UBSan: Undefined Behavior in uvm_page_owner_locked_p

0 views

Skip to first unread message

syzbot

unread,

Aug 3, 2020, 2:36:24 PM8/3/20

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 300c0bac Fix a problem in which a fault occured in an inte..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13b60eda900000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=c5eb9076c0f5e888905b
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+c5eb90...@syzkaller.appspotmail.com

[ 73.6607179] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/uvm/uvm_page.c:2083:34, member access within misaligned address 0xdeadbeef for type 'struct uvm_object' which requires 8 byte alignment

[ 73.6807031] cpu1: Begin traceback...
[ 73.7207037] vpanic() at netbsd:vpanic+0x2d3 sys/kern/subr_prf.c:290
[ 73.8107071] isAlreadyReported() at netbsd:isAlreadyReported
[ 73.8907046] HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xae
[ 73.9707100] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x63 sys/../common/lib/libc/misc/ubsan.c:434
[ 74.0607040] uvm_page_owner_locked_p() at netbsd:uvm_page_owner_locked_p+0x1ef sys/uvm/uvm_page.c:2083
[ 74.1407064] uvm_pageunwire() at netbsd:uvm_pageunwire+0x1c sys/uvm/uvm_page.c:1841
[ 74.2207052] uvm_fault_unwire_locked() at netbsd:uvm_fault_unwire_locked+0x399 sys/uvm/uvm_fault.c:2723
[ 74.3107051] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 uvm_map_entry_unwire sys/uvm/uvm_map.c:872 [inline]
[ 74.3107051] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 sys/uvm/uvm_map.c:2222
[ 74.3907080] uvm_map_enter() at netbsd:uvm_map_enter+0x264 sys/uvm/uvm_map.c:1336
[ 74.4707055] uvm_map() at netbsd:uvm_map+0x1bd sys/uvm/uvm_map.c:1099
[ 74.5607062] uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3a6
[ 74.6507056] sys_mmap() at netbsd:sys_mmap+0x8f8 uvm_mmap sys/uvm/uvm_mmap.c:401 [inline]
[ 74.6507056] sys_mmap() at netbsd:sys_mmap+0x8f8 sys/uvm/uvm_mmap.c:401
[ 74.7307044] sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[ 74.7307044] sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
[ 74.8207048] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 74.8207048] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 74.8207048] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 74.8407047] --- syscall (number 198) ---
[ 74.8707076] netbsd:syscall+0x2d5:
[ 74.8707076] cpu1: End traceback...
[ 74.8707076] fatal breakpoint trap in supervisor mode
[ 74.8807048] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x638000 ilevel 0 rsp 0xffff8780cb207580
[ 74.8907083] curlwp 0xffffac6b34357740 pid 394.396 lowest kstack 0xffff8780cb2032c0
Stopped in pid 394.396 (syz-executor.5) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2d3 sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xae
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x63 sys/../common/lib/libc/misc/ubsan.c:434
uvm_page_owner_locked_p() at netbsd:uvm_page_owner_locked_p+0x1ef sys/uvm/uvm_page.c:2083
uvm_pageunwire() at netbsd:uvm_pageunwire+0x1c sys/uvm/uvm_page.c:1841
uvm_fault_unwire_locked() at netbsd:uvm_fault_unwire_locked+0x399 sys/uvm/uvm_fault.c:2723
uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 uvm_map_entry_unwire sys/uvm/uvm_map.c:872 [inline]
uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 sys/uvm/uvm_map.c:2222
uvm_map_enter() at netbsd:uvm_map_enter+0x264 sys/uvm/uvm_map.c:1336
uvm_map() at netbsd:uvm_map+0x1bd sys/uvm/uvm_map.c:1099
uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3a6
sys_mmap() at netbsd:sys_mmap+0x8f8 uvm_mmap sys/uvm/uvm_mmap.c:401 [inline]
sys_mmap() at netbsd:sys_mmap+0x8f8 sys/uvm/uvm_mmap.c:401
sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/uvm/uvm_page.c:2083:34, member access within misaligned address 0xdeadbeef for type 'struct uvm_object' which requires 8 byte alignment

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
399 402 3 0 80 ffffac6b334c1600 syz-executor.3 parked
399 399 2 1 10000000 ffffac6b351a2100 syz-executor.3
398 411 2 0 0 ffffac6b34c1d580 syz-executor.2
398 410 2 0 0 ffffac6b352174c0 syz-executor.2
398 409 2 0 0 ffffac6b34ff4500 syz-executor.2
398 408 2 0 0 ffffac6b351a2540 syz-executor.2
398 404 2 0 0 ffffac6b357ef040 syz-executor.2
398 400 2 0 0 ffffac6b3395db00 syz-executor.2
398 398 2 0 10000000 ffffac6b272b4980 syz-executor.2
395 397 3 0 80 ffffac6b351a2980 syz-executor.0 parked
395 395 2 0 10000000 ffffac6b35217900 syz-executor.0
393 407 2 0 0 ffffac6b33d37700 syz-executor.4
393 406 2 0 0 ffffac6b34ff4940 syz-executor.4
393 405 2 0 0 ffffac6b34c1d140 syz-executor.4
393 403 2 0 0 ffffac6b32c1ea00 syz-executor.4
393 393 2 0 10000000 ffffac6b357ef480 syz-executor.4
394 > 396 7 1 0 ffffac6b34357740 syz-executor.5
394 394 2 1 10000000 ffffac6b33eea340 syz-executor.5
386 401 3 0 80 ffffac6b34ff40c0 syz-executor.1 parked
386 391 3 1 80 ffffac6b35217080 syz-executor.1 parked
386 386 2 1 10040000 ffffac6b334c11c0 syz-executor.1
1703 1703 3 1 80 ffffac6b32c1e5c0 syz-executor.5 parked
1663 1663 3 1 80 ffffac6b23493200 init nanoslp
1607 1607 3 0 80 ffffac6b32c1e180 syz-executor.3 parked
1236 1236 3 1 80 ffffac6b33b79680 syz-executor.0 parked
1353 1353 3 0 80 ffffac6b32969140 syz-executor.0 parked
1472 1472 3 0 80 ffffac6b34370a80 syz-executor.0 parked
1383 1383 3 0 80 ffffac6b33b79ac0 syz-executor.0 parked
1207 1207 3 1 80 ffffac6b3395d280 syz-executor.0 parked
1212 1212 3 1 80 ffffac6b329699c0 syz-executor.2 parked
939 939 3 0 80 ffffac6b33b79240 syz-executor.2 parked
1082 1082 2 1 40 ffffac6b272b4540 syz-executor.4
989 989 2 1 40 ffffac6b24726780 syz-executor.5
418 418 2 1 40 ffffac6b2387f300 syz-executor.3
1091 1091 2 1 40 ffffac6b272b4100 syz-executor.2
1071 1071 2 1 40 ffffac6b23aa7940 syz-executor.1
1077 1077 2 1 40 ffffac6b248f3480 syz-executor.0
945 1100 3 1 80 ffffac6b23aa7500 syz-fuzzer parked
945 1068 3 0 80 ffffac6b249664c0 syz-fuzzer kqueue
945 1076 3 0 80 ffffac6b239a36c0 syz-fuzzer parked
945 1064 3 1 80 ffffac6b23493a80 syz-fuzzer parked
945 1065 3 0 80 ffffac6b2377b240 syz-fuzzer parked
945 1253 3 1 80 ffffac6b23493640 syz-fuzzer parked
945 1249 2 1 40 ffffac6b23bd6b40 syz-fuzzer
945 1250 2 1 40 ffffac6b24966900 syz-fuzzer
945 945 3 0 80 ffffac6b23aa70c0 syz-fuzzer parked
1254 1254 3 0 80 ffffac6b2387fb80 sshd select
850 850 3 0 80 ffffac6b248f3040 getty nanoslp
1090 1090 3 0 80 ffffac6b248f38c0 getty nanoslp
696 696 3 0 80 ffffac6b232465c0 getty nanoslp
942 942 3 1 80 ffffac6b239a3b00 sshd select
976 976 3 0 80 ffffac6b2377bac0 powerd kqueue
735 735 3 1 80 ffffac6b24966080 syslogd kqueue
590 590 3 1 80 ffffac6b24726bc0 dhcpcd poll
589 589 3 1 80 ffffac6b24726340 dhcpcd poll
587 587 3 1 80 ffffac6b23bd62c0 dhcpcd poll
412 412 3 0 80 ffffac6b2387f740 dhcpcd poll
347 347 3 0 80 ffffac6b2377b680 dhcpcd poll
346 346 3 1 80 ffffac6b239a3280 dhcpcd poll
345 345 3 0 80 ffffac6b23bd6700 dhcpcd poll
1 1 3 1 80 ffffac6b1b0ad900 init wait
0 1477 3 0 200 ffffac6b357ef8c0 acctwatch actwat
0 853 3 0 200 ffffac6b23246a00 physiod physiod
0 165 3 0 200 ffffac6b232c6a40 pooldrain pooldrain
0 > 164 7 0 240 ffffac6b232c6600 ioflush
0 163 3 1 200 ffffac6b232c61c0 pgdaemon pgdaemon
0 160 3 1 200 ffffac6b23246180 usb7 usbevt
0 31 3 1 200 ffffac6b201e99c0 usb6 usbevt
0 63 3 1 200 ffffac6b201e9580 usb5 usbevt
0 126 3 0 200 ffffac6b201e9140 usb4 usbevt
0 125 3 0 200 ffffac6b1d184980 usb3 usbevt
0 124 3 0 200 ffffac6b1d184540 usb2 usbevt
0 123 3 1 200 ffffac6b1d184100 usb1 usbevt
0 122 3 0 200 ffffac6b1c13b940 usb0 usbevt
0 121 3 1 200 ffffac6b1c13b500 usbtask-dr usbtsk
0 120 3 1 200 ffffac6b1c13b0c0 usbtask-hc usbtsk
0 119 3 0 200 ffffac6b1854aac0 npfgc0 npfgcw
0 118 3 1 200 ffffac6b1b0ad4c0 rt_free rt_free
0 117 3 1 200 ffffac6b1b0ad080 unpgc unpgc
0 116 3 0 200 ffffac6b1b0988c0 key_timehandler key_timehandler
0 115 3 1 200 ffffac6b1b098480 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffffac6b1b098040 icmp6_wqinput/0 icmp6_wqinput
0 113 3 0 200 ffffac6b1b023bc0 nd6_timer nd6_timer
0 112 3 1 200 ffffac6b1b023780 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffffac6b1b023340 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffffac6b1b065b80 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffffac6b1b065740 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffffac6b1b065300 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffffac6b1a998b00 icmp_wqinput/0 icmp_wqinput
0 106 3 0 200 ffffac6b1b0092c0 rt_timer rt_timer
0 105 3 1 200 ffffac6b1b009700 vmem_rehash vmem_rehash
0 104 3 1 200 ffffac6b1b009b40 entbutler entropy
0 30 3 1 200 ffffac6b1a9986c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffac6b1a998280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffac6b1854a680 scsibus0 sccomp
0 26 3 0 200 ffffac6b1854a240 pms0 pmsreset
0 25 3 1 200 ffffac6b1847ca80 xcall/1 xcall
0 24 1 1 200 ffffac6b1847c640 softser/1
0 23 1 1 200 ffffac6b1847c200 softclk/1
0 22 1 1 200 ffffac6b1844fa40 softbio/1
0 21 1 1 200 ffffac6b1844f600 softnet/1
0 20 1 1 201 ffffac6b1844f1c0 idle/1
0 19 3 0 200 ffffac6c2838fa00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffac6c2838f5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffac6c2838f180 lnxsyswq lnxsyswq
0 16 3 1 200 ffffac6c2839c9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffac6c2839c580 sysmon smtaskq
0 14 3 0 200 ffffac6c2839c140 pmfsuspend pmfsuspend
0 13 3 1 200 ffffac6c283b9980 pmfevent pmfevent
0 12 3 0 200 ffffac6c283b9540 sopendfree sopendfr
0 11 3 0 200 ffffac6c283b9100 iflnkst iflnkst
0 10 3 0 200 ffffac6c293d8940 nfssilly nfssilly
0 9 3 0 200 ffffac6c293d8500 vdrain vdrain
0 8 3 0 200 ffffac6c293d80c0 modunload mod_unld
0 7 3 0 200 ffffac6c29413900 xcall/0 xcall
0 6 1 0 200 ffffac6c294134c0 softser/0
0 5 1 0 200 ffffac6c29413080 softclk/0
0 4 1 0 200 ffffac6c2943d8c0 softbio/0
0 3 1 0 200 ffffac6c2943d480 softnet/0
0 2 1 0 201 ffffac6c2943d040 idle/0
0 0 2 1 240 ffffffff85efc100 swapper
[Locks tracked through LWPs]

****** LWP 399.402 (syz-executor.3) @ 0xffffac6b334c1600, l_stat=3

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffac6b30404e40 type : sleep/adaptive
initialized : 0xffffffff830f0695
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6b334c1600 last held: 0xffffac6b334c1600
last locked* : 0xffffffff8311355c unlocked : 0xffffffff831113d3
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 395.397 (syz-executor.0) @ 0xffffac6b351a2980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6b351a2980 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 393.393 (syz-executor.4) @ 0xffffac6b357ef480, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_alloc1)
lock address : 0xffffac6b26040ec0 type : sleep/adaptive
initialized : 0xffffffff830efe4c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6b357ef480 last held: 0xffffac6b357ef480
last locked* : 0xffffffff8311355c unlocked : 0xffffffff830f876a
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffac6b35615380 type : sleep/adaptive
initialized : 0xffffffff80f84ea3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6b357ef480 last held: 0xffffac6b357ef480
last locked* : 0xffffffff80f87557 unlocked : 0xffffffff80f87c4c
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at pmap_ctor)
lock address : 0xffffac6b35615388 type : sleep/adaptive
initialized : 0xffffffff80f84ed2
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6b357ef480 last held: 0xffffac6b357ef480
last locked* : 0xffffffff80f719bb unlocked : 0xffffffff80f71e2a
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 394.396 (syz-executor.5) @ 0xffffac6b34357740, l_stat=7

*** Locks held:

* Lock 0 (initialized at uvm_map_setup)
lock address : 0xffffac6b35557b68 type : sleep/adaptive
initialized : 0xffffffff8313673c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac6b34357740 last held: 0xffffac6b34357740
last locked* : 0xffffffff83128d1d unlocked : 0xffffffff8310e172
owner/count : 0xffffac6b34357740 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at uvm_obj_init)
lock address : 0xffffac6b249b2540 type : sleep/adaptive
initialized : 0xffffffff8314ddee
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac6b34357740 last held: 0xffffac6b34357740
last locked* : 0xffffffff83136dfc unlocked : 0xffffffff83136f7c
owner/count : 0xffffac6b34357740 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 386.386 (syz-executor.1) @ 0xffffac6b334c11c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffac6b246ebd80 type : sleep/adaptive
initialized : 0xffffffff80f84ea3
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac6b334c11c0 last held: 000000000000000000
last locked : 0xffffffff80f87557 unlocked*: 0xffffffff80f87c4c
owner field : 0xffffac6b334c11c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 589.589 (dhcpcd) @ 0xffffac6b24726340, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac6b24726340 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 587.587 (dhcpcd) @ 0xffffac6b23bd62c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac6b23bd62c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 346.346 (dhcpcd) @ 0xffffac6b239a3280, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac6b239a3280 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 345.345 (dhcpcd) @ 0xffffac6b23bd6700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6b23bd6700 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffac6c283b9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6c283b9100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffac6c29413080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac6c29413080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffff878000007180 0045 00000000 0x0 0x0
0xffff878000007200 0045 00000000 0x0 0x0
0xffff878000007280 0045 00000000 0x0 0x0
0xffff878000007300 0045 00000000 0x0 0x0
0xffff878000007380 0045 00000000 0x0 0x0
0xffff878000007400 0045 00000000 0x0 0x0
0xffff878000007480 0045 00000000 0x0 0x0
0xffff878000007500 0045 00000000 0x0 0x0
0xffff878000007580 0041 00000000 0x0 0x0
0xffff878000007600 0041 00000000 0x0 0x0
0xffff878000007680 0041 00000000 0x0 0x0
0xffff878000007700 0045 00000000 0x0 0x0
0xffff878000007780 0045 00000000 0x0 0x0
0xffff878000007800 0045 00000000 0x0 0x0
0xffff878000007880 0041 00000000 0x0 0x0
0xffff878000007900 0041 00000000 0x0 0x0
0xffff878000007980 0041 00000000 0x0 0x0
0xffff878000007a00 0041 00000000 0x0 0x0
0xffff878000007a80 0041 00000000 0x0 0x0
0xffff878000007b00 0041 00000000 0x0 0x0
0xffff878000007b80 0041 00000000 0x0 0x0
0xffff878000007c00 0041 00000000 0x0 0x0
0xffff878000007c80 0041 00000000 0x0 0x0
0xffff878000007d00 0041 00000000 0x0 0x0
0xffff878000007d80 0041 00000000 0x0 0x0
0xffff878000007e00 0041 00000000 0x0 0x0
0xffff878000007e80 0041 00000000 0x0 0x0
0xffff878000007f00 0041 00000000 0x0 0x0
0xffff878000007f80 0041 00000000 0x0 0x0
0xffff878000008000 0041 00000000 0x0 0x0
0xffff878000008080 0041 00000000 0x0 0x0
0xffff878000008100 0041 00000000 0x0 0x0
0xffff878000008180 0041 00000000 0x0 0x0
0xffff878000008200 0041 00000000 0x0 0x0
0xffff878000008280 0045 00000000 0x0 0x0
0xffff878000008300 0041 00000000 0x0 0x0
0xffff878000008380 0041 00000000 0x0 0x0
0xffff878000008400 0041 00000000 0x0 0x0
0xffff878000008480 0041 00000000 0x0 0x0
0xffff878000008500 0041 00000000 0x0 0x0
0xffff878000008580 0041 00000000 0x0 0x0
0xffff878000008600 0041 00000000 0x0 0x0
0xffff878000008680 0041 00000000 0x0 0x0
0xffff878000008700 0041 00000000 0x0 0x0
0xffff878000008780 0041 00000000 0x0 0x0
0xffff878000008800 0041 00000000 0x0 0x0
0xffff878000008880 0041 00000000 0x0 0x0
0xffff878000008900 0041 00000000 0x0 0x0
0xffff878000008980 0041 00000000 0x0 0x0
0xffff878000008a00 0041 00000000 0x0 0x0
0xffff878000008a80 0045 00000000 0x0 0x0
0xffff878000008b00 0041 00000000 0x0 0x0
0xffff878000008b80 0041 00000000 0x0 0x0
0xffff878000008c00 0041 00000000 0x0 0x0
0xffff878000008c80 0041 00000000 0x0 0x0
0xffff878000008d00 0041 00000000 0x0 0x0
0xffff878000008d80 0041 00000000 0x0 0x0
0xffff878000008e00 0041 00000000 0x0 0x0
0xffff878000008e80 0041 00000000 0x0 0x0
0xffff878000008f00 0045 00000000 0x0 0x0
0xffff878000008f80 0041 00000000 0x0 0x0
0xffff878000009000 0041 00000000 0x0 0x0
0xffff878000009080 0041 00000000 0x0 0x0
0xffff878000009100 0041 00000000 0x0 0x0
0xffff878000009180 0041 00000000 0x0 0x0
0xffff878000009200 0041 00000000 0x0 0x0
0xffff878000009280 0041 00000000 0x0 0x0
0xffff878000009300 0041 00000000 0x0 0x0
0xffff878000009380 0041 00000000 0x0 0x0
0xffff878000009400 0041 00000000 0x0 0x0
0xffff878000009480 0041 00000000 0x0 0x0
0xffff878000009500 0041 00000000 0x0 0x0
0xffff878000009580 0045 00000000 0x0 0x0
0xffff878000009600 0041 00000000 0x0 0x0
0xffff878000009680 0041 00000000 0x0 0x0
0xffff878000009700 0041 00000000 0x0 0x0
0xffff878000009780 0041 00000000 0x0 0x0
0xffff878000009800 0041 00000000 0x0 0x0
0xffff878000009880 0041 00000000 0x0 0x0
0xffff878000009900 0041 00000000 0x0 0x0
0xffff878000009980 0041 00000000 0x0 0x0
0xffff878000009a00 0041 00000000 0x0 0x0
0xffff878000009a80 0041 00000000 0x0 0x0
0xffff878000009b00 0041 00000000 0x0 0x0
0xffff878000009b80 0041 00000000 0x0 0x0
0xffff878000009c00 0041 00000000 0x0 0x0
0xffff878000009c80 0041 00000000 0x0 0x0
0xffff878000009d00 0041 00000000 0x0 0x0
0xffff878000009d80 0041 00000000 0x0 0x0
0xffff878000009e00 0041 00000000 0x0 0x0
0xffff878000009e80 0041 00000000 0x0 0x0
0xffff878000009f00 0041 00000000 0x0 0x0
0xffff878000009f80 0041 00000000 0x0 0x0
0xffff87800000a000 0041 00000000 0x0 0x0
0xffff87800000a080 0041 00000000 0x0 0x0
0xffff87800000a100 0045 00000000 0x0 0x0
0xffff87800000a180 0041 00000000 0x0 0x0
0xffff87800000a200 0041 00000000 0x0 0x0
0xffff87800000a280 0041 00000000 0x0 0x0
0xffff87800000a300 0041 00000000 0x0 0x0
0xffff87800000a380 0041 00000000 0x0 0x0
0xffff87800000a400 0041 00000000 0x0 0x0
0xffff87800000a480 0041 00000000 0x0 0x0
0xffff87800000a500 0041 00000000 0x0 0x0
0xffff87800000a580 0041 00000000 0x0 0x0
0xffff87800000a600 0041 00000000 0x0 0x0
0xffff87800000a680 0041 00000000 0x0 0x0
0xffff87800000a700 0041 00000000 0x0 0x0
0xffff87800000a780 0041 00000000 0x0 0x0
0xffff87800000a800 0041 00000000 0x0 0x0
0xffff87800000a880 0041 00000000 0x0 0x0
0xffff87800000a900 0041 00000000 0x0 0x0
0xffff87800000a980 0041 00000000 0x0 0x0
0xffff87800000aa00 0045 00000000 0x0 0x0
0xffff87800000aa80 0041 00000000 0x0 0x0
0xffff87800000ab00 0041 00000000 0x0 0x0
0xffff87800000ab80 0041 00000000 0x0 0x0
0xffff87800000ac00 0041 00000000 0x0 0x0
0xffff87800000ac80 0041 00000000 0x0 0x0
0xffff87800000ad00 0041 00000000 0x0 0x0
0xffff87800000ad80 0041 00000000 0x0 0x0
0xffff87800000ae00 0045 00000000 0x0 0x0
0xffff87800000ae80 0041 00000000 0x0 0x0
0xffff87800000af00 0041 00000000 0x0 0x0
0xffff87800000af80 0041 00000000 0x0 0x0
0xffff87800000b000 0041 00000000 0x0 0x0
0xffff87800000b080 0041 00000000 0x0 0x0
0xffff87800000b100 0041 00000000 0x0 0x0
0xffff87800000b180 0045 00000000 0x0 0x0
0xffff87800000b200 0045 00000000 0x0 0x0
0xffff87800000b280 0045 00000000 0x0 0x0
0xffff87800000b300 0041 00000000 0x0 0x0
0xffff87800000b380 0041 00000000 0x0 0x0
0xffff87800000b400 0041 00000000 0x0 0x0
0xffff87800000b480 0041 00000000 0x0 0x0
0xffff87800000b500 0041 00000000 0x0 0x0
0xffff87800000b580 0045 00000000 0x0 0x0
0xffff87800000b600 0045 00000000 0x0 0x0
0xffff87800000b680 0045 00000000 0x0 0x0
0xffff87800000b700 0041 00000000 0x0 0x0
0xffff87800000b780 0045 00000000 0x0 0x0
0xffff87800000b800 0045 00000000 0x0 0x0
0xffff87800000b880 0045 00000000 0x0 0x0
0xffff87800000b900 0045 00000000 0x0 0x0
0xffff87800000b980 0045 00000000 0x0 0x0
0xffff87800000ba00 0041 00000000 0x0 0x0
0xffff87800000ba80 0045 00000000 0x0 0x0
0xffff87800000bb00 0045 00000000 0x0 0x0
0xffff87800000bb80 0045 00000000 0x0 0x0
0xffff87800000bc00 0045 00000000 0x0 0x0
0xffff87800000bc80 0045 00000000 0x0 0x0
0xffff87800000bd00 0045 00000000 0x0 0x0
0xffff87800000bd80 0045 00000000 0x0 0x0
0xffff87800000be00 0041 00000000 0x0 0x0
0xffff87800000be80 0045 00000000 0x0 0x0
0xffff87800000bf00 0045 00000000 0x0 0x0
0xffff87800000bf80 0045 00000000 0x0 0x0
0xffff87800000c000 0045 00000000 0x0 0x0
0xffff87800000c080 0045 00000000 0x0 0x0
0xffff87800000c100 0045 00000000 0x0 0x0
0xffff87800000c180 0045 00000000 0x0 0x0
0xffff87800000c200 0041 00000000 0x0 0x0
0xffff87800000c280 0041 00000000 0x0 0x0
0xffff87800000c300 0045 00000000 0x0 0x0
0xffff87800000c380 0045 00000000 0x0 0x0
0xffff87800000c400 0045 00000000 0x0 0x0
0xffff87800000c480 0045 00000000 0x0 0x0
0xffff87800000c500 0045 00000000 0x0 0x0
0xffff87800000c580 0041 00000000 0x0 0x0
0xffff87800000c600 0041 00000000 0x0 0x0
0xffff87800000c680 0041 00000000 0x0 0x0
0xffff87800000c700 0045 00000000 0x0 0x0
0xffff87800000c780 0041 00000000 0x0 0x0
0xffff87800000c800 0045 00000000 0x0 0x0
0xffff87800000c880 0045 00000000 0x0 0x0
0xffff87800000c900 0045 00000000 0x0 0x0
0xffff87800000c980 0041 00000000 0x0 0x0
0xffff87800000ca00 0041 00000000 0x0 0x0
0xffff87800000ca80 0041 00000000 0x0 0x0
0xffff87800000cb00 0041 00000000 0x0 0x0
0xffff87800000cb80 0041 00000000 0x0 0x0
0xffff87800000cc00 0041 00000000 0x0 0x0
0xffff87800000cc80 0041 00000000 0x0 0x0
0xffff87800000cd00 0041 00000000 0x0 0x0
0xffff87800000cd80 0041 00000000 0x0 0x0
0xffff87800000ce00 0045 00000000 0x0 0x0
0xffff87800000ce80 0041 00000000 0x0 0x0
0xffff87800000cf00 0041 00000000 0x0 0x0
0xffff87800000cf80 0041 00000000 0x0 0x0
0xffff87800000d000 0041 00000000 0x0 0x0
0xffff87800000d080 0041 00000000 0x0 0x0
0xffff87800000d100 0041 00000000 0x0 0x0
0xffff87800000d180 0041 00000000 0x0 0x0
0xffff87800000d200 0041 00000000 0x0 0x0
0xffff87800000d280 0041 00000000 0x0 0x0
0xffff87800000d300 0041 00000000 0x0 0x0
0xffff87800000d380 0045 00000000 0x0 0x0
0xffff87800000d400 0041 00000000 0x0 0x0
0xffff87800000d480 0041 00000000 0x0 0x0
0xffff87800000d500 0041 00000000 0x0 0x0
0xffff87800000d580 0041 00000000 0x0 0x0
0xffff87800000d600 0041 00000000 0x0 0x0
0xffff87800000d680 0045 00000000 0x0 0x0
0xffff87800000d700 0045 00000000 0x0 0x0
0xffff87800000d780 0041 00000000 0x0 0x0
0xffff87800000d800 0045 00000000 0x0 0x0
0xffff87800000d880 0041 00000000 0x0 0x0
0xffff87800000d900 0041 00000000 0x0 0x0
0xffff87800000d980 0045 00000000 0x0 0x0
0xffff87800000da00 0041 00000000 0x0 0x0
0xffff87800000da80 0041 00000000 0x0 0x0
0xffff87800000db00 0041 00000000 0x0 0x0
0xffff87800000db80 0045 00000000 0x0 0x0
0xffff87800000dc00 0041 00000000 0x0 0x0
0xffff87800000dc80 0045 00000000 0x0 0x0
0xffff87800000dd00 0045 00000000 0x0 0x0
0xffff87800000dd80 0045 00000000 0x0 0x0
0xffff87800000de00 0041 00000000 0x0 0x0
0xffff87800000de80 0041 00000000 0x0 0x0
0xffff87800000df00 0041 00000000 0x0 0x0
0xffff87800000df80 0045 00000000 0x0 0x0
0xffff87800000e000 0045 00000000 0x0 0x0
0xffff87800000e080 0045 00000000 0x0 0x0
0xffff87800000e100 0045 00000000 0x0 0x0
0xffff87800000e180 0041 00000000 0x0 0x0
0xffff87800000e200 0041 00000000 0x0 0x0
0xffff87800000e280 0041 00000000 0x0 0x0
0xffff87800000e300 0045 00000000 0x0 0x0
0xffff87800000e380 0045 00000000 0x0 0x0
0xffff87800000e400 0045 00000000 0x0 0x0
0xffff87800000e480 0045 00000000 0x0 0x0
0xffff87800000e500 0041 00000000 0x0 0x0
0xffff87800000e580 0041 00000000 0x0 0x0
0xffff87800000e600 0041 00000000 0x0 0x0
0xffff87800000e680 0041 00000000 0x0 0x0
0xffff87800000e700 0041 00000000 0x0 0x0
0xffff87800000e780 0041 00000000 0x0 0x0
0xffff87800000e800 0045 00000000 0x0 0x0
0xffff87800000e880 0041 00000000 0x0 0x0
0xffff87800000e900 0045 00000000 0x0 0x0
0xffff87800000e980 0041 00000000 0x0 0x0
0xffff87800000ea00 0041 00000000 0x0 0x0
0xffff87800000ea80 0041 00000000 0x0 0x0
0xffff87800000eb00 0045 00000000 0x0 0x0
0xffff87800000eb80 0041 00000000 0x0 0x0
0xffff87800000ec00 0041 00000000 0x0 0x0
0xffff87800000ec80 0045 00000000 0x0 0x0
0xffff87800000ed00 0041 00000000 0x0 0x0
0xffff87800000ed80 0041 00000000 0x0 0x0
0xffff87800000ee00 0041 00000000 0x0 0x0
0xffff87800000ee80 0041 00000000 0x0 0x0
0xffff87800000ef00 0041 00000000 0x0 0x0
0xffff87800000ef80 0041 00000000 0x0 0x0
0xffff87800000f000 0045 00000000 0x0 0x0
0xffff87800000f080 0041 00000000 0x0 0x0
0xffff87800000f100 0041 00000000 0x0 0x0
0xffff87800000f180 0041 00000000 0x0 0x0
0xffff87800000f200 0045 00000000 0x0 0x0
0xffff87800000f280 0041 00000000 0x0 0x0
0xffff87800000f300 0041 00000000 0x0 0x0
0xffff87800000f380 0041 00000000 0x0 0x0
0xffff87800000f400 0041 00000000 0x0 0x0
0xffff87800000f480 0041 00000000 0x0 0x0
0xffff87800000f500 0041 00000000 0x0 0x0
0xffff87800000f580 0041 00000000 0x0 0x0
0xffff87800000f600 0041 00000000 0x0 0x0
0xffff87800000f680 0045 00000000 0x0 0x0
0xffff87800000f700 0041 00000000 0x0 0x0
0xffff87800000f780 0041 00000000 0x0 0x0
0xffff87800000f800 0041 00000000 0x0 0x0
0xffff87800000f880 0041 00000000 0x0 0x0
0xffff87800000f900 0041 00000000 0x0 0x0
0xffff87800000f980 0041 00000000 0x0 0x0
0xffff87800000fa00 0041 00000000 0x0 0x0
0xffff87800000fa80 0041 00000000 0x0 0x0
0xffff87800000fb00 0041 00000000 0x0 0x0
0xffff87800000fb80 0045 00000000 0x0 0x0
0xffff87800000fc00 0041 00000000 0x0 0x0
0xffff87800000fc80 0041 00000000 0x0 0x0
0xffff87800000fd00 0041 00000000 0x0 0x0
0xffff87800000fd80 0041 00000000 0x0 0x0
0xffff87800000fe00 0041 00000000 0x0 0x0
0xffff87800000fe80 0041 00000000 0x0 0x0
0xffff87800000ff00 0041 00000000 0x0 0x0
0xffff87800000ff80 0041 00000000 0x0 0x0
0xffff878000010000 0041 00000000 0x0 0x0
0xffff878000010080 0041 00000000 0x0 0x0
0xffff878000010100 0041 00000000 0x0 0x0
0xffff878000010180 0045 00000000 0x0 0x0
0xffff878000010200 0041 00000000 0x0 0x0
0xffff878000010280 0041 00000000 0x0 0x0
0xffff878000010300 0041 00000000 0x0 0x0
0xffff878000010380 0041 00000000 0x0 0x0
0xffff878000010400 0041 00000000 0x0 0x0
0xffff878000010480 0041 00000000 0x0 0x0
0xffff878000010500 0041 00000000 0x0 0x0
0xffff878000010580 0041 00000000 0x0 0x0
0xffff878000010600 0041 00000000 0x0 0x0
0xffff878000010680 0041 00000000 0x0 0x0
0xffff878000010700 0045 00000000 0x0 0x0
0xffff878000010780 0041 00000000 0x0 0x0
0xffff878000010800 0045 00000000 0x0 0x0
0xffff878000010880 0041 00000000 0x0 0x0
0xffff878000010900 0045 00000000 0x0 0x0
0xffff878000010980 0041 00000000 0x0 0x0
0xffff878000010a00 0041 00000000 0x0 0x0
0xffff878000010a80 0041 00000000 0x0 0x0
0xffff878000010b00 0041 00000000 0x0 0x0
0xffff878000010b80 0045 00000000 0x0 0x0
0xffff878000010c00 0041 00000000 0x0 0x0
0xffff878000010c80 0041 00000000 0x0 0x0
0xffff878000010d00 0041 00000000 0x0 0x0
0xffff878000010d80 0041 00000000 0x0 0x0
0xffff878000010e00 0041 00000000 0x0 0x0
0xffff878000010e80 0041 00000000 0x0 0x0
0xffff878000010f00 0041 00000000 0x0 0x0
0xffff878000010f80 0041 00000000 0x0 0x0
0xffff878000011000 0041 00000000 0x0 0x0
0xffff878000011080 0041 00000000 0x0 0x0
0xffff878000011100 0041 00000000 0x0 0x0
0xffff878000011180 0041 00000000 0x0 0x0
0xffff878000011200 0041 00000000 0x0 0x0
0xffff878000011280 0041 00000000 0x0 0x0
0xffff878000011300 0041 00000000 0x0 0x0
0xffff878000011380 0041 00000000 0x0 0x0
0xffff878000011400 0041 00000000 0x0 0x0
0xffff878000011480 0001 00000000 0x0 0x0
0xffff878000011500 0001 00000000 0x0 0x0
0xffff878000011580 0001 00000000 0x0 0x0
0xffff878000011600 0001 00000000 0x0 0x0
0xffff878000011680 0001 00000000 0x0 0x0
0xffff878000011700 0001 00000000 0x0 0x0
0xffff878000011780 0001 00000000 0x0 0x0
0xffff878000011800 0001 00000000 0x0 0x0
0xffff878000011880 0001 00000000 0x0 0x0
0xffff878000011900 0001 00000000 0x0 0x0
0xffff878000011980 0001 00000000 0x0 0x0
0xffff878000011a00 0001 00000000 0x0 0x0
0xffff878000011a80 0001 00000000 0x0 0x0
0xffff878000011b00 0001 00000000 0x0 0x0
0xffff878000011b80 0001 00000000 0x0 0x0
0xffff878000011c00 0001 00000000 0x0 0x0
0xffff878000011c80 0001 00000000 0x0 0x0
0xffff878000011d00 0001 00000000 0x0 0x0
0xffff878000011d80 0001 00000000 0x0 0x0
0xffff878000011e00 0001 00000000 0x0 0x0
0xffff878000011e80 0001 00000000 0x0 0x0
0xffff878000011f00 0001 00000000 0x0 0x0
0xffff878000011f80 0001 00000000 0x0 0x0
0xffff878000012000 0001 00000000 0x0 0x0
0xffff878000012080 0001 00000000 0x0 0x0
0xffff878000012100 0001 00000000 0x0 0x0
0xffff878000012180 0001 00000000 0x0 0x0
0xffff878000012200 0001 00000000 0x0 0x0
0xffff878000012280 0001 00000000 0x0 0x0
0xffff878000012300 0001 00000000 0x0 0x0
0xffff878000012380 0001 00000000 0x0 0x0
0xffff878000012400 0001 00000000 0x0 0x0
0xffff878000012480 0001 00000000 0x0 0x0
0xffff878000012500 0001 00000000 0x0 0x0
0xffff878000012580 0001 00000000 0x0 0x0
0xffff878000012600 0001 00000000 0x0 0x0
0xffff878000012680 0001 00000000 0x0 0x0
0xffff878000012700 0001 00000000 0x0 0x0
0xffff878000012780 0001 00000000 0x0 0x0
0xffff878000012800 0001 00000000 0x0 0x0
0xffff878000012880 0001 00000000 0x0 0x0
0xffff878000012900 0001 00000000 0x0 0x0
0xffff878000012980 0001 00000000 0x0 0x0
0xffff878000012a00 0001 00000000 0x0 0x0
0xffff878000012a80 0001 00000000 0x0 0x0
0xffff878000012b00 0001 00000000 0x0 0x0
0xffff878000012b80 0001 00000000 0x0 0x0
0xffff878000012c00 0001 00000000 0x0 0x0
0xffff878000012c80 0001 00000000 0x0 0x0
0xffff878000012d00 0001 00000000 0x0 0x0
0xffff878000012d80 0001 00000000 0x0 0x0
0xffff878000012e00 0001 00000000 0x0 0x0
0xffff878000012e80 0001 00000000 0x0 0x0
0xffff878000012f00 0001 00000000 0x0 0x0
0xffff878000012f80 0041 00000000 0x0 0x0
0xffff878000013000 0045 00000000 0x0 0x0
0xffff878000013080 0041 00000000 0x0 0x0
0xffff878000013100 0041 00000000 0x0 0x0
0xffff878000013180 0041 00000000 0x0 0x0
0xffff878000013200 0041 00000000 0x0 0x0
0xffff878000013280 0041 00000000 0x0 0x0
0xffff878000013300 0041 00000000 0x0 0x0
0xffff878000013380 0041 00000000 0x0 0x0
0xffff878000013400 0041 00000000 0x0 0x0
0xffff878000013480 0041 00000000 0x0 0x0
0xffff878000013500 0041 00000000 0x0 0x0
0xffff878000013580 0041 00000000 0x0 0x0
0xffff878000013600 0041 00000000 0x0 0x0
0xffff878000013680 0041 00000000 0x0 0x0
0xffff878000013700 0041 00000000 0x0 0x0
0xffff878000013780 0041 00000000 0x0 0x0
0xffff878000013800 0041 00000000 0x0 0x0
0xffff878000013880 0041 00000000 0x0 0x0
0xffff878000013900 0041 00000000 0x0 0x0
0xffff878000013980 0041 00000000 0x0 0x0
0xffff878000013a00 0041 00000000 0x0 0x0
0xffff878000013a80 0041 00000000 0x0 0x0
0xffff878000013b00 0041 00000000 0x0 0x0
0xffff878000013b80 0041 00000000 0x0 0x0
0xffff878000013c00 0041 00000000 0x0 0x0
0xffff878000013c80 0041 00000000 0x0 0x0
0xffff878000013d00 0041 00000000 0x0 0x0
0xffff878000013d80 0041 00000000 0x0 0x0
0xffff878000013e00 0041 00000000 0x0 0x0
0xffff878000013e80 0041 00000000 0x0 0x0
0xffff878000013f00 0041 00000000 0x0 0x0
0xffff878000013f80 0041 00000000 0x0 0x0
0xffff878000014000 0041 00000000 0x0 0x0
0xffff878000014080 0041 00000000 0x0 0x0
0xffff878000014100 0041 00000000 0x0 0x0
0xffff878000014180 0041 00000000 0x0 0x0
0xffff878000014200 0041 00000000 0x0 0x0
0xffff878000014280 0041 00000000 0x0 0x0
0xffff878000014300 0041 00000000 0x0 0x0
0xffff878000014380 0041 00000000 0x0 0x0
0xffff878000014400 0041 00000000 0x0 0x0
0xffff878000014480 0041 00000000 0x0 0x0
0xffff878000014500 0041 00000000 0x0 0x0
0xffff878000014580 0041 00000000 0x0 0x0
0xffff878000014600 0041 00000000 0x0 0x0
0xffff878000014680 0041 00000000 0x0 0x0
0xffff878000014700 0041 00000000 0x0 0x0
0xffff878000014780 0041 00000000 0x0 0x0
0xffff878000014800 0041 00000000 0x0 0x0
0xffff878000014880 0001 00000000 0x0 0x0
0xffff878000014900 0001 00000000 0x0 0x0
0xffff878000014980 0001 00000000 0x0 0x0
0xffff878000014a00 0001 00000000 0x0 0x0
0xffff878000014a80 0001 00000000 0x0 0x0
0xffff878000014b00 0001 00000000 0x0 0x0
0xffff878000014b80 0001 00000000 0x0 0x0
0xffff878000014c00 0001 00000000 0x0 0x0
0xffff878000014c80 0001 00000000 0x0 0x0
0xffff878000014d00 0001 00000000 0x0 0x0
0xffff878000014d80 0001 00000000 0x0 0x0
0xffff878000014e00 0001 00000000 0x0 0x0
0xffff878000014e80 0001 00000000 0x0 0x0
0xffff878000014f00 0001 00000000 0x0 0x0
0xffff878000014f80 0001 00000000 0x0 0x0
0xffff878000015000 0001 00000000 0x0 0x0
0xffff878000015080 0001 00000000 0x0 0x0
0xffff878000015100 0001 00000000 0x0 0x0
0xffff878000015180 0001 00000000 0x0 0x0
0xffff878000015200 0001 00000000 0x0 0x0
0xffff878000015280 0001 00000000 0x0 0x0
0xffff878000015300 0001 00000000 0x0 0x0
0xffff878000015380 0001 00000000 0x0 0x0
0xffff878000015400 0001 00000000 0x0 0x0
0xffff878000015480 0001 00000000 0x0 0x0
0xffff878000015500 0001 00000000 0x0 0x0
0xffff878000015580 0001 00000000 0x0 0x0
0xffff878000015600 0001 00000000 0x0 0x0
0xffff878000015680 0001 00000000 0x0 0x0
0xffff878000015700 0001 00000000 0x0 0x0
0xffff878000015780 0001 00000000 0x0 0x0
0xffff878000015800 0001 00000000 0x0 0x0
0xffff878000015880 0001 00000000 0x0 0x0
0xffff878000015900 0001 00000000 0x0 0x0
0xffff878000015980 0001 00000000 0x0 0x0
0xffff878000015a00 0001 00000000 0x0 0x0
0xffff878000015a80 0001 00000000 0x0 0x0
0xffff878000015b00 0001 00000000 0x0 0x0
0xffff878000015b80 0001 00000000 0x0 0x0
0xffff878000015c00 0001 00000000 0x0 0x0
0xffff878000015c80 0001 00000000 0x0 0x0
0xffff878000015d00 0001 00000000 0x0 0x0
0xffff878000015d80 0001 00000000 0x0 0x0
0xffff878000015e00 0001 00000000 0x0 0x0
0xffff878000015e80 0001 00000000 0x0 0x0
0xffff878000015f00 0001 00000000 0x0 0x0
0xffff878000015f80 0001 00000000 0x0 0x0
0xffff878000016000 0001 00000000 0x0 0x0
0xffff878000016080 0001 00000000 0x0 0x0
0xffff878000016100 0001 00000000 0x0 0x0
0xffff878000016180 0001 00000000 0x0 0x0
0xffff878000016200 0001 00000000 0x0 0x0
0xffff878000016280 0001 00000000 0x0 0x0
0xffff878000016300 0001 00000000 0x0 0x0
0xffff878000016380 0041 00000000 0x0 0x0
0xffff878000016400 0041 00000000 0x0 0x0
0xffff878000016480 0041 00000000 0x0 0x0
0xffff878000016500 0041 00000000 0x0 0x0
0xffff878000016580 0041 00000000 0x0 0x0
0xffff878000016600 0041 00000000 0x0 0x0
0xffff878000016680 0041 00000000 0x0 0x0
0xffff878000016700 0041 00000000 0x0 0x0
0xffff878000016780 0041 00000000 0x0 0x0
0xffff878000016800 0041 00000000 0x0 0x0
0xffff878000016880 0041 00000000 0x0 0x0
0xffff878000016900 0041 00000000 0x0 0x0
0xffff878000016980 0041 00000000 0x0 0x0
0xffff878000016a00 0041 00000000 0x0 0x0
0xffff878000016a80 0041 00000000 0x0 0x0
0xffff878000016b00 0041 00000000 0x0 0x0
0xffff878000016b80 0041 00000000 0x0 0x0
0xffff878000016c00 0041 00000000 0x0 0x0
0xffff878000016c80 0041 00000000 0x0 0x0
0xffff878000016d00 0041 00000000 0x0 0x0
0xffff878000016d80 0041 00000000 0x0 0x0
0xffff878000016e00 0041 00000000 0x0 0x0
0xffff878000016e80 0041 00000000 0x0 0x0
0xffff878000016f00 0041 00000000 0x0 0x0
0xffff878000016f80 0041 00000000 0x0 0x0
0xffff878000017000 0041 00000000 0x0 0x0
0xffff878000017080 0041 00000000 0x0 0x0
0xffff878000017100 0041 00000000 0x0 0x0
0xffff878000017180 0041 00000000 0x0 0x0
0xffff878000017200 0041 00000000 0x0 0x0
0xffff878000017280 0041 00000000 0x0 0x0
0xffff878000017300 0041 00000000 0x0 0x0
0xffff878000017380 0041 00000000 0x0 0x0
0xffff878000017400 0041 00000000 0x0 0x0
0xffff878000017480 0041 00000000 0x0 0x0
0xffff878000017500 0041 00000000 0x0 0x0
0xffff878000017580 0041 00000000 0x0 0x0
0xffff878000017600 0045 00000000 0x0 0x0
0xffff878000017680 0041 00000000 0x0 0x0
0xffff878000017700 0041 00000000 0x0 0x0
0xffff878000017780 0041 00000000 0x0 0x0
0xffff878000017800 0041 00000000 0x0 0x0
0xffff878000017880 0001 00000000 0x0 0x0
0xffff878000017900 0001 00000000 0x0 0x0
0xffff878000017980 0001 00000000 0x0 0x0
0xffff878000017a00 0001 00000000 0x0 0x0
0xffff878000017a80 0001 00000000 0x0 0x0
0xffff878000017b00 0001 00000000 0x0 0x0
0xffff878000017b80 0001 00000000 0x0 0x0
0xffff878000017c00 0001 00000000 0x0 0x0
0xffff878000017c80 0001 00000000 0x0 0x0
0xffff878000017d00 0001 00000000 0x0 0x0
0xffff878000017d80 0001 00000000 0x0 0x0
0xffff878000017e00 0001 00000000 0x0 0x0
0xffff878000017e80 0001 00000000 0x0 0x0
0xffff878000017f00 0001 00000000 0x0 0x0
0xffff878000017f80 0001 00000000 0x0 0x0
0xffff878000018000 0001 00000000 0x0 0x0
0xffff878000018080 0001 00000000 0x0 0x0
0xffff878000018100 0001 00000000 0x0 0x0
0xffff878000018180 0001 00000000 0x0 0x0
0xffff878000018200 0001 00000000 0x0 0x0
0xffff878000018280 0001 00000000 0x0 0x0
0xffff878000018300 0001 00000000 0x0 0x0
0xffff878000018380 0001 00000000 0x0 0x0
0xffff878000018400 0001 00000000 0x0 0x0
0xffff878000018480 0001 00000000 0x0 0x0
0xffff878000018500 0001 00000000 0x0 0x0
0xffff878000018580 0001 00000000 0x0 0x0
0xffff878000018600 0001 00000000 0x0 0x0
0xffff878000018680 0001 00000000 0x0 0x0
0xffff878000018700 0001 00000000 0x0 0x0
0xffff878000018780 0001 00000000 0x0 0x0
0xffff878000018800 0001 00000000 0x0 0x0
0xffff878000018880 0001 00000000 0x0 0x0
0xffff878000018900 0001 00000000 0x0 0x0
0xffff878000018980 0001 00000000 0x0 0x0
0xffff878000018a00 0001 00000000 0x0 0x0
0xffff878000018a80 0001 00000000 0x0 0x0
0xffff878000018b00 0001 00000000 0x0 0x0
0xffff878000018b80 0001 00000000 0x0 0x0
0xffff878000018c00 0001 00000000 0x0 0x0
0xffff878000018c80 0001 00000000 0x0 0x0
0xffff878000018d00 0001 00000000 0x0 0x0
0xffff878000018d80 0001 00000000 0x0 0x0
0xffff878000018e00 0001 00000000 0x0 0x0
0xffff878000018e80 0001 00000000 0x0 0x0
0xffff878000018f00 0001 00000000 0x0 0x0
0xffff878000018f80 0001 00000000 0x0 0x0
0xffff878000019000 0001 00000000 0x0 0x0
0xffff878000019080 0001 00000000 0x0 0x0
0xffff878000019100 0001 00000000 0x0 0x0
0xffff878000019180 0001 00000000 0x0 0x0
0xffff878000019200 0001 00000000 0x0 0x0
0xffff878000019280 0001 00000000 0x0 0x0
0xffff878000019300 0001 00000000 0x0 0x0
0xffff878000019380 0041 00000000 0x0 0x0
0xffff878000019400 0041 00000000 0x0 0x0
0xffff878000019480 0041 00000000 0x0 0x0
0xffff878000019500 0041 00000000 0x0 0x0
0xffff878000019580 0041 00000000 0x0 0x0
0xffff878000019600 0045 00000000 0x0 0x0
0xffff878000019680 0045 00000000 0x0 0x0
0xffff878000019700 0041 00000000 0x0 0x0
0xffff878000019780 0041 00000000 0x0 0x0
0xffff878000019800 0041 00000000 0x0 0x0
0xffff878000019880 0041 00000000 0x0 0x0
0xffff878000019900 0041 00000000 0x0 0x0
0xffff878000019980 0041 00000000 0x0 0x0
0xffff878000019a00 0045 00000000 0x0 0x0
0xffff878000019a80 0045 00000000 0x0 0x0
0xffff878000019b00 0041 00000000 0x0 0x0
0xffff878000019b80 0041 00000000 0x0 0x0
0xffff878000019c00 0041 00000000 0x0 0x0
0xffff878000019c80 0041 00000000 0x0 0x0
0xffff878000019d00 0041 00000000 0x0 0x0
0xffff878000019d80 0041 00000000 0x0 0x0
0xffff878000019e00 0045 00000000 0x0 0x0
0xffff878000019e80 0045 00000000 0x0 0x0
0xffff878000019f00 0041 00000000 0x0 0x0
0xffff878000019f80 0045 00000000 0x0 0x0
0xffff87800001a000 0041 00000000 0x0 0x0
0xffff87800001a080 0041 00000000 0x0 0x0
0xffff87800001a100 0041 00000000 0x0 0x0
0xffff87800001a180 0045 00000000 0x0 0x0
0xffff87800001a200 0045 00000000 0x0 0x0
0xffff87800001a280 0045 00000000 0x0 0x0
0xffff87800001a300 0041 00000000 0x0 0x0
0xffff87800001a380 0045 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Aug 3, 2020, 2:53:19 PM8/3/20

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 300c0bac Fix a problem in which a fault occured in an inte..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=16eeb88c900000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=c5eb9076c0f5e888905b
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=131bac2a900000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=135d5c2a900000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+c5eb90...@syzkaller.appspotmail.com

[ 50.6018843] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/uvm/uvm_page.c:2083:34, member access within misaligned address 0xdeadbeef for type 'struct uvm_object' which requires 8 byte alignment

[ 50.6218603] cpu1: Begin traceback...
[ 50.6518614] vpanic() at netbsd:vpanic+0x2d3 sys/kern/subr_prf.c:290
[ 50.7318662] isAlreadyReported() at netbsd:isAlreadyReported
[ 50.8118646] HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xae
[ 50.8918667] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x63 sys/../common/lib/libc/misc/ubsan.c:434
[ 50.9618668] uvm_page_owner_locked_p() at netbsd:uvm_page_owner_locked_p+0x1ef sys/uvm/uvm_page.c:2083
[ 51.0418683] uvm_pageunwire() at netbsd:uvm_pageunwire+0x1c sys/uvm/uvm_page.c:1841
[ 51.1218717] uvm_fault_unwire_locked() at netbsd:uvm_fault_unwire_locked+0x399 sys/uvm/uvm_fault.c:2723
[ 51.1918705] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 uvm_map_entry_unwire sys/uvm/uvm_map.c:872 [inline]
[ 51.1918705] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 sys/uvm/uvm_map.c:2222
[ 51.2718740] uvm_map_enter() at netbsd:uvm_map_enter+0x264 sys/uvm/uvm_map.c:1336
[ 51.3418716] uvm_map() at netbsd:uvm_map+0x1bd sys/uvm/uvm_map.c:1099
[ 51.4318762] uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3a6
[ 51.5118775] sys_mmap() at netbsd:sys_mmap+0x8f8 uvm_mmap sys/uvm/uvm_mmap.c:401 [inline]
[ 51.5118775] sys_mmap() at netbsd:sys_mmap+0x8f8 sys/uvm/uvm_mmap.c:401
[ 51.5818779] sys_syscall() at netbsd:sys_syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[ 51.5818779] sys_syscall() at netbsd:sys_syscall+0x1cf sys/kern/sys_syscall.c:77
[ 51.6618781] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 51.6618781] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 51.6618781] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 51.6818826] --- syscall (number 0) ---
[ 51.7018789] netbsd:syscall+0x2d5:
[ 51.7118805] cpu1: End traceback...
[ 51.7118805] fatal breakpoint trap in supervisor mode
[ 51.7118805] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x20000080 ilevel 0 rsp 0xffffc780bf394580
[ 51.7218788] curlwp 0xffff801dfd9e14c0 pid 1077.1109 lowest kstack 0xffffc780bf3902c0
Stopped in pid 1077.1109 (syz-executor2932) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2d3 sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xae
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x63 sys/../common/lib/libc/misc/ubsan.c:434
uvm_page_owner_locked_p() at netbsd:uvm_page_owner_locked_p+0x1ef sys/uvm/uvm_page.c:2083
uvm_pageunwire() at netbsd:uvm_pageunwire+0x1c sys/uvm/uvm_page.c:1841
uvm_fault_unwire_locked() at netbsd:uvm_fault_unwire_locked+0x399 sys/uvm/uvm_fault.c:2723
uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 uvm_map_entry_unwire sys/uvm/uvm_map.c:872 [inline]
uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x796 sys/uvm/uvm_map.c:2222
uvm_map_enter() at netbsd:uvm_map_enter+0x264 sys/uvm/uvm_map.c:1336
uvm_map() at netbsd:uvm_map+0x1bd sys/uvm/uvm_map.c:1099
uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3a6
sys_mmap() at netbsd:sys_mmap+0x8f8 uvm_mmap sys/uvm/uvm_mmap.c:401 [inline]
sys_mmap() at netbsd:sys_mmap+0x8f8 sys/uvm/uvm_mmap.c:401

sys_syscall() at netbsd:sys_syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys_syscall() at netbsd:sys_syscall+0x1cf sys/kern/sys_syscall.c:77

syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---

netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/uvm/uvm_page.c:2083:34, member access within misaligned address 0xdeadbeef for type 'struct uvm_object' which requires 8 byte alignment

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1078 1078 2 0 0 ffff801dffdd6980 syz-executor2932
1097 1072 2 0 0 ffff801dffe7c580 syz-executor2932
1097 1097 2 0 10000000 ffff801dffdd6540 syz-executor2932
418 418 2 0 0 ffff801dffdd6100 syz-executor2932
1077 1083 2 0 0 ffff801dffe7c140 syz-executor2932
1077 >1109 7 1 0 ffff801dfd9e14c0 syz-executor2932
1077 1077 2 1 10000000 ffff801dfe486bc0 syz-executor2932
1082 1071 3 1 80 ffff801dfd07b640 syz-executor2932 parked
1082 1082 2 1 10000000 ffff801dfe7b1040 syz-executor2932
1067 1067 2 1 40 ffff801dfd70e2c0 syz-executor2932
1092 1092 2 1 40 ffff801dfe486780 syz-executor2932
1100 1079 2 0 0 ffff801dfe7b1480 syz-executor2932
1100 1100 2 0 10000000 ffff801dfce4e5c0 syz-executor2932
1076 1076 2 0 40 ffff801dfd333ac0 syz-executor2932
1249 1249 2 0 40 ffff801dff1d70c0 syz-executor2932
1068 1068 2 0 40 ffff801dfd07ba80 syz-executor2932
942 942 2 1 40 ffff801dfd333240 syz-executor2932
1253 1253 3 0 80 ffff801dff1d7940 syz-executor2932 nanoslp
1250 1250 2 1 0 ffff801dfd07b200 sshd
1110 1110 3 1 80 ffff801dfd9e1080 getty nanoslp
1105 1105 3 1 80 ffff801dfd9e1900 getty nanoslp
1057 1057 3 1 80 ffff801dfd83c740 getty nanoslp
1088 1088 3 1 c0 ffff801dfd5526c0 getty ttyraw
941 941 3 1 80 ffff801dff1d7500 sshd select
979 979 3 1 80 ffff801dfe7b18c0 powerd kqueue
734 734 3 0 80 ffff801dfe486340 syslogd kqueue
592 592 3 0 80 ffff801dfd83cb80 dhcpcd poll
590 590 3 1 80 ffff801dfd70e700 dhcpcd poll
589 589 3 0 80 ffff801dfd333680 dhcpcd poll
412 412 3 0 80 ffff801dfd552280 dhcpcd poll
347 347 3 0 80 ffff801dfd83c300 dhcpcd poll
346 346 3 1 80 ffff801dfd70eb40 dhcpcd poll
345 345 3 1 80 ffff801dfd552b00 dhcpcd poll
1 1 3 0 80 ffff801df4cb2940 init wait
0 860 3 0 200 ffff801dfce4ea00 physiod physiod
0 165 3 0 200 ffff801dfcecea40 pooldrain pooldrain
0 164 2 0 240 ffff801dfcece600 ioflush
0 163 3 1 200 ffff801dfcece1c0 pgdaemon pgdaemon
0 160 3 1 200 ffff801dfce4e180 usb7 usbevt
0 31 3 1 200 ffff801df9e019c0 usb6 usbevt
0 63 3 1 200 ffff801df9e01580 usb5 usbevt
0 126 3 0 200 ffff801df9e01140 usb4 usbevt
0 125 3 1 200 ffff801df6d72980 usb3 usbevt
0 124 3 0 200 ffff801df6d72540 usb2 usbevt
0 123 3 1 200 ffff801df6d72100 usb1 usbevt
0 122 3 0 200 ffff801df4598b00 usb0 usbevt
0 121 3 1 200 ffff801df4c092c0 usbtask-dr usbtsk
0 120 3 0 200 ffff801df4c09700 usbtask-hc usbtsk
0 119 3 0 200 ffff801df214aac0 npfgc0 npfgcw
0 118 3 1 200 ffff801df4cb2500 rt_free rt_free
0 117 3 1 200 ffff801df4cb20c0 unpgc unpgc
0 116 3 0 200 ffff801df4cbd900 key_timehandler key_timehandler
0 115 3 1 200 ffff801df4cbd4c0 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffff801df4cbd080 icmp6_wqinput/0 icmp6_wqinput
0 113 3 0 200 ffff801df4c988c0 nd6_timer nd6_timer
0 112 3 1 200 ffff801df4c98480 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffff801df4c98040 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffff801df4c63bc0 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffff801df4c63780 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffff801df4c63340 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffff801df4c0fb80 icmp_wqinput/0 icmp_wqinput
0 106 3 0 200 ffff801df4c0f740 rt_timer rt_timer
0 105 3 0 200 ffff801df4c0f300 vmem_rehash vmem_rehash
0 104 3 0 200 ffff801df4c09b40 entbutler entropy
0 30 3 1 200 ffff801df45986c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffff801df4598280 vioif0_txrx/0 vioif0_txrx
0 27 3 1 200 ffff801df214a680 scsibus0 sccomp
0 26 3 0 200 ffff801df214a240 pms0 pmsreset
0 25 3 1 200 ffff801df207ca80 xcall/1 xcall
0 24 1 1 200 ffff801df207c640 softser/1
0 23 1 1 200 ffff801df207c200 softclk/1
0 22 1 1 200 ffff801df204fa40 softbio/1
0 21 1 1 200 ffff801df204f600 softnet/1
0 20 1 1 201 ffff801df204f1c0 idle/1
0 19 3 1 200 ffff801f01f8fa00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffff801f01f8f5c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffff801f01f8f180 lnxsyswq lnxsyswq
0 16 3 1 200 ffff801f01f9c9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff801f01f9c580 sysmon smtaskq
0 14 3 1 200 ffff801f01f9c140 pmfsuspend pmfsuspend
0 13 3 0 200 ffff801f01fb9980 pmfevent pmfevent
0 12 3 1 200 ffff801f01fb9540 sopendfree sopendfr
0 11 3 0 200 ffff801f01fb9100 iflnkst iflnkst
0 10 3 1 200 ffff801f02fd8940 nfssilly nfssilly
0 9 3 0 200 ffff801f02fd8500 vdrain vdrain
0 8 3 1 200 ffff801f02fd80c0 modunload mod_unld
0 7 3 0 200 ffff801f03013900 xcall/0 xcall
0 6 1 0 200 ffff801f030134c0 softser/0
0 5 1 0 200 ffff801f03013080 softclk/0
0 4 1 0 200 ffff801f0303d8c0 softbio/0
0 3 1 0 200 ffff801f0303d480 softnet/0
0 2 1 0 201 ffff801f0303d040 idle/0
0 > 0 7 0 240 ffffffff85efc100 swapper
[Locks tracked through LWPs]

****** LWP 1078.1078 (syz-executor2932) @ 0xffff801dffdd6980, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffff801dfd42b380 type : sleep/adaptive

initialized : 0xffffffff80f84ea3
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffff801dffdd6980 last held: 000000000000000000

last locked : 0xffffffff80f87557 unlocked*: 0xffffffff80f87c4c

owner field : 0xffff801dffdd6980 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 418.418 (syz-executor2932) @ 0xffff801dffdd6100, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at genfs_node_init)
lock address : 0xffff801dfcfc1048 type : sleep/adaptive
initialized : 0xffffffff8354bba5

shared holds : 0 exclusive: 0

shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 65535
relevant lwp : 0xffff801dffdd6100 last held: 000000000000000000
last locked : 0xffffffff83538a74 unlocked*: 0xffffffff83539f15

owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1077.1109 (syz-executor2932) @ 0xffff801dfd9e14c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at uvm_map_setup)

lock address : 0xffff801dfe47e9f8 type : sleep/adaptive

initialized : 0xffffffff8313673c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff801dfd9e14c0 last held: 0xffff801dfd9e14c0
last locked* : 0xffffffff83128d1d unlocked : 0xffffffff831113f2
owner/count : 0xffff801dfd9e14c0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at uvm_obj_init)

lock address : 0xffff801dfd3c3e80 type : sleep/adaptive

initialized : 0xffffffff8314ddee
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff801dfd9e14c0 last held: 0xffff801dfd9e14c0

last locked* : 0xffffffff83136dfc unlocked : 0xffffffff83136f7c

owner/count : 0xffff801dfd9e14c0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 590.590 (dhcpcd) @ 0xffff801dfd70e700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862fc900 type : sleep/adaptive
initialized : 0xffffffff8323ba50
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff801dfd70e700 last held: 000000000000000000