assert failed: sn->sn_opencnt (2)

6 views

Skip to first unread message

syzbot

unread,

Sep 3, 2022, 8:46:32 PM9/3/22

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 96084e21d7d0 bpf(4): Reject bogus timeout values before ar..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1493c2cd080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=9a3cd12278dd96d959e3
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/c6d73637026a/disk-96084e21.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/1014170d23b6/netbsd-96084e21.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9a3cd1...@syzkaller.appspotmail.com

[ 708.0243490] panic: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/miscfs/specfs/spec_vnops.c", line 1691
[ 708.0419029] cpu0: Begin traceback...
[ 708.0543385] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 708.1243375] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 708.1743386] spec_close() at netbsd:spec_close+0x98a sys/miscfs/specfs/spec_vnops.c:1691
[ 708.2143369] VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
[ 708.2543358] cnclose() at netbsd:cnclose+0xd5 sys/dev/cons.c:158
[ 708.2943377] cdev_close() at netbsd:cdev_close+0x181 sys/kern/subr_devsw.c:1202
[ 708.3443364] spec_close() at netbsd:spec_close+0x76b sys/miscfs/specfs/spec_vnops.c:1742
[ 708.3843355] VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
[ 708.4343350] vn_close() at netbsd:vn_close+0x4c sys/kern/vfs_vnops.c:480
[ 708.4743380] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
[ 708.5243384] fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571
[ 708.5643364] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301
[ 708.6143357] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
[ 708.6543360] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 708.6543360] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 708.6543360] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 708.6643333] --- syscall (number 1) ---
[ 708.6843339] netbsd:syscall+0x2da:
[ 708.6843339] cpu0: End traceback...
[ 708.6951839] fatal breakpoint trap in supervisor mode
[ 708.6951839] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x7dd1a77ddea8 ilevel 0 rsp 0xffffb902488bba30
[ 708.7109364] curlwp 0xffff848298ade4c0 pid 19960.19960 lowest kstack 0xffffb902488b72c0
Stopped in pid 19960.19960 (syz-executor.2) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
spec_close() at netbsd:spec_close+0x98a sys/miscfs/specfs/spec_vnops.c:1691
VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
cnclose() at netbsd:cnclose+0xd5 sys/dev/cons.c:158
cdev_close() at netbsd:cdev_close+0x181 sys/kern/subr_devsw.c:1202
spec_close() at netbsd:spec_close+0x76b sys/miscfs/specfs/spec_vnops.c:1742
VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
vn_close() at netbsd:vn_close+0x4c sys/kern/vfs_vnops.c:480
closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571
exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301
sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x2da:
Panic string: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/miscfs/specfs/spec_vnops.c", line 1691
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
19960>19960 7 0 10000000 ffff848298ade4c0 syz-executor.2
21394 21394 2 0 0 ffff848295711740 syz-executor.3
21183 22192 2 1 0 ffff84828ced5040 syz-executor.4
21183 21183 2 1 10000000 ffff848298ade080 syz-executor.4
5358 5358 3 0 180 ffff848296d4d2c0 syz-executor.0 parked
5347 5347 3 0 0 ffff848296d05b00 syz-executor.0 vfork
6324 6324 3 0 0 ffff848296d056c0 syz-executor.0 vfork
6234 6234 3 0 0 ffff848296d05280 syz-executor.0 vfork
5451 5451 3 0 0 ffff848298138ac0 syz-executor.0 vfork
5506 5506 3 0 0 ffff848298138680 syz-executor.0 vfork
6590 6590 3 0 0 ffff848298138240 syz-executor.0 vfork
5972 5972 3 0 0 ffff8482972e3a80 syz-executor.0 vfork
5980 5980 3 0 0 ffff8482972e3640 syz-executor.0 vfork
5793 5793 3 0 0 ffff8482972e3200 syz-executor.0 vfork
5359 5359 3 0 0 ffff848296c0da40 syz-executor.0 vfork
6760 6760 3 0 0 ffff848296c0d600 syz-executor.0 vfork
5524 5524 3 0 0 ffff848296c0d1c0 syz-executor.0 vfork
5373 5373 3 0 0 ffff848297171a00 syz-executor.0 vfork
5706 5706 3 0 0 ffff8482971715c0 syz-executor.0 vfork
6051 6051 3 0 0 ffff848297171180 syz-executor.0 vfork
5510 5510 3 0 0 ffff84828bc64a80 syz-executor.0 vfork
6232 6232 3 0 0 ffff84828f9470c0 syz-executor.0 vfork
6379 6379 3 0 0 ffff84828bfaeb00 syz-executor.0 vfork
5371 5371 3 0 0 ffff84828bfae6c0 syz-executor.0 vfork
6585 6585 3 0 0 ffff848290518780 syz-executor.0 vfork
6574 6574 3 0 0 ffff84828cc48680 syz-executor.0 vfork
5346 5346 3 0 0 ffff8482834e7a40 syz-executor.0 vfork
5364 5364 3 1 0 ffff84828c92f580 syz-executor.0 vfork
6476 6476 3 1 0 ffff84828cce42c0 syz-executor.0 vfork
6633 6633 3 1 0 ffff84829713b9c0 syz-executor.0 vfork
5249 5249 3 0 0 ffff84829713b580 syz-executor.0 vfork
6462 6462 3 0 0 ffff84829713b140 syz-executor.0 vfork
5982 5982 3 0 0 ffff84829578b980 syz-executor.0 vfork
6614 6614 3 0 0 ffff8482956fb0c0 syz-executor.0 vfork
6617 6617 3 0 0 ffff84829578b100 syz-executor.0 vfork
5360 5360 3 0 0 ffff84829578b540 syz-executor.0 vfork
5509 5509 3 0 0 ffff8482964984c0 syz-executor.0 vfork
5440 6447 3 0 1100000 ffff8482831b1240 syz-executor.0 vfork
5440 5440 2 0 11000040 ffff8482956fb940 syz-executor.0
6328 6328 3 0 180 ffff8482955a98c0 syz-executor.0 parked
5185 5185 3 0 0 ffff8482955a9480 syz-executor.0 vfork
6356 6356 3 0 0 ffff8482955a9040 syz-executor.0 vfork
6215 6215 3 0 0 ffff848294fb5bc0 syz-executor.0 vfork
5262 5262 3 0 0 ffff848294fb5780 syz-executor.0 vfork
6227 6227 3 0 0 ffff848294fb5340 syz-executor.0 vfork
5363 5363 3 0 0 ffff848295552b80 syz-executor.0 vfork
6508 6508 3 0 0 ffff848295552740 syz-executor.0 vfork
5369 5369 3 0 0 ffff848295552300 syz-executor.0 vfork
5260 5260 3 0 0 ffff8482954fab40 syz-executor.0 vfork
5274 5274 3 0 0 ffff8482954fa700 syz-executor.0 vfork
6190 6190 3 0 0 ffff8482954fa2c0 syz-executor.0 vfork
6885 6885 3 0 0 ffff8482951b4b00 syz-executor.0 vfork
5472 5472 3 0 0 ffff8482951b46c0 syz-executor.0 vfork
5710 5710 3 0 0 ffff8482951b4280 syz-executor.0 vfork
6186 6186 3 0 0 ffff848296228ac0 syz-executor.0 vfork
6575 6575 3 0 0 ffff848296228680 syz-executor.0 vfork
6480 6480 3 0 0 ffff848296228240 syz-executor.0 vfork
6122 6122 3 0 0 ffff84829512ca80 syz-executor.0 vfork
6363 6363 3 0 0 ffff84829512c640 syz-executor.0 vfork
5118 5118 3 0 0 ffff84829512c200 syz-executor.0 vfork
5272 5272 3 0 0 ffff8482952a7a40 syz-executor.0 vfork
5277 5277 3 0 0 ffff8482952a7600 syz-executor.0 vfork
6579 6579 3 0 0 ffff8482952a71c0 syz-executor.0 vfork
6214 6214 3 0 0 ffff848295331a00 syz-executor.0 vfork
6221 6221 3 0 0 ffff8482953315c0 syz-executor.0 vfork
5110 5110 3 0 0 ffff848295331180 syz-executor.0 vfork
5265 5265 3 0 0 ffff848294d859c0 syz-executor.0 vfork
6432 6432 3 0 0 ffff848294d85580 syz-executor.0 vfork
5444 5444 3 0 0 ffff848294d85140 syz-executor.0 vfork
6199 6199 3 0 0 ffff848295271980 syz-executor.0 vfork
5457 5457 3 0 0 ffff848295271540 syz-executor.0 vfork
5538 5538 3 0 0 ffff848295271100 syz-executor.0 vfork
5275 5275 3 0 0 ffff84828f947940 syz-executor.0 vfork
5271 5271 3 0 0 ffff84828c92f140 syz-executor.0 vfork
6330 6330 3 0 0 ffff84828bc64640 syz-executor.0 vfork
4055 4055 3 0 0 ffff84827f0f7080 syz-executor.0 vfork
5111 5111 3 0 0 ffff84828ca19100 syz-executor.0 vfork
1887 1887 3 1 0 ffff84828c6e28c0 syz-executor.0 vfork
5279 5279 3 0 0 ffff848286de85c0 syz-executor.0 vfork
5478 5478 3 0 0 ffff84828c6e2040 syz-executor.0 vfork
6075 6075 3 0 0 ffff8482831b1680 syz-executor.0 vfork
5252 5252 3 0 0 ffff84828349ba80 syz-executor.0 vfork
6193 6193 3 0 0 ffff848282a546c0 syz-executor.0 vfork
5157 5157 3 0 0 ffff84828cce4700 syz-executor.0 vfork
5267 5267 3 0 0 ffff84828c3740c0 syz-executor.0 vfork
6816 6816 3 0 0 ffff848282a54b00 syz-executor.0 vfork
5257 5257 3 0 0 ffff84828107e600 syz-executor.0 vfork
6321 6321 3 0 0 ffff84828f947500 syz-executor.0 vfork
5161 5161 3 0 0 ffff84828cd3c740 syz-executor.0 vfork
5994 5994 3 0 0 ffff84828bc64200 syz-executor.0 vfork
5820 5820 3 0 0 ffff84828fc62080 syz-executor.0 vfork
5540 5540 3 0 0 ffff84828c52f900 syz-executor.0 vfork
5258 5258 3 0 0 ffff84828107ea40 syz-executor.0 vfork
5270 5270 3 0 0 ffff84828ca19980 syz-executor.0 vfork
6345 6345 3 0 0 ffff84828a297740 syz-executor.0 vfork
6589 6589 3 0 0 ffff848290518bc0 syz-executor.0 vfork
6399 6399 3 0 0 ffff84828c374940 syz-executor.0 vfork
5008 5008 3 0 0 ffff84828c52f4c0 syz-executor.0 vfork
6189 6189 3 0 0 ffff84828ced5480 syz-executor.0 vfork
6573 6573 3 0 0 ffff8482807bfa00 syz-executor.0 vfork
5316 5316 3 0 0 ffff848290518340 syz-executor.0 vfork
6380 6380 3 0 0 ffff84828cc48ac0 syz-executor.0 vfork
5109 5109 3 0 0 ffff84828349b200 syz-executor.0 vfork
6249 6249 3 0 0 ffff84828a783340 syz-executor.0 vfork
5255 5960 2 0 1000040 ffff8482834e7600 syz-executor.0
5255 6352 3 0 1100000 ffff84828cce4b40 syz-executor.0 vfork
5116 5116 3 0 180 ffff84828c374500 syz-executor.0 parked
5863 5939 3 0 1100000 ffff848286de8a00 syz-executor.0 vfork
5863 5863 2 0 11000040 ffff84828ced58c0 syz-executor.0
2029 2029 3 0 180 ffff84828cd3cb80 syz-executor.1 parked
1672 1672 2 1 140 ffff84827edd58c0 syz-executor.2
1757 1757 3 1 180 ffff848286de8180 syz-executor.2 parked
1605 1605 3 0 180 ffff84828c92f9c0 syz-executor.2 parked
1850 1850 3 1 180 ffff84828c52f080 syz-executor.2 parked
552 552 2 0 140 ffff84828cfb0b40 syz-executor.3
384 384 3 0 180 ffff84827e897340 syz-executor.1 parked
1637 1637 3 1 180 ffff84828a783bc0 syz-executor.1 parked
1337 1337 3 1 180 ffff84828a783780 syz-executor.1 parked
1484 1484 3 1 180 ffff84828c6e2480 syz-executor.1 parked
1366 1366 3 0 180 ffff84828a297300 syz-executor.1 parked
459 459 3 0 180 ffff84828a297b80 syz-executor.1 parked
335 335 3 1 180 ffff84827f5b80c0 syz-executor.1 parked
1229 1229 3 0 180 ffff84828cfb0700 syz-executor.1 parked
828 828 2 0 140 ffff84827edd5040 syz-executor.4
1222 5815 2 0 100 ffff84828cd3c300 syz-fuzzer
1222 1242 3 1 1c0 ffff84827f0f7900 syz-fuzzer wait
1222 1240 3 0 1c0 ffff84827edd5480 syz-fuzzer parked
1222 1237 3 1 180 ffff84828349b640 syz-fuzzer parked
1222 988 3 1 180 ffff84827f5b8500 syz-fuzzer wait
1222 1131 2 0 40140 ffff84827e3c82c0 syz-fuzzer
1222 1196 3 1 180 ffff84828107e1c0 syz-fuzzer wait
1222 1076 3 1 1c0 ffff8482807bf5c0 syz-fuzzer parked
1222 827 3 1 180 ffff84827feb9100 syz-fuzzer parked
1222 1194 3 0 1c0 ffff84827fc16140 syz-fuzzer parked
1222 1221 3 0 180 ffff84827e1dd6c0 syz-fuzzer parked
1222 1224 3 0 1c0 ffff84827e1dd280 syz-fuzzer parked
1222 >1117 7 1 140 ffff84827f5b8940 syz-fuzzer
1222 1222 2 0 100 ffff8482807bf180 syz-fuzzer
1223 1223 3 0 180 ffff84827fc169c0 sshd select
1127 1127 3 0 180 ffff84827feb9540 getty nanoslp
1080 1080 3 1 180 ffff84827de77200 getty nanoslp
1074 1074 3 0 180 ffff84827de94ac0 getty nanoslp
1078 1078 3 0 1c0 ffff84827de94680 getty ttyraw
1097 1097 3 1 180 ffff84827fc16580 sshd select
1067 1067 3 0 180 ffff84827feb9980 powerd kqueue
693 693 3 1 180 ffff84827e897bc0 syslogd kqueue
547 547 3 1 180 ffff84827e2f7740 dhcpcd poll
742 742 3 0 180 ffff84827e3c8700 dhcpcd poll
465 465 3 1 180 ffff84827f0f74c0 dhcpcd poll
594 594 3 1 180 ffff84827e897780 dhcpcd poll
292 292 3 0 180 ffff84827e3c8b40 dhcpcd poll
290 290 3 0 180 ffff84827e1ddb00 dhcpcd poll
289 289 3 0 180 ffff84827e2f7300 dhcpcd poll
1 1 3 1 180 ffff848275c80140 init wait
0 3983 3 1 200 ffff84827e2f7b80 ktrace ktrwait
0 4306 5 0 200 ffff848282a54280 (zombie)
0 2810 3 1 200 ffff84828bfae280 acctwatch actwat
0 974 3 0 200 ffff84827de77640 physiod physiod
0 195 2 0 240 ffff84827de94240 ioflush
0 194 3 0 200 ffff848275ae0740 pooldrain pooldrain
0 193 3 1 200 ffff84827de77a80 pgdaemon pgdaemon
0 169 3 1 200 ffff84827bdb7a40 usb7 usbevt
0 168 3 1 200 ffff84827bdb7600 usb6 usbevt
0 167 3 0 200 ffff84827bdb71c0 usb5 usbevt
0 166 2 0 240 ffff848278d22a00 usb4
0 165 3 0 200 ffff848278d225c0 usb3 usbevt
0 31 3 1 200 ffff848278d22180 usb2 usbevt
0 63 3 0 200 ffff848275c809c0 usb1 usbevt
0 126 3 0 200 ffff848275ae0b80 usb0 usbevt
0 125 3 1 200 ffff848275bd7340 usbtask-dr usbtsk
0 124 3 0 200 ffff8482740a9b00 usbtask-hc usbtsk
0 123 3 1 200 ffff848275c80580 npfgc0 npfgcw
0 122 3 1 200 ffff848275c4b980 rt_free rt_free
0 121 3 1 200 ffff848275c4b540 unpgc unpgc
0 120 2 0 200 ffff848275c4b100 key_timehandler
0 119 3 1 200 ffff848275c3e940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff848275c3e500 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffff848275c3e0c0 nd6_timer
0 116 3 1 200 ffff848275c2a900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff848275c2a4c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff848275c2a080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff848275c148c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff848275c14480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff848275c14040 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffff848275bd7bc0 rt_timer
0 109 3 0 200 ffff848275bd7780 vmem_rehash vmem_rehash
0 100 3 1 200 ffff848275ae0300 entbutler entropy
0 99 3 1 200 ffff848275548b40 viomb balloon
0 98 3 1 200 ffff848275548700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff8482755482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffff8482740a96c0 scsibus0 sccomp
0 29 3 0 200 ffff8482740a9280 pms0 pmsreset
0 28 3 1 200 ffff848273facac0 xcall/1 xcall
0 27 1 1 200 ffff848273fac680 softser/1
0 26 1 1 200 ffff848273fac240 softclk/1
0 25 1 1 200 ffff848273f87a80 softbio/1
0 24 1 1 200 ffff848273f87640 softnet/1
0 23 1 1 201 ffff848273f87200 idle/1
0 22 3 1 200 ffff8483a232da40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff8483a232d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff8483a232d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff8483a2334a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff8483a23345c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffff8483a2334180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff8483a23539c0 sysmon smtaskq
0 15 3 1 200 ffff8483a2353580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff8483a2353140 pmfevent pmfevent
0 13 3 1 200 ffff8483a235e980 sopendfree sopendfr
0 12 3 0 200 ffff8483a235e540 ifwdog ifwdog
0 11 3 1 200 ffff8483a235e100 iflnkst iflnkst
0 10 3 1 200 ffff8483a3395940 nfssilly nfssilly
0 9 3 0 200 ffff8483a3395500 vdrain vdrain
0 8 3 1 200 ffff8483a33950c0 modunload mod_unld
0 7 3 0 200 ffff8483a33ba900 xcall/0 xcall
0 6 1 0 200 ffff8483a33ba4c0 softser/0
0 5 1 0 200 ffff8483a33ba080 softclk/0
0 4 1 0 200 ffff8483a33eb8c0 softbio/0
0 3 1 0 200 ffff8483a33eb480 softnet/0
0 2 1 0 201 ffff8483a33eb040 idle/0
0 0 2 0 240 ffffffff86740b40 swapper
[Locks tracked through LWPs]

****** LWP 19960.19960 (syz-executor.2) @ 0xffff848298ade4c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x4b8 sys/kern/kern_fork.c:366)
lock address : ffff848288bb6f10
type : sleep/adaptive
initialized : netbsd:fork1+0x4b8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff848298ade4c0 last held: 0xffff848298ade4c0
last locked* : netbsd:exit1+0x393
unlocked : 0
owner/count : 0xffff848298ade4c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)
lock address : ffff84828eb29700
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff848298ade4c0 last held: 0xffff848298ade4c0
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xffff848298ade4c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:devsw_init+0x5f sys/kern/subr_devsw.c:136)
lock address : netbsd:device_lock
type : sleep/adaptive
initialized : netbsd:devsw_init+0x5f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff848298ade4c0 last held: 0xffff848298ade4c0
last locked* : netbsd:spec_close+0x315
unlocked : netbsd:spec_close+0x672
owner field : 0xffff848298ade4c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 21394.21394 (syz-executor.3) @ 0xffff848295711740, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)
lock address : ffff84828c647c00
type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff848295711740 last held: 0xffff848295711740
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : netbsd:uvm_fault_upper_enter+0x454
owner/count : 0xffff848295711740 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 21183.22192 (syz-executor.4) @ 0xffff84828ced5040, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283)
lock address : ffffb9000f9806f0
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x2b2
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffff84828ced5040 last held: 000000000000000000
last locked : netbsd:vhci_fd_read+0x194
unlocked* : netbsd:vhci_fd_read+0x652
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffff84827e3c8700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff84827e3c8700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffff84827f0f74c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff84827f0f74c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffff84827e1ddb00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff84827e1ddb00 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffff84827e2f7300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff84827e2f7300 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff8483a235e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8483a235e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff8483a33ba080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8483a33ba080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86740b40, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86740b40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:main+0x106 sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x106
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff848298ade4c0 last held: 0xffff848298ade4c0
last locked* : netbsd:cdev_close+0x15a
unlocked : netbsd:cdev_open+0x37a
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff848298ade4c0 last held: 0xffff848298ade4c0
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffb90000007180 0045 00000000 0x0 0x0
0xffffb90000007200 0045 00000000 0x0 0x0
0xffffb90000007280 0045 00000000 0x0 0x0
0xffffb90000007300 0045 00000000 0x0 0x0
0xffffb90000007380 0045 00000000 0x0 0x0
0xffffb90000007400 0045 00000000 0x0 0x0
0xffffb90000007480 0045 00000000 0x0 0x0
0xffffb90000007500 0045 00000000 0x0 0x0
0xffffb90000007580 0045 00000000 0x0 0x0
0xffffb90000007600 0045 00000000 0x0 0x0
0xffffb90000007680 0041 00000000 0x0 0x0
0xffffb90000007700 0041 00000000 0x0 0x0
0xffffb90000007780 0041 00000000 0x0 0x0
0xffffb90000007800 0041 00000000 0x0 0x0
0xffffb90000007880 0045 00000000 0x0 0x0
0xffffb90000007900 0045 00000000 0x0 0x0
0xffffb90000007980 0041 00000000 0x0 0x0
0xffffb90000007a00 0041 00000000 0x0 0x0
0xffffb90000007a80 0041 00000000 0x0 0x0
0xffffb90000007b00 0041 00000000 0x0 0x0
0xffffb90000007b80 0041 00000000 0x0 0x0
0xffffb90000007c00 0041 00000000 0x0 0x0
0xffffb90000007c80 0041 00000000 0x0 0x0
0xffffb90000007d00 0041 00000000 0x0 0x0
0xffffb90000007d80 0041 00000000 0x0 0x0
0xffffb90000007e00 0041 00000000 0x0 0x0
0xffffb90000007e80 0041 00000000 0x0 0x0
0xffffb90000007f00 0041 00000000 0x0 0x0
0xffffb90000007f80 0041 00000000 0x0 0x0
0xffffb90000008000 0041 00000000 0x0 0x0
0xffffb90000008080 0041 00000000 0x0 0x0
0xffffb90000008100 0041 00000000 0x0 0x0
0xffffb90000008180 0041 00000000 0x0 0x0
0xffffb90000008200 0041 00000000 0x0 0x0
0xffffb90000008280 0041 00000000 0x0 0x0
0xffffb90000008300 0041 00000000 0x0 0x0
0xffffb90000008380 0041 00000000 0x0 0x0
0xffffb90000008400 0041 00000000 0x0 0x0
0xffffb90000008480 0041 00000000 0x0 0x0
0xffffb90000008500 0041 00000000 0x0 0x0
0xffffb90000008580 0041 00000000 0x0 0x0
0xffffb90000008600 0045 00000000 0x0 0x0
0xffffb90000008680 0041 00000000 0x0 0x0
0xffffb90000008700 0041 00000000 0x0 0x0
0xffffb90000008780 0041 00000000 0x0 0x0
0xffffb90000008800 0045 00000000 0x0 0x0
0xffffb90000008880 0041 00000000 0x0 0x0
0xffffb90000008900 0041 00000000 0x0 0x0
0xffffb90000008980 0041 00000000 0x0 0x0
0xffffb90000008a00 0041 00000000 0x0 0x0
0xffffb90000008a80 0041 00000000 0x0 0x0
0xffffb90000008b00 0041 00000000 0x0 0x0
0xffffb90000008b80 0041 00000000 0x0 0x0
0xffffb90000008c00 0041 00000000 0x0 0x0
0xffffb90000008c80 0041 00000000 0x0 0x0
0xffffb90000008d00 0041 00000000 0x0 0x0
0xffffb90000008d80 0041 00000000 0x0 0x0
0xffffb90000008e00 0041 00000000 0x0 0x0
0xffffb90000008e80 0041 00000000 0x0 0x0
0xffffb90000008f00 0041 00000000 0x0 0x0
0xffffb90000008f80 0041 00000000 0x0 0x0
0xffffb90000009000 0041 00000000 0x0 0x0
0xffffb90000009080 0041 00000000 0x0 0x0
0xffffb90000009100 0045 00000000 0x0 0x0
0xffffb90000009180 0041 00000000 0x0 0x0
0xffffb90000009200 0041 00000000 0x0 0x0
0xffffb90000009280 0041 00000000 0x0 0x0
0xffffb90000009300 0041 00000000 0x0 0x0
0xffffb90000009380 0041 00000000 0x0 0x0
0xffffb90000009400 0041 00000000 0x0 0x0
0xffffb90000009480 0045 00000000 0x0 0x0
0xffffb90000009500 0041 00000000 0x0 0x0
0xffffb90000009580 0041 00000000 0x0 0x0
0xffffb90000009600 0041 00000000 0x0 0x0
0xffffb90000009680 0041 00000000 0x0 0x0
0xffffb90000009700 0041 00000000 0x0 0x0
0xffffb90000009780 0041 00000000 0x0 0x0
0xffffb90000009800 0041 00000000 0x0 0x0
0xffffb90000009880 0041 00000000 0x0 0x0
0xffffb90000009900 0041 00000000 0x0 0x0
0xffffb90000009980 0041 00000000 0x0 0x0
0xffffb90000009a00 0041 00000000 0x0 0x0
0xffffb90000009a80 0045 00000000 0x0 0x0
0xffffb90000009b00 0041 00000000 0x0 0x0
0xffffb90000009b80 0041 00000000 0x0 0x0
0xffffb90000009c00 0041 00000000 0x0 0x0
0xffffb90000009c80 0041 00000000 0x0 0x0
0xffffb90000009d00 0041 00000000 0x0 0x0
0xffffb90000009d80 0041 00000000 0x0 0x0
0xffffb90000009e00 0041 00000000 0x0 0x0
0xffffb90000009e80 0041 00000000 0x0 0x0
0xffffb90000009f00 0041 00000000 0x0 0x0
0xffffb90000009f80 0041 00000000 0x0 0x0
0xffffb9000000a000 0041 00000000 0x0 0x0
0xffffb9000000a080 0041 00000000 0x0 0x0
0xffffb9000000a100 0041 00000000 0x0 0x0
0xffffb9000000a180 0041 00000000 0x0 0x0
0xffffb9000000a200 0041 00000000 0x0 0x0
0xffffb9000000a280 0041 00000000 0x0 0x0
0xffffb9000000a300 0041 00000000 0x0 0x0
0xffffb9000000a380 0041 00000000 0x0 0x0
0xffffb9000000a400 0041 00000000 0x0 0x0
0xffffb9000000a480 0041 00000000 0x0 0x0
0xffffb9000000a500 0041 00000000 0x0 0x0
0xffffb9000000a580 0041 00000000 0x0 0x0
0xffffb9000000a600 0041 00000000 0x0 0x0
0xffffb9000000a680 0041 00000000 0x0 0x0
0xffffb9000000a700 0041 00000000 0x0 0x0
0xffffb9000000a780 0041 00000000 0x0 0x0
0xffffb9000000a800 0041 00000000 0x0 0x0
0xffffb9000000a880 0041 00000000 0x0 0x0
0xffffb9000000a900 0041 00000000 0x0 0x0
0xffffb9000000a980 0041 00000000 0x0 0x0
0xffffb9000000aa00 0041 00000000 0x0 0x0
0xffffb9000000aa80 0041 00000000 0x0 0x0
0xffffb9000000ab00 0041 00000000 0x0 0x0
0xffffb9000000ab80 0041 00000000 0x0 0x0
0xffffb9000000ac00 0041 00000000 0x0 0x0
0xffffb9000000ac80 0041 00000000 0x0 0x0
0xffffb9000000ad00 0041 00000000 0x0 0x0
0xffffb9000000ad80 0041 00000000 0x0 0x0
0xffffb9000000ae00 0041 00000000 0x0 0x0
0xffffb9000000ae80 0045 00000000 0x0 0x0
0xffffb9000000af00 0045 00000000 0x0 0x0
0xffffb9000000af80 0045 00000000 0x0 0x0
0xffffb9000000b000 0041 00000000 0x0 0x0
0xffffb9000000b080 0041 00000000 0x0 0x0
0xffffb9000000b100 0041 00000000 0x0 0x0
0xffffb9000000b180 0045 00000000 0x0 0x0
0xffffb9000000b200 0041 00000000 0x0 0x0
0xffffb9000000b280 0045 00000000 0x0 0x0
0xffffb9000000b300 0045 00000000 0x0 0x0
0xffffb9000000b380 0045 00000000 0x0 0x0
0xffffb9000000b400 0041 00000000 0x0 0x0
0xffffb9000000b480 0041 00000000 0x0 0x0
0xffffb9000000b500 0041 00000000 0x0 0x0
0xffffb9000000b580 0045 00000000 0x0 0x0
0xffffb9000000b600 0045 00000000 0x0 0x0
0xffffb9000000b680 0045 00000000 0x0 0x0
0xffffb9000000b700 0045 00000000 0x0 0x0
0xffffb9000000b780 0045 00000000 0x0 0x0
0xffffb9000000b800 0045 00000000 0x0 0x0
0xffffb9000000b880 0041 00000000 0x0 0x0
0xffffb9000000b900 0045 00000000 0x0 0x0
0xffffb9000000b980 0045 00000000 0x0 0x0
0xffffb9000000ba00 0045 00000000 0x0 0x0
0xffffb9000000ba80 0045 00000000 0x0 0x0
0xffffb9000000bb00 0045 00000000 0x0 0x0
0xffffb9000000bb80 0045 00000000 0x0 0x0
0xffffb9000000bc00 0045 00000000 0x0 0x0
0xffffb9000000bc80 0041 00000000 0x0 0x0
0xffffb9000000bd00 0045 00000000 0x0 0x0
0xffffb9000000bd80 0045 00000000 0x0 0x0
0xffffb9000000be00 0045 00000000 0x0 0x0
0xffffb9000000be80 0045 00000000 0x0 0x0
0xffffb9000000bf00 0045 00000000 0x0 0x0
0xffffb9000000bf80 0045 00000000 0x0 0x0
0xffffb9000000c000 0045 00000000 0x0 0x0
0xffffb9000000c080 0041 00000000 0x0 0x0
0xffffb9000000c100 0045 00000000 0x0 0x0
0xffffb9000000c180 0045 00000000 0x0 0x0
0xffffb9000000c200 0045 00000000 0x0 0x0
0xffffb9000000c280 0045 00000000 0x0 0x0
0xffffb9000000c300 0045 00000000 0x0 0x0
0xffffb9000000c380 0045 00000000 0x0 0x0
0xffffb9000000c400 0045 00000000 0x0 0x0
0xffffb9000000c480 0045 00000000 0x0 0x0
0xffffb9000000c500 0045 00000000 0x0 0x0
0xffffb9000000c580 0045 00000000 0x0 0x0
0xffffb9000000c600 0045 00000000 0x0 0x0
0xffffb9000000c680 0045 00000000 0x0 0x0
0xffffb9000000c700 0041 00000000 0x0 0x0
0xffffb9000000c780 0041 00000000 0x0 0x0
0xffffb9000000c800 0045 00000000 0x0 0x0
0xffffb9000000c880 0045 00000000 0x0 0x0
0xffffb9000000c900 0045 00000000 0x0 0x0
0xffffb9000000c980 0045 00000000 0x0 0x0
0xffffb9000000ca00 0045 00000000 0x0 0x0
0xffffb9000000ca80 0041 00000000 0x0 0x0
0xffffb9000000cb00 0041 00000000 0x0 0x0
0xffffb9000000cb80 0041 00000000 0x0 0x0
0xffffb9000000cc00 0045 00000000 0x0 0x0
0xffffb9000000cc80 0045 00000000 0x0 0x0
0xffffb9000000cd00 0045 00000000 0x0 0x0
0xffffb9000000cd80 0041 00000000 0x0 0x0
0xffffb9000000ce00 0045 00000000 0x0 0x0
0xffffb9000000ce80 0041 00000000 0x0 0x0
0xffffb9000000cf00 0041 00000000 0x0 0x0
0xffffb9000000cf80 0041 00000000 0x0 0x0
0xffffb9000000d000 0041 00000000 0x0 0x0
0xffffb9000000d080 0045 00000000 0x0 0x0
0xffffb9000000d100 0045 00000000 0x0 0x0
0xffffb9000000d180 0041 00000000 0x0 0x0
0xffffb9000000d200 0041 00000000 0x0 0x0
0xffffb9000000d280 0041 00000000 0x0 0x0
0xffffb9000000d300 0045 00000000 0x0 0x0
0xffffb9000000d380 0041 00000000 0x0 0x0
0xffffb9000000d400 0041 00000000 0x0 0x0
0xffffb9000000d480 0045 00000000 0x0 0x0
0xffffb9000000d500 0041 00000000 0x0 0x0
0xffffb9000000d580 0041 00000000 0x0 0x0
0xffffb9000000d600 0041 00000000 0x0 0x0
0xffffb9000000d680 0045 00000000 0x0 0x0
0xffffb9000000d700 0041 00000000 0x0 0x0
0xffffb9000000d780 0045 00000000 0x0 0x0
0xffffb9000000d800 0041 00000000 0x0 0x0
0xffffb9000000d880 0045 00000000 0x0 0x0
0xffffb9000000d900 0041 00000000 0x0 0x0
0xffffb9000000d980 0041 00000000 0x0 0x0
0xffffb9000000da00 0041 00000000 0x0 0x0
0xffffb9000000da80 0041 00000000 0x0 0x0
0xffffb9000000db00 0045 00000000 0x0 0x0
0xffffb9000000db80 0045 00000000 0x0 0x0
0xffffb9000000dc00 0041 00000000 0x0 0x0
0xffffb9000000dc80 0041 00000000 0x0 0x0
0xffffb9000000dd00 0041 00000000 0x0 0x0
0xffffb9000000dd80 0041 00000000 0x0 0x0
0xffffb9000000de00 0041 00000000 0x0 0x0
0xffffb9000000de80 0041 00000000 0x0 0x0
0xffffb9000000df00 0045 00000000 0x0 0x0
0xffffb9000000df80 0045 00000000 0x0 0x0
0xffffb9000000e000 0045 00000000 0x0 0x0
0xffffb9000000e080 0041 00000000 0x0 0x0
0xffffb9000000e100 0041 00000000 0x0 0x0
0xffffb9000000e180 0045 00000000 0x0 0x0
0xffffb9000000e200 0041 00000000 0x0 0x0
0xffffb9000000e280 0045 00000000 0x0 0x0
0xffffb9000000e300 0045 00000000 0x0 0x0
0xffffb9000000e380 0041 00000000 0x0 0x0
0xffffb9000000e400 0045 00000000 0x0 0x0
0xffffb9000000e480 0041 00000000 0x0 0x0
0xffffb9000000e500 0041 00000000 0x0 0x0
0xffffb9000000e580 0041 00000000 0x0 0x0
0xffffb9000000e600 0045 00000000 0x0 0x0
0xffffb9000000e680 0041 00000000 0x0 0x0
0xffffb9000000e700 0041 00000000 0x0 0x0
0xffffb9000000e780 0041 00000000 0x0 0x0
0xffffb9000000e800 0045 00000000 0x0 0x0
0xffffb9000000e880 0041 00000000 0x0 0x0
0xffffb9000000e900 0045 00000000 0x0 0x0
0xffffb9000000e980 0041 00000000 0x0 0x0
0xffffb9000000ea00 0041 00000000 0x0 0x0
0xffffb9000000ea80 0045 00000000 0x0 0x0
0xffffb9000000eb00 0041 00000000 0x0 0x0
0xffffb9000000eb80 0045 00000000 0x0 0x0
0xffffb9000000ec00 0041 00000000 0x0 0x0
0xffffb9000000ec80 0045 00000000 0x0 0x0
0xffffb9000000ed00 0041 00000000 0x0 0x0
0xffffb9000000ed80 0041 00000000 0x0 0x0
0xffffb9000000ee00 0041 00000000 0x0 0x0
0xffffb9000000ee80 0041 00000000 0x0 0x0
0xffffb9000000ef00 0041 00000000 0x0 0x0
0xffffb9000000ef80 0041 00000000 0x0 0x0
0xffffb9000000f000 0041 00000000 0x0 0x0
0xffffb9000000f080 0041 00000000 0x0 0x0
0xffffb9000000f100 0041 00000000 0x0 0x0
0xffffb9000000f180 0041 00000000 0x0 0x0
0xffffb9000000f200 0041 00000000 0x0 0x0
0xffffb9000000f280 0045 00000000 0x0 0x0
0xffffb9000000f300 0041 00000000 0x0 0x0
0xffffb9000000f380 0041 00000000 0x0 0x0
0xffffb9000000f400 0045 00000000 0x0 0x0
0xffffb9000000f480 0045 00000000 0x0 0x0
0xffffb9000000f500 0041 00000000 0x0 0x0
0xffffb9000000f580 0041 00000000 0x0 0x0
0xffffb9000000f600 0041 00000000 0x0 0x0
0xffffb9000000f680 0041 00000000 0x0 0x0
0xffffb9000000f700 0041 00000000 0x0 0x0
0xffffb9000000f780 0041 00000000 0x0 0x0
0xffffb9000000f800 0041 00000000 0x0 0x0
0xffffb9000000f880 0041 00000000 0x0 0x0
0xffffb9000000f900 0041 00000000 0x0 0x0
0xffffb9000000f980 0045 00000000 0x0 0x0
0xffffb9000000fa00 0041 00000000 0x0 0x0
0xffffb9000000fa80 0041 00000000 0x0 0x0
0xffffb9000000fb00 0041 00000000 0x0 0x0
0xffffb9000000fb80 0041 00000000 0x0 0x0
0xffffb9000000fc00 0045 00000000 0x0 0x0
0xffffb9000000fc80 0045 00000000 0x0 0x0
0xffffb9000000fd00 0041 00000000 0x0 0x0
0xffffb9000000fd80 0041 00000000 0x0 0x0
0xffffb9000000fe00 0041 00000000 0x0 0x0
0xffffb9000000fe80 0041 00000000 0x0 0x0
0xffffb9000000ff00 0041 00000000 0x0 0x0
0xffffb9000000ff80 0041 00000000 0x0 0x0
0xffffb90000010000 0041 00000000 0x0 0x0
0xffffb90000010080 0041 00000000 0x0 0x0
0xffffb90000010100 0045 00000000 0x0 0x0
0xffffb90000010180 0045 00000000 0x0 0x0
0xffffb90000010200 0045 00000000 0x0 0x0
0xffffb90000010280 0041 00000000 0x0 0x0
0xffffb90000010300 0041 00000000 0x0 0x0
0xffffb90000010380 0041 00000000 0x0 0x0
0xffffb90000010400 0041 00000000 0x0 0x0
0xffffb90000010480 0041 00000000 0x0 0x0
0xffffb90000010500 0041 00000000 0x0 0x0
0xffffb90000010580 0041 00000000 0x0 0x0
0xffffb90000010600 0041 00000000 0x0 0x0
0xffffb90000010680 0041 00000000 0x0 0x0
0xffffb90000010700 0045 00000000 0x0 0x0
0xffffb90000010780 0041 00000000 0x0 0x0
0xffffb90000010800 0041 00000000 0x0 0x0
0xffffb90000010880 0045 00000000 0x0 0x0
0xffffb90000010900 0045 00000000 0x0 0x0
0xffffb90000010980 0045 00000000 0x0 0x0
0xffffb90000010a00 0045 00000000 0x0 0x0
0xffffb90000010a80 0045 00000000 0x0 0x0
0xffffb90000010b00 0041 00000000 0x0 0x0
0xffffb90000010b80 0041 00000000 0x0 0x0
0xffffb90000010c00 0041 00000000 0x0 0x0
0xffffb90000010c80 0041 00000000 0x0 0x0
0xffffb90000010d00 0041 00000000 0x0 0x0
0xffffb90000010d80 0041 00000000 0x0 0x0
0xffffb90000010e00 0041 00000000 0x0 0x0
0xffffb90000010e80 0041 00000000 0x0 0x0
0xffffb90000010f00 0041 00000000 0x0 0x0
0xffffb90000010f80 0041 00000000 0x0 0x0
0xffffb90000011000 0041 00000000 0x0 0x0
0xffffb90000011080 0045 00000000 0x0 0x0
0xffffb90000011100 0041 00000000 0x0 0x0
0xffffb90000011180 0041 00000000 0x0 0x0
0xffffb90000011200 0045 00000000 0x0 0x0
0xffffb90000011280 0041 00000000 0x0 0x0
0xffffb90000011300 0041 00000000 0x0 0x0
0xffffb90000011380 0041 00000000 0x0 0x0
0xffffb90000011400 0041 00000000 0x0 0x0
0xffffb90000011480 0041 00000000 0x0 0x0
0xffffb90000011500 0041 00000000 0x0 0x0
0xffffb90000011580 0041 00000000 0x0 0x0
0xffffb90000011600 0041 00000000 0x0 0x0
0xffffb90000011680 0041 00000000 0x0 0x0
0xffffb90000011700 0041 00000000 0x0 0x0
0xffffb90000011780 0045 00000000 0x0 0x0
0xffffb90000011800 0041 00000000 0x0 0x0
0xffffb90000011880 0041 00000000 0x0 0x0
0xffffb90000011900 0045 00000000 0x0 0x0
0xffffb90000011980 0041 00000000 0x0 0x0
0xffffb90000011a00 0041 00000000 0x0 0x0
0xffffb90000011a80 0041 00000000 0x0 0x0
0xffffb90000011b00 0045 00000000 0x0 0x0
0xffffb90000011b80 0041 00000000 0x0 0x0
0xffffb90000011c00 0041 00000000 0x0 0x0
0xffffb90000011c80 0041 00000000 0x0 0x0
0xffffb90000011d00 0041 00000000 0x0 0x0
0xffffb90000011d80 0041 00000000 0x0 0x0
0xffffb90000011e00 0045 00000000 0x0 0x0
0xffffb90000011e80 0045 00000000 0x0 0x0
0xffffb90000011f00 0041 00000000 0x0 0x0
0xffffb90000011f80 0041 00000000 0x0 0x0
0xffffb90000012000 0041 00000000 0x0 0x0
0xffffb90000012080 0041 00000000 0x0 0x0
0xffffb90000012100 0041 00000000 0x0 0x0
0xffffb90000012180 0045 00000000 0x0 0x0
0xffffb90000012200 0041 00000000 0x0 0x0
0xffffb90000012280 0041 00000000 0x0 0x0
0xffffb90000012300 0041 00000000 0x0 0x0
0xffffb90000012380 0041 00000000 0x0 0x0
0xffffb90000012400 0041 00000000 0x0 0x0
0xffffb90000012480 0041 00000000 0x0 0x0
0xffffb90000012500 0045 00000000 0x0 0x0
0xffffb90000012580 0041 00000000 0x0 0x0
0xffffb90000012600 0041 00000000 0x0 0x0
0xffffb90000012680 0041 00000000 0x0 0x0
0xffffb90000012700 0041 00000000 0x0 0x0
0xffffb90000012780 0041 00000000 0x0 0x0
0xffffb90000012800 0041 00000000 0x0 0x0
0xffffb90000012880 0041 00000000 0x0 0x0
0xffffb90000012900 0041 00000000 0x0 0x0
0xffffb90000012980 0041 00000000 0x0 0x0
0xffffb90000012a00 0041 00000000 0x0 0x0
0xffffb90000012a80 0041 00000000 0x0 0x0
0xffffb90000012b00 0041 00000000 0x0 0x0
0xffffb90000012b80 0041 00000000 0x0 0x0
0xffffb90000012c00 0041 00000000 0x0 0x0
0xffffb90000012c80 0045 00000000 0x0 0x0
0xffffb90000012d00 0001 00000000 0x0 0x0
0xffffb90000012d80 0001 00000000 0x0 0x0
0xffffb90000012e00 0001 00000000 0x0 0x0
0xffffb90000012e80 0001 00000000 0x0 0x0
0xffffb90000012f00 0001 00000000 0x0 0x0
0xffffb90000012f80 0001 00000000 0x0 0x0
0xffffb90000013000 0001 00000000 0x0 0x0
0xffffb90000013080 0001 00000000 0x0 0x0
0xffffb90000013100 0001 00000000 0x0 0x0
0xffffb90000013180 0001 00000000 0x0 0x0
0xffffb90000013200 0001 00000000 0x0 0x0
0xffffb90000013280 0001 00000000 0x0 0x0
0xffffb90000013300 0001 00000000 0x0 0x0
0xffffb90000013380 0001 00000000 0x0 0x0
0xffffb90000013400 0001 00000000 0x0 0x0
0xffffb90000013480 0001 00000000 0x0 0x0
0xffffb90000013500 0001 00000000 0x0 0x0
0xffffb90000013580 0001 00000000 0x0 0x0
0xffffb90000013600 0001 00000000 0x0 0x0
0xffffb90000013680 0001 00000000 0x0 0x0
0xffffb90000013700 0001 00000000 0x0 0x0
0xffffb90000013780 0001 00000000 0x0 0x0
0xffffb90000013800 0001 00000000 0x0 0x0
0xffffb90000013880 0001 00000000 0x0 0x0
0xffffb90000013900 0001 00000000 0x0 0x0
0xffffb90000013980 0001 00000000 0x0 0x0
0xffffb90000013a00 0001 00000000 0x0 0x0
0xffffb90000013a80 0001 00000000 0x0 0x0
0xffffb90000013b00 0001 00000000 0x0 0x0
0xffffb90000013b80 0001 00000000 0x0 0x0
0xffffb90000013c00 0001 00000000 0x0 0x0
0xffffb90000013c80 0001 00000000 0x0 0x0
0xffffb90000013d00 0001 00000000 0x0 0x0
0xffffb90000013d80 0001 00000000 0x0 0x0
0xffffb90000013e00 0001 00000000 0x0 0x0
0xffffb90000013e80 0001 00000000 0x0 0x0
0xffffb90000013f00 0001 00000000 0x0 0x0
0xffffb90000013f80 0001 00000000 0x0 0x0
0xffffb90000014000 0001 00000000 0x0 0x0
0xffffb90000014080 0001 00000000 0x0 0x0
0xffffb90000014100 0001 00000000 0x0 0x0
0xffffb90000014180 0001 00000000 0x0 0x0
0xffffb90000014200 0001 00000000 0x0 0x0
0xffffb90000014280 0001 00000000 0x0 0x0
0xffffb90000014300 0001 00000000 0x0 0x0
0xffffb90000014380 0001 00000000 0x0 0x0
0xffffb90000014400 0001 00000000 0x0 0x0
0xffffb90000014480 0001 00000000 0x0 0x0
0xffffb90000014500 0001 00000000 0x0 0x0
0xffffb90000014580 0001 00000000 0x0 0x0
0xffffb90000014600 0001 00000000 0x0 0x0
0xffffb90000014680 0001 00000000 0x0 0x0
0xffffb90000014700 0001 00000000 0x0 0x0
0xffffb90000014780 0001 00000000 0x0 0x0
0xffffb90000014800 0041 00000000 0x0 0x0
0xffffb90000014880 0041 00000000 0x0 0x0
0xffffb90000014900 0041 00000000 0x0 0x0
0xffffb90000014980 0041 00000000 0x0 0x0
0xffffb90000014a00 0041 00000000 0x0 0x0
0xffffb90000014a80 0041 00000000 0x0 0x0
0xffffb90000014b00 0041 00000000 0x0 0x0
0xffffb90000014b80 0041 00000000 0x0 0x0
0xffffb90000014c00 0041 00000000 0x0 0x0
0xffffb90000014c80 0041 00000000 0x0 0x0
0xffffb90000014d00 0041 00000000 0x0 0x0
0xffffb90000014d80 0041 00000000 0x0 0x0
0xffffb90000014e00 0041 00000000 0x0 0x0
0xffffb90000014e80 0041 00000000 0x0 0x0
0xffffb90000014f00 0041 00000000 0x0 0x0
0xffffb90000014f80 0041 00000000 0x0 0x0
0xffffb90000015000 0041 00000000 0x0 0x0
0xffffb90000015080 0041 00000000 0x0 0x0
0xffffb90000015100 0041 00000000 0x0 0x0
0xffffb90000015180 0041 00000000 0x0 0x0
0xffffb90000015200 0041 00000000 0x0 0x0
0xffffb90000015280 0041 00000000 0x0 0x0
0xffffb90000015300 0041 00000000 0x0 0x0
0xffffb90000015380 0041 00000000 0x0 0x0
0xffffb90000015400 0041 00000000 0x0 0x0
0xffffb90000015480 0041 00000000 0x0 0x0
0xffffb90000015500 0041 00000000 0x0 0x0
0xffffb90000015580 0041 00000000 0x0 0x0
0xffffb90000015600 0041 00000000 0x0 0x0
0xffffb90000015680 0041 00000000 0x0 0x0
0xffffb90000015700 0041 00000000 0x0 0x0
0xffffb90000015780 0041 00000000 0x0 0x0
0xffffb90000015800 0041 00000000 0x0 0x0
0xffffb90000015880 0041 00000000 0x0 0x0
0xffffb90000015900 0041 00000000 0x0 0x0
0xffffb90000015980 0041 00000000 0x0 0x0
0xffffb90000015a00 0041 00000000 0x0 0x0
0xffffb90000015a80 0041 00000000 0x0 0x0
0xffffb90000015b00 0041 00000000 0x0 0x0
0xffffb90000015b80 0041 00000000 0x0 0x0
0xffffb90000015c00 0041 00000000 0x0 0x0
0xffffb90000015c80 0041 00000000 0x0 0x0
0xffffb90000015d00 0001 00000000 0x0 0x0
0xffffb90000015d80 0001 00000000 0x0 0x0
0xffffb90000015e00 0001 00000000 0x0 0x0
0xffffb90000015e80 0001 00000000 0x0 0x0
0xffffb90000015f00 0001 00000000 0x0 0x0
0xffffb90000015f80 0001 00000000 0x0 0x0
0xffffb90000016000 0001 00000000 0x0 0x0
0xffffb90000016080 0001 00000000 0x0 0x0
0xffffb90000016100 0001 00000000 0x0 0x0
0xffffb90000016180 0001 00000000 0x0 0x0
0xffffb90000016200 0001 00000000 0x0 0x0
0xffffb90000016280 0001 00000000 0x0 0x0
0xffffb90000016300 0001 00000000 0x0 0x0
0xffffb90000016380 0001 00000000 0x0 0x0
0xffffb90000016400 0001 00000000 0x0 0x0
0xffffb90000016480 0001 00000000 0x0 0x0
0xffffb90000016500 0001 00000000 0x0 0x0
0xffffb90000016580 0001 00000000 0x0 0x0
0xffffb90000016600 0001 00000000 0x0 0x0
0xffffb90000016680 0001 00000000 0x0 0x0
0xffffb90000016700 0001 00000000 0x0 0x0
0xffffb90000016780 0001 00000000 0x0 0x0
0xffffb90000016800 0001 00000000 0x0 0x0
0xffffb90000016880 0001 00000000 0x0 0x0
0xffffb90000016900 0001 00000000 0x0 0x0
0xffffb90000016980 0001 00000000 0x0 0x0
0xffffb90000016a00 0001 00000000 0x0 0x0
0xffffb90000016a80 0001 00000000 0x0 0x0
0xffffb90000016b00 0001 00000000 0x0 0x0
0xffffb90000016b80 0001 00000000 0x0 0x0
0xffffb90000016c00 0001 00000000 0x0 0x0
0xffffb90000016c80 0001 00000000 0x0 0x0
0xffffb90000016d00 0001 00000000 0x0 0x0
0xffffb90000016d80 0001 00000000 0x0 0x0
0xffffb90000016e00 0001 00000000 0x0 0x0
0xffffb90000016e80 0001 00000000 0x0 0x0
0xffffb90000016f00 0001 00000000 0x0 0x0
0xffffb90000016f80 0001 00000000 0x0 0x0
0xffffb90000017000 0001 00000000 0x0 0x0
0xffffb90000017080 0001 00000000 0x0 0x0
0xffffb90000017100 0001 00000000 0x0 0x0
0xffffb90000017180 0001 00000000 0x0 0x0
0xffffb90000017200 0001 00000000 0x0 0x0
0xffffb90000017280 0001 00000000 0x0 0x0
0xffffb90000017300 0001 00000000 0x0 0x0
0xffffb90000017380 0001 00000000 0x0 0x0
0xffffb90000017400 0001 00000000 0x0 0x0
0xffffb90000017480 0001 00000000 0x0 0x0
0xffffb90000017500 0001 00000000 0x0 0x0
0xffffb90000017580 0001 0000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Sep 19, 2022, 12:06:39 PM9/19/22

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: e4766c13b3c4 KNF. 80 columns, use tab. NFC.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16260828880000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=9a3cd12278dd96d959e3
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13716690880000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=138d5af8880000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9a3cd1...@syzkaller.appspotmail.com

[ 311.4148660] panic: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/miscfs/specfs/spec_vnops.c", line 1691
[ 311.4247168] cpu1: Begin traceback...
[ 311.4446919] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 311.5146927] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 311.5646901] spec_close() at netbsd:spec_close+0x98a sys/miscfs/specfs/spec_vnops.c:1691
[ 311.6046903] VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
[ 311.6446968] cnclose() at netbsd:cnclose+0xd5 sys/dev/cons.c:158
[ 311.6846918] cdev_close() at netbsd:cdev_close+0x181 sys/kern/subr_devsw.c:1202
[ 311.7246910] spec_close() at netbsd:spec_close+0x76b sys/miscfs/specfs/spec_vnops.c:1742
[ 311.7646924] VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
[ 311.8046930] vn_close() at netbsd:vn_close+0x4c sys/kern/vfs_vnops.c:480
[ 311.8446931] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
[ 311.8946903] fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571
[ 311.9346921] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301
[ 311.9746890] sigexit() at netbsd:sigexit+0x7bd lwp_lock sys/sys/lwp.h:412 [inline]
[ 311.9746890] sigexit() at netbsd:sigexit+0x7bd sys/kern/kern_sig.c:2264
[ 312.0146885] postsig() at netbsd:postsig+0x9ac sys/kern/kern_sig.c:2144
[ 312.0546877] lwp_userret() at netbsd:lwp_userret+0x4cb sys/kern/kern_lwp.c:1645
[ 312.0946906] mi_userret() at netbsd:mi_userret+0x54a x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
[ 312.0946906] mi_userret() at netbsd:mi_userret+0x54a KPREEMPT_DISABLE sys/sys/lwp.h:543 [inline]
[ 312.0946906] mi_userret() at netbsd:mi_userret+0x54a sys/sys/userret.h:97
[ 312.1446887] syscall() at netbsd:syscall+0x3da sys/arch/x86/x86/syscall.c:167
[ 312.1546876] --- syscall (number 0 via SYS_syscall) ---
[ 312.1646857] netbsd:syscall+0x3da:
[ 312.1746880] cpu1: End traceback...
[ 312.1746880] fatal breakpoint trap in supervisor mode
[ 312.1746880] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x79ec337d7000 ilevel 0 rsp 0xffff9802481b47f0
[ 312.1846858] curlwp 0xfffff7eee34cf100 pid 1083.1083 lowest kstack 0xffff9802481b02c0
Stopped in pid 1083.1083 (getty) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
spec_close() at netbsd:spec_close+0x98a sys/miscfs/specfs/spec_vnops.c:1691
VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
cnclose() at netbsd:cnclose+0xd5 sys/dev/cons.c:158
cdev_close() at netbsd:cdev_close+0x181 sys/kern/subr_devsw.c:1202
spec_close() at netbsd:spec_close+0x76b sys/miscfs/specfs/spec_vnops.c:1742
VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605
vn_close() at netbsd:vn_close+0x4c sys/kern/vfs_vnops.c:480
closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571
exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301

sigexit() at netbsd:sigexit+0x7bd lwp_lock sys/sys/lwp.h:412 [inline]
sigexit() at netbsd:sigexit+0x7bd sys/kern/kern_sig.c:2264
postsig() at netbsd:postsig+0x9ac sys/kern/kern_sig.c:2144
lwp_userret() at netbsd:lwp_userret+0x4cb sys/kern/kern_lwp.c:1645
mi_userret() at netbsd:mi_userret+0x54a x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
mi_userret() at netbsd:mi_userret+0x54a KPREEMPT_DISABLE sys/sys/lwp.h:543 [inline]
mi_userret() at netbsd:mi_userret+0x54a sys/sys/userret.h:97
syscall() at netbsd:syscall+0x3da sys/arch/x86/x86/syscall.c:167
--- syscall (number 0 via SYS_syscall) ---
netbsd:syscall+0x3da:

Panic string: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/miscfs/specfs/spec_vnops.c", line 1691
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

9565 9565 2 0 0 fffff7eee34cf540 syz-executor3185
1083 >1083 7 1 1000140 fffff7eee34cf100 getty
1221 >1221 7 0 140 fffff7eee4b17180 syz-executor3185
1076 1076 3 0 180 fffff7eee49e0140 sshd select
1086 1086 3 0 180 fffff7eee285f2c0 getty nanoslp
1082 1082 3 0 180 fffff7eee366f940 getty nanoslp
1080 1080 3 1 180 fffff7eee49e0580 getty nanoslp
1100 1100 3 1 180 fffff7eee49e09c0 sshd select
953 953 3 1 180 fffff7eee34cf980 powerd kqueue
693 693 3 1 180 fffff7eee2be6340 syslogd kqueue
547 547 3 0 180 fffff7eee29eb740 dhcpcd poll
742 742 3 1 180 fffff7eee29eb300 dhcpcd poll
465 465 3 0 180 fffff7eee359a900 dhcpcd poll
594 594 3 1 180 fffff7eee2be6bc0 dhcpcd poll
292 292 3 0 180 fffff7eee25e5b00 dhcpcd poll
290 290 3 0 180 fffff7eee285f700 dhcpcd poll
289 289 3 0 180 fffff7eee29ebb80 dhcpcd poll
1 1 3 1 180 fffff7eeda078140 init wait
0 940 3 0 200 fffff7eee225f200 physiod physiod
0 195 3 0 200 fffff7eee22a4240 pooldrain pooldrain
0 194 3 0 200 fffff7eee225fa80 ioflush syncer
0 193 3 1 200 fffff7eee225f640 pgdaemon pgdaemon
0 169 3 1 200 fffff7eee11b7600 usb7 usbevt
0 168 3 1 200 fffff7eee11b71c0 usb6 usbevt
0 167 3 0 200 fffff7eede14aa00 usb5 usbevt
0 166 3 1 200 fffff7eede14a5c0 usb4 usbevt
0 165 3 1 200 fffff7eede14a180 usb3 usbevt
0 31 3 0 200 fffff7eeda0789c0 usb2 usbevt
0 63 3 0 200 fffff7eed9ed8740 usb1 usbevt
0 126 3 0 200 fffff7eed9ed8b80 usb0 usbevt
0 125 3 1 200 fffff7eed9fd7340 usbtask-dr usbtsk
0 124 3 0 200 fffff7eed84a1b00 usbtask-hc usbtsk
0 123 3 0 200 fffff7eeda078580 npfgc0 npfgcw
0 122 3 1 200 fffff7eeda05b980 rt_free rt_free
0 121 3 1 200 fffff7eeda05b540 unpgc unpgc
0 120 3 0 200 fffff7eeda05b100 key_timehandler key_timehandler
0 119 3 1 200 fffff7eeda036940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 fffff7eeda036500 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 fffff7eeda0360c0 nd6_timer nd6_timer
0 116 3 1 200 fffff7eeda02a900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 fffff7eeda02a4c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 fffff7eeda02a080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 fffff7eeda0148c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 fffff7eeda014480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 fffff7eeda014040 icmp_wqinput/0 icmp_wqinput
0 110 2 1 200 fffff7eed9fd7bc0 rt_timer
0 109 3 0 200 fffff7eed9fd7780 vmem_rehash vmem_rehash
0 100 3 1 200 fffff7eed9ed8300 entbutler entropy
0 99 3 1 200 fffff7eed9948b40 viomb balloon
0 98 3 1 200 fffff7eed9948700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 fffff7eed99482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 fffff7eed84a16c0 scsibus0 sccomp
0 29 3 0 200 fffff7eed84a1280 pms0 pmsreset
0 28 3 1 200 fffff7eed83b4ac0 xcall/1 xcall
0 27 1 1 200 fffff7eed83b4680 softser/1
0 26 1 1 200 fffff7eed83b4240 softclk/1
0 25 1 1 200 fffff7eed8387a80 softbio/1
0 24 1 1 200 fffff7eed8387640 softnet/1
0 23 1 1 201 fffff7eed8387200 idle/1
0 22 3 1 200 fffff7f00672da40 lnxsyswq lnxsyswq
0 21 3 1 200 fffff7f00672d600 lnxubdwq lnxubdwq
0 20 3 1 200 fffff7f00672d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 fffff7f006734a00 lnxlngwq lnxlngwq
0 18 3 1 200 fffff7f0067345c0 lnxhipwq lnxhipwq
0 17 3 1 200 fffff7f006734180 lnxrcugc lnxrcugc
0 16 3 0 200 fffff7f0067539c0 sysmon smtaskq
0 15 3 1 200 fffff7f006753580 pmfsuspend pmfsuspend
0 14 3 0 200 fffff7f006753140 pmfevent pmfevent
0 13 3 1 200 fffff7f00675e980 sopendfree sopendfr
0 12 3 0 200 fffff7f00675e540 ifwdog ifwdog
0 11 3 0 200 fffff7f00675e100 iflnkst iflnkst
0 10 3 1 200 fffff7f007795940 nfssilly nfssilly
0 9 3 0 200 fffff7f007795500 vdrain vdrain
0 8 3 1 200 fffff7f0077950c0 modunload mod_unld
0 7 3 0 200 fffff7f0077ba900 xcall/0 xcall
0 6 1 0 200 fffff7f0077ba4c0 softser/0
0 > 5 7 0 200 fffff7f0077ba080 softclk/0
0 4 1 0 200 fffff7f0077eb8c0 softbio/0
0 3 1 0 200 fffff7f0077eb480 softnet/0
0 2 1 0 201 fffff7f0077eb040 idle/0
0 0 3 0 200 ffffffff86740bc0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1083.1083 (getty) @ 0xfffff7eee34cf100, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x4b8 sys/kern/kern_fork.c:366)

lock address : fffff7eee2986850

type : sleep/adaptive
initialized : netbsd:fork1+0x4b8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xfffff7eee34cf100 last held: 0xfffff7eee34cf100
last locked* : netbsd:exit1+0x393
unlocked : netbsd:execve_runproc+0x2dc4
owner/count : 0xfffff7eee34cf100 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : fffff7eee4673a40

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xfffff7eee34cf100 last held: 0xfffff7eee34cf100

last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50

owner/count : 0xfffff7eee34cf100 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:devsw_init+0x5f sys/kern/subr_devsw.c:136)
lock address : netbsd:device_lock
type : sleep/adaptive
initialized : netbsd:devsw_init+0x5f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xfffff7eee34cf100 last held: 0xfffff7eee34cf100

last locked* : netbsd:spec_close+0x315
unlocked : netbsd:spec_close+0x672

owner field : 0xfffff7eee34cf100 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xfffff7eee29eb300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xfffff7eee29eb300 last held: 000000000000000000