8000022980 0001 00000000 0x0 0x0
0xffffad8000022a00 0001 00000000 0x0 0x0
0xffffad8000022a80 0001 00000000 0x0 0x0
0xffffad8000022b00 0001 00000000 0x0 0x0
0xffffad8000022b80 0001 00000000 0x0 0x0
0xffffad8000022c00 0001 00000000 0x0 0x0
0xffffad8000022c80 0001 00000000 0x0 0x0
0xffffad8000022d00 0001 00000000 0x0 0x0
0xffffad8000022d80 0001 00000000 0x0 0x0
0xffffad8000022e00 0001 00000000 0x0 0x0
0xffffad8000022e80 0001 00000000 0x0 0x0
0xffffad8000022f00 0001 00000000 0x0 0x0
0xffffad8000022f80 0001 00000000 0x0 0x0
0xffffad8000023000 0001 00000000 0x0 0x0
0xffffad8000023080 0001 00000000 0x0 0x0
0xffffad8000023100 0001 00000000 0x0 0x0
0xffffad8000023180 0001 00000000 0x0 0x0
0xffffad8000023200 0001 00000000 0x0 0x0
0xffffad8000023280 0001 00000000 0x0 0x0
0xffffad8000023300 0001 00000000 0x0 0x0
0xffffad8000023380 0001 00000000 0x0 0x0
0xffffad8000023400 0001 00000000 0x0 0x0
0xffffad8000023480 0001 00000000 0x0 0x0
0xffffad8000023500 0001 00000000 0x0 0x0
0xffffad8000023580 0001 00000000 0x0 0x0
0xffffad8000023600 0001 00000000 0x0 0x0
0xffffad8000023680 0001 00000000 0x0 0x0
0xffffad8000023700 0001 00000000 0x0 0x0
0xffffad8000023780 0001 00000000 0x0 0x0
0xffffad8000023800 0001 00000000 0x0 0x0
0xffffad8000023880 0001 00000000 0x0 0x0
0xffffad8000023900 0001 00000000 0x0 0x0
0xffffad8000023980 0001 00000000 0x0 0x0
0xffffad8000023a00 0001 00000000 0x0 0x0
0xffffad8000023a80 0001 00000000 0x0 0x0
0xffffad8000023b00 0001 00000000 0x0 0x0
0xffffad8000023b80 0001 00000000 0x0 0x0
0xffffad8000023c00 0001 00000000 0x0 0x0
0xffffad8000023c80 0001 00000000 0x0 0x0
0xffffad8000023d00 0001 00000000 0x0 0x0
0xffffad8000023d80 0001 00000000 0x0 0x0
0xffffad8000023e00 0001 00000000 0x0 0x0
0xffffad8000023e80 0001 00000000 0x0 0x0
0xffffad8000023f00 0001 00000000 0x0 0x0
0xffffad8000023f80 0001 00000000 0x0 0x0
0xffffad8000024000 0001 00000000 0x0 0x0
0xffffad8000024080 0001 00000000 0x0 0x0
0xffffad8000024100 0001 00000000 0x0 0x0
0xffffad8000024180 0001 00000000 0x0 0x0
0xffffad8000024200 0001 00000000 0x0 0x0
0xffffad8000024280 0001 00000000 0x0 0x0
0xffffad8000024300 0001 00000000 0x0 0x0
0xffffad8000024380 0001 00000000 0x0 0x0
0xffffad8000024400 0001 00000000 0x0 0x0
0xffffad8000024480 0001 00000000 0x0 0x0
0xffffad8000024500 0001 00000000 0x0 0x0
0xffffad8000024580 0001 00000000 0x0 0x0
0xffffad8000024600 0001 00000000 0x0 0x0
0xffffad8000024680 0001 00000000 0x0 0x0
0xffffad8000024700 0001 00000000 0x0 0x0
0xffffad8000024780 0001 00000000 0x0 0x0
0xffffad8000024800 0001 00000000 0x0 0x0
0xffffad8000024880 0001 00000000 0x0 0x0
0xffffad8000024900 0001 00000000 0x0 0x0
0xffffad8000024980 0001 00000000 0x0 0x0
0xffffad8000024a00 0001 00000000 0x0 0x0
0xffffad8000024a80 0001 00000000 0x0 0x0
0xffffad8000024b00 0001 00000000 0x0 0x0
0xffffad8000024b80 0001 00000000 0x0 0x0
0xffffad8000024c00 0001 00000000 0x0 0x0
0xffffad8000024c80 0001 00000000 0x0 0x0
0xffffad8000024d00 0001 00000000 0x0 0x0
0xffffad8000024d80 0001 00000000 0x0 0x0
0xffffad8000024e00 0001 00000000 0x0 0x0
0xffffad8000024e80 0001 00000000 0x0 0x0
0xffffad8000024f00 0001 00000000 0x0 0x0
0xffffad8000024f80 0001 00000000 0x0 0x0
0xffffad8000025000 0001 00000000 0x0 0x0
0xffffad8000025080 0001 00000000 0x0 0x0
0xffffad8000025100 0001 00000000 0x0 0x0
0xffffad8000025180 0001 00000000 0x0 0x0
0xffffad8000025200 0001 00000000 0x0 0x0
0xffffad8000025280 0001 00000000 0x0 0x0
0xffffad8000025300 0001 00000000 0x0 0x0
0xffffad8000025380 0001 00000000 0x0 0x0
0xffffad8000025400 0001 00000000 0x0 0x0
0xffffad8000025480 0001 00000000 0x0 0x0
0xffffad8000025500 0001 00000000 0x0 0x0
0xffffad8000025580 0001 00000000 0x0 0x0
0xffffad8000025600 0001 00000000 0x0 0x0
0xffffad8000025680 0001 00000000 0x0 0x0
0xffffad8000025700 0001 00000000 0x0 0x0
0xffffad8000025780 0001 00000000 0x0 0x0
0xffffad8000025800 0001 00000000 0x0 0x0
0xffffad8000025880 0001 00000000 0x0 0x0
0xffffad8000025900 0001 00000000 0x0 0x0
0xffffad8000025980 0001 00000000 0x0 0x0
0xffffad8000025a00 0001 00000000 0x0 0x0
0xffffad8000025a80 0001 00000000 0x0 0x0
0xffffad8000025b00 0001 00000000 0x0 0x0
0xffffad8000025b80 0001 00000000 0x0 0x0
0xffffad8000025c00 0001 00000000 0x0 0x0
0xffffad8000025c80 0001 00000000 0x0 0x0
0xffffad8000025d00 0001 00000000 0x0 0x0
0xffffad8000025d80 0001 00000000 0x0 0x0
0xffffad8000025e00 0001 00000000 0x0 0x0
0xffffad8000025e80 0001 00000000 0x0 0x0
0xffffad8000025f00 0001 00000000 0x0 0x0
0xffffad8000025f80 0001 00000000 0x0 0x0
0xffffad8000026000 0001 00000000 0x0 0x0
0xffffad8000026080 0001 00000000 0x0 0x0
0xffffad8000026100 0001 00000000 0x0 0x0
0xffffad8000026180 0001 00000000 0x0 0x0
0xffffad8000026200 0001 00000000 0x0 0x0
0xffffad8000026280 0001 00000000 0x0 0x0
0xffffad8000026300 0001 00000000 0x0 0x0
0xffffad8000026380 0001 00000000 0x0 0x0
0xffffad8000026400 0001 00000000 0x0 0x0
0xffffad8000026480 0001 00000000 0x0 0x0
0xffffad8000026500 0001 00000000 0x0 0x0
0xffffad8000026580 0001 00000000 0x0 0x0
0xffffad8000026600 0001 00000000 0x0 0x0
0xffffad8000026680 0001 00000000 0x0 0x0
0xffffad8000026700 0001 00000000 0x0 0x0
0xffffad8000026780 0001 00000000 0x0 0x0
0xffffad8000026800 0001 00000000 0x0 0x0
0xffffad8000026880 0001 00000000 0x0 0x0
0xffffad8000026900 0001 00000000 0x0 0x0
0xffffad8000026980 0001 00000000 0x0 0x0
0xffffad8000026a00 0001 00000000 0x0 0x0
0xffffad8000026a80 0001 00000000 0x0 0x0
0xffffad8000026b00 0001 00000000 0x0 0x0
0xffffad8000026b80 0001 00000000 0x0 0x0
0xffffad8000026c00 0001 00000000 0x0 0x0
0xffffad8000026c80 0001 00000000 0x0 0x0
0xffffad8000026d00 0001 00000000 0x0 0x0
0xffffad8000026d80 0001 00000000 0x0 0x0
0xffffad8000026e00 0001 00000000 0x0 0x0
0xffffad8000026e80 0001 00000000 0x0 0x0
0xffffad8000026f00 0001 00000000 0x0 0x0
0xffffad8000026f80 0001 00000000 0x0 0x0
0xffffad8000027000 0001 00000000 0x0 0x0
0xffffad8000027080 0001 00000000 0x0 0x0
0xffffad8000027100 0001 00000000 0x0 0x0
0xffffad8000027180 0001 00000000 0x0 0x0
0xffffad8000027200 0001 00000000 0x0 0x0
0xffffad8000027280 0001 00000000 0x0 0x0
0xffffad8000027300 0001 00000000 0x0 0x0
0xffffad8000027380 0001 00000000 0x0 0x0
0xffffad8000027400 0001 00000000 0x0 0x0
0xffffad8000027480 0001 00000000 0x0 0x0
0xffffad8000027500 0001 00000000 0x0 0x0
0xffffad8000027580 0001 00000000 0x0 0x0
0xffffad8000027600 0001 00000000 0x0 0x0
0xffffad8000027680 0001 00000000 0x0 0x0
0xffffad8000027700 0001 00000000 0x0 0x0
0xffffad8000027780 0001 00000000 0x0 0x0
0xffffad8000027800 0001 00000000 0x0 0x0
0xffffad8000027880 0001 00000000 0x0 0x0
0xffffad8000027900 0001 00000000 0x0 0x0
0xffffad8000027980 0001 00000000 0x0 0x0
0xffffad8000027a00 0001 00000000 0x0 0x0
0xffffad8000027a80 0001 00000000 0x0 0x0
0xffffad8000027b00 0001 00000000 0x0 0x0
0xffffad8000027b80 0001 00000000 0x0 0x0
0xffffad8000027c00 0001 00000000 0x0 0x0
0xffffad8000027c80 0001 00000000 0x0 0x0
0xffffad8000027d00 0001 00000000 0x0 0x0
0xffffad8000027d80 0001 00000000 0x0 0x0
0xffffad8000027e00 0001 00000000 0x0 0x0
0xffffad8000027e80 0001 00000000 0x0 0x0
0xffffad8000027f00 0001 00000000 0x0 0x0
0xffffad8000027f80 0001 00000000 0x0 0x0
0xffffad8000028000 0001 00000000 0x0 0x0
0xffffad8000028080 0001 00000000 0x0 0x0
0xffffad8000028100 0001 00000000 0x0 0x0
0xffffad8000028180 0001 00000000 0x0 0x0
0xffffad8000028200 0001 00000000 0x0 0x0
0xffffad8000028280 0001 00000000 0x0 0x0
0xffffad8000028300 0001 00000000 0x0 0x0
0xffffad8000028380 0001 00000000 0x0 0x0
0xffffad8000028400 0001 00000000 0x0 0x0
0xffffad8000028480 0001 00000000 0x0 0x0
0xffffad8000028500 0001 00000000 0x0 0x0
0xffffad8000028580 0001 00000000 0x0 0x0
0xffffad8000028600 0001 00000000 0x0 0x0
0xffffad8000028680 0001 00000000 0x0 0x0
0xffffad8000028700 0001 00000000 0x0 0x0
0xffffad8000028780 0001 00000000 0x0 0x0
0xffffad8000028800 0001 00000000 0x0 0x0
0xffffad8000028880 0001 00000000 0x0 0x0
0xffffad8000028900 0001 00000000 0x0 0x0
0xffffad8000028980 0001 00000000 0x0 0x0
0xffffad8000028a00 0001 00000000 0x0 0x0
0xffffad8000028a80 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Jun 20, 2024, 9:42:23 PM (6 days ago) Jun 20

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 5680363e1330 sysinst(8): Note that leaving the network "me..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=127c883e980000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=c1101198b754eb6a2950

compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:

disk image: https://storage.googleapis.com/syzbot-assets/8ca547abc81e/disk-5680363e.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/d7888ab0e007/netbsd-5680363e.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+c11011...@syzkaller.appspotmail.com

[ 334.6662122] .: failed to start extattr, error = 0panic:ASan: Unauthorized Access In 0xffffffff819097d6: Addr 0xffffc880143eaf60 [8 bytes, read, RedZonePartial]

[ 334.7262385] cpu1: Begin traceback...
[ 334.7562056] vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288
[ 334.8161961] panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084
[ 334.8761787] kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 334.8761787] kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201
[ 334.9361959] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
[ 334.9361959] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:364 [inline]
[ 334.9361959] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
[ 334.9361959] __asan_load8() at netbsd:__asan_load8+0x251 sys/kern/subr_asan.c:1208
[ 334.9861786] nfs_export_update_30() at netbsd:nfs_export_update_30+0x7e sys/nfs/nfs_export.c:430
[ 335.0361792] vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 sys/kern/vfs_hooks.c:138
[ 335.0961862] do_sys_mount() at netbsd:do_sys_mount+0xbf2 mount_update sys/kern/vfs_syscalls.c:391 [inline]
[ 335.0961862] do_sys_mount() at netbsd:do_sys_mount+0xbf2 sys/kern/vfs_syscalls.c:612
[ 335.1461948] sys___mount50() at netbsd:sys___mount50+0x89 sys/kern/vfs_syscalls.c:537
[ 335.1961983] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 335.1961983] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 335.2461935] syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline]
[ 335.2461935] syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 335.2461935] syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137
[ 335.2561809] --- syscall (number 410 via SYS_syscall) ---
[ 335.2761805] netbsd:syscall+0x35c:
[ 335.2861829] cpu1: End traceback...
[ 335.2861829] fatal breakpoint trap in supervisor mode
[ 335.2861829] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x1b33a25000 ilevel 0 rsp 0xffffc8825173d9a0
[ 335.2962238] curlwp 0xffffc8801403b100 pid 1116.5154 lowest kstack 0xffffc882517362c0
Stopped in pid 1116.5154 (syz-executor.0) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288
panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084
kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201
__asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
__asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:364 [inline]
__asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_check sys/kern/subr_asan.c:421 [inline]
__asan_load8() at netbsd:__asan_load8+0x251 sys/kern/subr_asan.c:1208
nfs_export_update_30() at netbsd:nfs_export_update_30+0x7e sys/nfs/nfs_export.c:430
vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 sys/kern/vfs_hooks.c:138
do_sys_mount() at netbsd:do_sys_mount+0xbf2 mount_update sys/kern/vfs_syscalls.c:391 [inline]
do_sys_mount() at netbsd:do_sys_mount+0xbf2 sys/kern/vfs_syscalls.c:612
sys___mount50() at netbsd:sys___mount50+0x89 sys/kern/vfs_syscalls.c:537
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137
--- syscall (number 410 via SYS_syscall) ---
netbsd:syscall+0x35c:

Panic string: ASan: Unauthorized Access In 0xffffffff819097d6: Addr 0xffffc880143eaf60 [8 bytes, read, RedZonePartial]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

5715 5067 3 1 180 ffffc8801404aa40 syz-executor.2 parked
5715 5715 2 0 10000000 ffffc88012ba39c0 syz-executor.2
1116 > 5154 7 1 0 ffffc8801403b100 syz-executor.0
1116 4967 2 0 0 ffffc88012d04680 syz-executor.0
1116 1116 2 1 10000000 ffffc88013382180 syz-executor.0
5718 5718 2 0 0 ffffc88012c87780 ndp
5811 5586 3 0 180 ffffc88012d5bbc0 syz-executor.1 parked
5811 5811 2 0 10000000 ffffc88013fe14c0 syz-executor.1
4606 4606 2 0 140 ffffc88013f35300 syz-executor.0
5933 5933 2 1 0 ffffc88013fcb480 syz-executor.3
5942 5942 3 1 180 ffffc8801339ba40 syz-executor.5 wait
5447 5447 2 0 0 ffffc88013460940 syz-executor.4
5176 5176 2 1 140 ffffc88012a5bbc0 syz-executor.2
4771 4771 2 1 140 ffffc8801404a1c0 syz-executor.1
4067 4067 3 1 180 ffffc88012d7c480 dhcpcd poll
3977 3977 3 0 180 ffffc8801403b540 syz-executor.5 parked
3775 4692 3 0 11100000 ffffc88012c2f6c0 syz-executor.5 vfork
3775 3775 2 1 11000040 ffffc88013437740 syz-executor.5
3042 3042 3 1 180 ffffc88012a2fb80 syz-executor.1 parked
3436 3063 3 1 11100000 ffffc88012d29300 syz-executor.1 vfork
3436 3436 2 1 11000040 ffffc88014042a00 syz-executor.1
3118 3118 3 1 180 ffffc88012d29740 syz-executor.4 parked
3409 3409 3 1 180 ffffc88012cd7a00 syz-executor.1 parked
2294 2452 3 1 11100000 ffffc88012c0ba80 syz-executor.1 vfork
2294 2294 2 1 11000040 ffffc880134839c0 syz-executor.1
2768 2768 3 0 180 ffffc8801339b1c0 syz-executor.4 parked
3154 3154 3 0 180 ffffc88012d192c0 syz-executor.3 parked
1899 1899 3 1 180 ffffc88012d19b40 syz-executor.1 parked
2922 2875 3 1 11100000 ffffc88012cb5940 syz-executor.1 vfork
2922 2922 2 1 11000040 ffffc88012ab6080 syz-executor.1
2737 2737 3 1 180 ffffc88012c1a240 syz-executor.1 parked
2634 2634 3 1 180 ffffc88012dcb500 syz-executor.3 parked
1423 1422 3 1 1100000 ffffc88013e1a240 syz-executor.3 vfork
1423 1423 2 1 11000040 ffffc88012c6e740 syz-executor.3
900 900 3 0 180 ffffc8801403b980 syz-executor.1 parked
2126 899 3 0 11100000 ffffc88013468980 syz-executor.1 vfork
2126 2126 2 1 11000040 ffffc88013f78bc0 syz-executor.1
1615 1615 3 1 180 ffffc88013fe1080 syz-executor.5 parked
587 592 3 1 11100000 ffffc88012d0d6c0 syz-executor.5 vfork
587 587 2 1 11000040 ffffc88012ce91c0 syz-executor.5
1236 395 3 1 180 ffffc88012ab6900 syz-fuzzer wait
1236 1208 3 0 180 ffffc88012bd5a00 syz-fuzzer parked
1236 1207 3 1 180 ffffc88013e506c0 syz-fuzzer parked
1236 1073 2 0 1000000 ffffc88013e50280 syz-fuzzer
1236 1202 3 1 180 ffffc88013e1aac0 syz-fuzzer parked
1236 1237 3 0 180 ffffc88012b88100 syz-fuzzer wait
1236 991 3 1 180 ffffc88013de0640 syz-fuzzer wait
1236 1240 3 0 180 ffffc88013dba1c0 syz-fuzzer wait
1236 930 3 0 180 ffffc88012c6eb80 syz-fuzzer parked
1236 449 3 0 180 ffffc88013422b40 syz-fuzzer wait
1236 943 3 1 180 ffffc880134222c0 syz-fuzzer parked
1236 1235 3 1 180 ffffc88012cd1580 syz-fuzzer parked
1236 1081 2 0 0 ffffc88013441bc0 syz-fuzzer
1236 1236 3 1 180 ffffc88012ad1500 syz-fuzzer wait
1238 1238 3 0 180 ffffc88012ad10c0 sshd select
1086 1086 3 0 180 ffffc880126db480 getty nanoslp
1225 1225 3 1 180 ffffc8801349a180 getty nanoslp
1223 1223 3 0 180 ffffc880126d7b80 getty nanoslp
1216 1216 3 0 180 ffffc88012a2f740 getty ttyraw
939 939 3 1 180 ffffc880133ac640 sshd select
1096 1096 3 1 180 ffffc88012d5b340 powerd kqueue
767 767 3 1 180 ffffc88012d29b80 syslogd kqueue
747 747 3 0 180 ffffc88012990ac0 dhcpcd poll
748 748 3 1 180 ffffc88012c2fb00 dhcpcd poll
745 745 2 1 0 ffffc88012c2f280 dhcpcd
487 487 3 0 180 ffffc88012d91900 dhcpcd poll
292 292 3 1 180 ffffc88012d914c0 dhcpcd poll
485 485 2 1 0 ffffc88012d91080 dhcpcd
1 1 3 1 180 ffffc880128679c0 init wait
0 4347 5 0 200 ffffc88012dcb940 (zombie)
0 5049 3 0 200 ffffc88012c87bc0 ktrace ktrwait
0 3653 3 0 200 ffffc880140370c0 ktrace ktrwait
0 2996 3 1 200 ffffc880133cd6c0 ktrace ktrwait
0 1000 3 1 200 ffffc880129c0280 physiod physiod
0 196 3 0 200 ffffc880129c12c0 pooldrain pooldrain
0 195 2 0 240 ffffc880129c0b00 ioflush
0 194 3 1 200 ffffc880129c06c0 pgdaemon pgdaemon
0 167 3 0 200 ffffc88012990680 usb7 usbevt
0 172 3 1 200 ffffc88012990240 usb6 usbevt
0 170 3 0 200 ffffc8801293ba80 usb5 usbevt
0 168 3 1 200 ffffc8801293b640 usb4 usbevt
0 166 3 1 200 ffffc8801293b200 usb3 usbevt
0 165 3 0 200 ffffc880128d1a40 usb2 usbevt
0 31 3 0 200 ffffc880128d1600 usb1 usbevt
0 63 3 1 200 ffffc880128d11c0 usb0 usbevt
0 126 3 0 200 ffffc8801287ba00 usbtask-dr usbtsk
0 125 3 1 200 ffffc8801287b5c0 usbtask-hc usbtsk
0 124 3 0 200 ffffc88010d66b00 swwreboot swwreboot
0 123 3 1 200 ffffc8801287b180 npfgc0 npfgcw
0 122 3 1 200 ffffc88012867580 rt_free rt_free
0 121 3 0 200 ffffc88012867140 unpgc unpgc
0 120 3 0 200 ffffc88012706980 key_timehandler key_timehandler
0 119 3 1 200 ffffc88012706540 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffc88012706100 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffc880126fd940 nd6_timer nd6_timer
0 116 3 1 200 ffffc880126fd500 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffc880126fd0c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffc880126ed900 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffc880126ed4c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffc880126ed080 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffc880126db8c0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffc880126db040 rt_timer rt_timer
0 109 3 0 200 ffffc880126d9780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffc880126d7300 entbutler entropy
0 99 3 0 200 ffffc880120bdb40 viomb balloon
0 98 3 1 200 ffffc880120bd700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffc880120bd2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffc88010d666c0 scsibus0 sccomp
0 29 3 0 200 ffffc88010d66280 pms0 pmsreset
0 28 3 1 200 ffffc88010cacac0 xcall/1 xcall
0 27 1 1 200 ffffc88010cac680 softser/1
0 26 1 1 200 ffffc88010cac240 softclk/1
0 25 1 1 200 ffffc88010ca9a80 softbio/1
0 24 1 1 200 ffffc88010ca9640 softnet/1
0 23 1 1 201 ffffc88010ca9200 idle/1
0 22 3 0 200 ffffc8800fb55a40 lnxsyswq lnxsyswq
0 21 3 1 200 ffffc8800fb55600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffc8800fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffc8800fb54a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffc8800fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffc8800fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffc8800fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffffc8800fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffc8800fb4d140 pmfevent pmfevent
0 13 3 0 200 ffffc8800fb4a980 sopendfree sopendfr
0 12 3 0 200 ffffc8800fb4a540 ifwdog ifwdog
0 11 3 0 200 ffffc8800fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffc8800fb3b940 nfssilly nfssilly
0 9 3 0 200 ffffc8800fb3b500 pooldisp pooldisp
0 8 3 1 200 ffffc8800fb3b0c0 modunload mod_unld
0 7 3 0 200 ffffc8800fb32900 xcall/0 xcall
0 6 1 0 200 ffffc8800fb324c0 softser/0
0 5 1 0 200 ffffc8800fb32080 softclk/0
0 4 1 0 200 ffffc8800fb308c0 softbio/0
0 3 1 0 200 ffffc8800fb30480 softnet/0
0 2 1 0 201 ffffc8800fb30040 idle/0
0 > 0 7 0 240 ffffffff83350000 swapper
[Locks tracked through LWPs]

****** LWP 5715.5715 (syz-executor.2) @ 0xffffc88012ba39c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvmspace_alloc+0x158 uvm_map_setup sys/uvm/uvm_map.c:4786 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x158 uvmspace_init sys/uvm/uvm_map.c:4129 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x158 sys/uvm/uvm_map.c:4108)
lock address : ffffc88012c7b588
type : sleep/adaptive
initialized : netbsd:uvmspace_alloc+0x158

shared holds : 0 exclusive: 0

shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffc88012ba39c0 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x37f
unlocked* : netbsd:uvm_fault_lower_enter+0x630
owner/count : 0x0000000000000020 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 1116.5154 (syz-executor.0) @ 0xffffc8801403b100, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fstrans_init+0x20 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffc8801403b100 last held: 0xffffc8801403b100

last locked* : netbsd:vfs_suspend+0x1a7
unlocked : netbsd:mount_domount+0xb91

owner field : 0xffffc8801403b100 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vfs_mountalloc+0xbc sys/kern/vfs_mount.c:163)

lock address : ffffc88014459400

type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0xbc
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffc8801403b100 last held: 0xffffc8801403b100

last locked* : netbsd:do_sys_mount+0xab9
unlocked : netbsd:mount_domount+0x847

owner field : 0xffffc8801403b100 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:vfsinit+0x27f sys/kern/vfs_init.c:440)
lock address : netbsd:vfs_hooks_lock
type : sleep/adaptive
initialized : netbsd:vfsinit+0x27f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffc8801403b100 last held: 0xffffc8801403b100
last locked* : netbsd:vfs_hooks_reexport+0x2c
unlocked : netbsd:vfs_hooks_reexport+0xa0
owner field : 0xffffc8801403b100 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 5718.5718 (ndp) @ 0xffffc88012c87780, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffc8801471ef40
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffc88012c87780 last held: 0xffffc88012c87780
last locked* : netbsd:uvm_fault_internal+0x89b
unlocked : netbsd:uvm_fault_lower_enter+0x60f
owner/count : 0xffffc88012c87780 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 5933.5933 (syz-executor.3) @ 0xffffc88013fcb480, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3d sys/kern/vfs_vnode.c:1438)
lock address : ffffc880147fde80
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3d

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffc88013fcb480 last held: 0xffffc88013fcb480
last locked* : netbsd:genfs_lock+0x15a
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffffc88013fcb480 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3d sys/kern/vfs_vnode.c:1438)
lock address : ffffc8801481c780
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3d

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffc88013fcb480 last held: 0xffffc88013fcb480
last locked* : netbsd:genfs_lock+0x15a
unlocked : 0
owner/count : 0xffffc88013fcb480 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 5447.5447 (syz-executor.4) @ 0xffffc88013460940, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366)
lock address : ffffc880133a8e90
type : sleep/adaptive
initialized : netbsd:fork1+0x369

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1
relevant lwp : 0xffffc88013460940 last held: 0xffffc88013460940
last locked* : netbsd:exit1+0x2e3
unlocked : netbsd:execve_runproc+0x217f
owner/count : 0xffffc88013460940 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_obj_init+0xa0 sys/uvm/uvm_object.c:70)
lock address : ffffc88014694580

type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0xa0

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffc88013460940 last held: 0xffffc88013460940
last locked* : netbsd:uao_detach+0x242
unlocked : netbsd:uvm_unmap_remove+0x993
owner/count : 0xffffc88013460940 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 748.748 (dhcpcd) @ 0xffffc88012c2fb00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffffc88012c2fb00 last held: 000000000000000000