assert failed: nmp == NULL || nmp == mp

0 views

Skip to first unread message

syzbot

unread,

Mar 10, 2021, 11:07:19 PM3/10/21

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 59ee1e30 make(1): replace global preserveUndefined with VA..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=174f242ad00000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=0f384db774babe002120
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0f384d...@syzkaller.appspotmail.com

[ 327.7858278] panic: kernel diagnostic assertion "nmp == NULL || nmp == mp" failed: file "/syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c", line 271
[ 327.7957851] cpu1: Begin traceback...
[ 327.8657901] vpanic() at netbsd:vpanic+0x265 syzkaller/managers/netbsd/kernel/sys/kern/subr_prf.c:290
[ 327.9957894] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 328.1257903] mountd_set_exports_list() at netbsd:mountd_set_exports_list+0x284 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:272
[ 328.2657900] nfs_export_update_30() at netbsd:nfs_export_update_30+0xe8 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:458
[ 328.3957878] vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 syzkaller/managers/netbsd/kernel/sys/kern/vfs_hooks.c:138
[ 328.5257909] do_sys_mount() at netbsd:do_sys_mount+0xbdf mount_update syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:334 [inline]
[ 328.5257909] do_sys_mount() at netbsd:do_sys_mount+0xbdf syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:548
[ 328.6457916] compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd syzkaller/managers/netbsd/kernel/sys/compat/common/vfs_syscalls_40.c:88
[ 328.7757901] sys___syscall() at netbsd:sys___syscall+0xff sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
[ 328.7757901] sys___syscall() at netbsd:sys___syscall+0xff syzkaller/managers/netbsd/kernel/sys/kern/sys_syscall.c:77
[ 328.9057932] syscall() at netbsd:syscall+0x259 sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
[ 328.9057932] syscall() at netbsd:syscall+0x259 sy_invoke syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:94 [inline]
[ 328.9057932] syscall() at netbsd:syscall+0x259 syzkaller/managers/netbsd/kernel/sys/arch/x86/x86/syscall.c:138
[ 328.9357936] --- syscall (number 198) ---
[ 328.9757991] netbsd:syscall+0x259:
[ 328.9757991] cpu1: End traceback...
[ 328.9757991] fatal breakpoint trap in supervisor mode
[ 328.9857885] trap type 1 code 0 rip 0xffffffff80220a2d cs 0x8 rflags 0x282 cr2 0x710269d6f410 ilevel 0 rsp 0xffffac01a9e27770
[ 328.9957899] curlwp 0xffffac001481b700 pid 3363.3231 lowest kstack 0xffffac01a9e202c0
Stopped in pid 3363.3231 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 syzkaller/managers/netbsd/kernel/sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x265 syzkaller/managers/netbsd/kernel/sys/kern/subr_prf.c:290
_GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
mountd_set_exports_list() at netbsd:mountd_set_exports_list+0x284 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:272
nfs_export_update_30() at netbsd:nfs_export_update_30+0xe8 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:458
vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 syzkaller/managers/netbsd/kernel/sys/kern/vfs_hooks.c:138
do_sys_mount() at netbsd:do_sys_mount+0xbdf mount_update syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:334 [inline]
do_sys_mount() at netbsd:do_sys_mount+0xbdf syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:548
compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd syzkaller/managers/netbsd/kernel/sys/compat/common/vfs_syscalls_40.c:88
sys___syscall() at netbsd:sys___syscall+0xff sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0xff syzkaller/managers/netbsd/kernel/sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x259 sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x259 sy_invoke syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x259 syzkaller/managers/netbsd/kernel/sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x259:
Panic string: kernel diagnostic assertion "nmp == NULL || nmp == mp" failed: file "/syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c", line 271
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
8146 6063 2 0 0 ffffac00136ed340 syz-executor.4
8146 7856 2 0 0 ffffac0013c88040 syz-executor.4
8146 8146 2 0 10000000 ffffac0013d0d280 syz-executor.4
3323 4199 2 0 0 ffffac001552fa40 syz-executor.2
3323 4170 2 0 0 ffffac001481bb40 syz-executor.2
3323 3323 2 0 10000000 ffffac0013c02240 syz-executor.2
3468 7893 2 0 0 ffffac0013ca8500 syz-executor.0
3468 3296 2 0 0 ffffac0013ce5a40 syz-executor.0
3468 3319 2 0 0 ffffac0013ba4140 syz-executor.0
3468 4315 2 0 0 ffffac001530e6c0 syz-executor.0
3468 3468 2 0 10000000 ffffac001398eb00 syz-executor.0
8550 7736 3 0 180 ffffac0015724900 syz-executor.5 parked
8550 8550 2 0 10000000 ffffac00139f82c0 syz-executor.5
3363 >3231 7 1 100 ffffac001481b700 syz-executor.1
3363 3316 2 1 100 ffffac00157480c0 syz-executor.1
3363 3363 2 1 10000000 ffffac0015593640 syz-executor.1
8678 8035 3 1 180 ffffac00152e1240 syz-executor.3 parked
8678 3933 3 0 180 ffffac0013ab34c0 syz-executor.3 parked
8678 8678 2 1 10000140 ffffac0013c70780 syz-executor.3
7653 7653 3 0 180 ffffac00136ec740 syz-executor.4 parked
7258 7258 3 1 180 ffffac00147cda40 syz-executor.4 parked
3639 3639 3 0 180 ffffac0013c49b40 syz-executor.2 parked
2849 2849 3 1 180 ffffac00151535c0 syz-executor.1 parked
2856 2856 3 0 180 ffffac0013c99900 syz-executor.1 parked
1693 1693 3 0 180 ffffac001487f4c0 syz-executor.4 parked
5563 5563 3 1 180 ffffac0015693340 syz-executor.5 parked
1519 1519 3 1 180 ffffac001487f900 syz-executor.4 parked
6371 6371 3 1 180 ffffac00155d56c0 syz-executor.5 parked
1523 1523 3 0 180 ffffac0013c492c0 syz-executor.5 parked
1528 1528 3 0 180 ffffac00153d38c0 syz-executor.4 parked
1518 1518 3 1 180 ffffac0013d1c2c0 syz-executor.4 parked
6094 6094 3 0 180 ffffac0013cff680 syz-executor.4 parked
1586 1586 3 1 180 ffffac0014754580 syz-executor.1 parked
6355 6355 3 1 180 ffffac0013c59300 syz-executor.1 parked
1165 1165 3 1 180 ffffac0013d2d300 syz-executor.1 parked
1178 1178 3 1 180 ffffac0015342b40 syz-executor.1 parked
764 764 3 0 180 ffffac00148758c0 syz-executor.2 parked
747 747 3 0 180 ffffac00155d5280 syz-executor.2 parked
5458 5458 3 0 180 ffffac0013b6e980 syz-executor.2 parked
1624 1624 3 0 180 ffffac0014738540 syz-executor.2 parked
4529 4529 3 0 180 ffffac001551c5c0 syz-executor.0 parked
661 661 3 0 180 ffffac0013ce51c0 syz-executor.2 parked
643 643 3 1 180 ffffac0013d1cb40 syz-executor.0 parked
648 648 3 0 180 ffffac00153d0780 syz-executor.2 parked
5037 5037 3 0 180 ffffac00136e9b40 syz-executor.2 parked
505 505 3 1 180 ffffac00154b8940 syz-executor.2 parked
501 501 3 1 180 ffffac0013ba49c0 syz-executor.2 parked
1452 1452 3 0 180 ffffac0013ce5600 syz-executor.2 parked
401 401 3 1 180 ffffac0013d7b040 syz-executor.2 parked
393 393 3 0 180 ffffac001530eb00 syz-executor.1 parked
386 386 3 0 180 ffffac00154ee9c0 syz-executor.5 parked
4789 4789 3 1 180 ffffac00139f8700 syz-executor.1 parked
4039 4039 3 1 180 ffffac00154d1980 syz-executor.2 parked
4836 4836 3 0 180 ffffac0013ab3080 syz-executor.1 parked
4686 4686 3 0 180 ffffac001545b4c0 syz-executor.5 parked
4393 4393 3 1 180 ffffac0013b6e540 syz-executor.5 parked
4677 4677 3 0 180 ffffac0013cf1a80 syz-executor.5 parked
3889 3889 3 0 180 ffffac001485d740 syz-executor.1 parked
3268 3268 3 0 180 ffffac0014802b00 syz-executor.5 parked
2990 2990 3 0 180 ffffac00148b29c0 syz-executor.5 parked
2618 2618 3 1 180 ffffac00153d3040 syz-executor.0 parked
2505 2505 3 1 180 ffffac00153d0bc0 syz-executor.0 parked
2607 2607 3 0 180 ffffac0013a928c0 syz-executor.0 parked
2391 2391 3 0 180 ffffac0013dcc940 syz-executor.0 parked
328 328 3 0 180 ffffac0015358300 syz-executor.5 parked
1240 1240 3 0 180 ffffac0015342700 syz-executor.5 parked
1099 1099 2 1 140 ffffac00151ef640 syz-executor.5
938 > 938 7 0 40 ffffac00151ef200 syz-executor.4
989 989 2 1 140 ffffac00151cba40 syz-executor.3
1226 1226 2 1 140 ffffac00151cb600 syz-executor.2
422 422 2 1 140 ffffac00151cb1c0 syz-executor.1
1052 1052 2 0 140 ffffac0015153a00 syz-executor.0
1115 1191 3 1 180 ffffac0013bdb600 syz-fuzzer parked
1115 1222 3 0 180 ffffac0015153180 syz-fuzzer parked
1115 1113 3 0 180 ffffac0013c70bc0 syz-fuzzer parked
1115 1078 3 1 180 ffffac0014869bc0 syz-fuzzer parked
1115 1188 2 1 140 ffffac0014875040 syz-fuzzer
1115 1104 3 1 1c0 ffffac0014887940 syz-fuzzer parked
1115 1086 3 0 180 ffffac0013b6e100 syz-fuzzer parked
1115 1081 2 1 140 ffffac0013b54940 syz-fuzzer
1115 1115 3 1 180 ffffac0013bbf180 syz-fuzzer parked
1255 1255 3 1 180 ffffac0013bdb1c0 sshd select
1084 1084 3 0 180 ffffac0013a4c340 getty nanoslp
1068 1068 3 1 180 ffffac0013a92480 getty nanoslp
1075 1075 3 0 180 ffffac0013b54500 getty nanoslp
1256 1256 3 1 1c0 ffffac00147b8a00 getty ttyraw
951 951 3 1 180 ffffac00147ebac0 sshd select
933 933 3 0 180 ffffac0014738100 powerd kqueue
690 690 3 1 180 ffffac0014802280 syslogd kqueue
596 596 3 1 180 ffffac0013c888c0 dhcpcd poll
737 737 3 1 180 ffffac0013cba980 dhcpcd poll
598 598 3 0 180 ffffac0013c88480 dhcpcd poll
589 589 3 1 180 ffffac0013c59740 dhcpcd poll
482 482 3 1 180 ffffac0013d94900 dhcpcd poll
288 288 3 1 180 ffffac0013d944c0 dhcpcd poll
351 351 3 1 180 ffffac0013d94080 dhcpcd poll
1 1 3 0 180 ffffac001385c140 init wait
0 3170 5 1 600 ffffac00151efa80 (zombie)
0 895 3 0 200 ffffac001398c240 physiod physiod
0 192 3 0 200 ffffac001398e280 pooldrain pooldrain
0 163 2 1 240 ffffac001398cac0 ioflush
0 168 3 1 200 ffffac001398c680 pgdaemon pgdaemon
0 162 3 1 200 ffffac0013959640 usb7 usbevt
0 161 3 1 200 ffffac0013959200 usb6 usbevt
0 31 3 0 200 ffffac001390ba40 usb5 usbevt
0 63 3 0 200 ffffac001390b600 usb4 usbevt
0 126 3 0 200 ffffac001390b1c0 usb3 usbevt
0 125 3 1 200 ffffac00138b9a00 usb2 usbevt
0 124 3 0 200 ffffac00138b95c0 usb1 usbevt
0 123 3 0 200 ffffac00138b9180 usb0 usbevt
0 122 3 1 200 ffffac001385c9c0 usbtask-dr usbtsk
0 121 3 1 200 ffffac0010dbbac0 usbtask-hc usbtsk
0 120 3 1 200 ffffac001385c580 npfgc0 npfgcw
0 119 3 1 200 ffffac001384c980 rt_free rt_free
0 118 3 1 200 ffffac001384c540 unpgc unpgc
0 117 2 1 200 ffffac001384c100 key_timehandler
0 116 3 1 200 ffffac001371b940 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffffac001371b500 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffffac001371b0c0 nd6_timer nd6_timer
0 113 3 1 200 ffffac0013711900 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffffac00137114c0 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffffac0013711080 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffffac00137008c0 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffffac0013700480 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffffac0013700040 icmp_wqinput/0 icmp_wqinput
0 107 2 1 200 ffffac00136edbc0 rt_timer
0 106 3 1 200 ffffac00136ed780 vmem_rehash vmem_rehash
0 105 3 1 200 ffffac00136ecb80 entbutler entropy
0 96 3 1 200 ffffac00130c0b00 viomb balloon
0 30 3 1 200 ffffac00130c06c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffac00130c0280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffac0010dbb680 scsibus0 sccomp
0 26 3 0 200 ffffac0010dbb240 pms0 pmsreset
0 25 3 1 200 ffffac0010d0ea80 xcall/1 xcall
0 24 1 1 200 ffffac0010d0e640 softser/1
0 23 1 1 200 ffffac0010d0e200 softclk/1
0 22 1 1 200 ffffac0010d0ca40 softbio/1
0 21 1 1 200 ffffac0010d0c600 softnet/1
0 20 1 1 201 ffffac0010d0c1c0 idle/1
0 19 3 0 200 ffffac000f77da00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffac000f77d5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffac000f77d180 lnxsyswq lnxsyswq
0 16 3 1 200 ffffac000f7759c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffac000f775580 sysmon smtaskq
0 14 3 0 200 ffffac000f775140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffac000f771980 pmfevent pmfevent
0 12 3 0 200 ffffac000f771540 sopendfree sopendfr
0 11 3 1 200 ffffac000f771100 iflnkst iflnkst
0 10 3 0 200 ffffac000f766940 nfssilly nfssilly
0 9 3 0 200 ffffac000f766500 vdrain vdrain
0 8 3 0 200 ffffac000f7660c0 modunload mod_unld
0 7 3 0 200 ffffac000f758900 xcall/0 xcall
0 6 1 0 200 ffffac000f7584c0 softser/0
0 5 1 0 200 ffffac000f758080 softclk/0
0 4 1 0 200 ffffac000f7568c0 softbio/0
0 3 1 0 200 ffffac000f756480 softnet/0
0 2 1 0 201 ffffac000f756040 idle/0
0 0 2 1 240 ffffffff82eee940 swapper
[Locks tracked through LWPs]

****** LWP 3323.3323 (syz-executor.2) @ 0xffffac0013c02240, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffac00147e5980 type : sleep/adaptive
initialized : 0xffffffff808d4c54
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac0013c02240 last held: 000000000000000000
last locked : 0xffffffff808d48ea unlocked*: 0xffffffff808d4967
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3468.3468 (syz-executor.0) @ 0xffffac001398eb00, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffac00150f8240 type : sleep/adaptive
initialized : 0xffffffff8182b7ab
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac001398eb00 last held: 0xffffac001398eb00
last locked* : 0xffffffff8183bf9d unlocked : 0xffffffff8183aa2f
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pool_init)
lock address : 0xffffffff8307c230 type : sleep/adaptive
initialized : 0xffffffff8198026f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac001398eb00 last held: 0xffffac001398eb00
last locked* : 0xffffffff81980f94 unlocked : 0xffffffff8198173b
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3363.3231 (syz-executor.1) @ 0xffffac001481b700, l_stat=7

*** Locks held:

* Lock 0 (initialized at fstrans_init)
lock address : 0xffffffff830009c0 type : sleep/adaptive
initialized : 0xffffffff81a56ddb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac001481b700 last held: 0xffffac001481b700
last locked* : 0xffffffff81a592ba unlocked : 0xffffffff81a4b3b1
owner field : 0xffffac001481b700 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vfs_mountalloc)
lock address : 0xffffac00156a8d00 type : sleep/adaptive
initialized : 0xffffffff81a3c2cf
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac001481b700 last held: 0xffffac001481b700
last locked* : 0xffffffff81a4b118 unlocked : 0xffffffff81a4b3a5
owner field : 0xffffac001481b700 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at vfsinit)
lock address : 0xffffffff831162c0 type : sleep/adaptive
initialized : 0xffffffff81a2ef22
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac001481b700 last held: 0xffffac001481b700
last locked* : 0xffffffff81a2e7be unlocked : 0xffffffff81a2e832
owner field : 0xffffac001481b700 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 3 (initialized at vcache_alloc)
lock address : 0xffffac0015798c80 type : sleep/adaptive
initialized : 0xffffffff81a5b250
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac001481b700 last held: 0xffffac001481b700
last locked* : 0xffffffff81a8df50 unlocked : 000000000000000000
owner/count : 0xffffac001481b700 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3363.3316 (syz-executor.1) @ 0xffffac00157480c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at vfs_mountalloc)
lock address : 0xffffac00156a8dc0 type : sleep/adaptive
initialized : 0xffffffff81a3c2cf
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffac00157480c0 last held: 0xffffac00157480c0
last locked* : 0xffffffff81a3f1c7 unlocked : 000000000000000000
owner field : 0xffffac00157480c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2849.2849 (syz-executor.1) @ 0xffffac00151535c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac00151535c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 2856.2856 (syz-executor.1) @ 0xffffac0013c99900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac0013c99900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 938.938 (syz-executor.4) @ 0xffffac00151ef200, l_stat=7

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffac001520e4c0 type : sleep/adaptive
initialized : 0xffffffff81a5b250
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac00151ef200 last held: 0xffffac00151ef200
last locked* : 0xffffffff81a8df50 unlocked : 0xffffffff81a8dfb2
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xffffac00155aa780 type : sleep/adaptive
initialized : 0xffffffff81a5b250
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac00151ef200 last held: 0xffffac00151ef200
last locked* : 0xffffffff81a8df50 unlocked : 000000000000000000
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 737.737 (dhcpcd) @ 0xffffac0013cba980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac0013cba980 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 598.598 (dhcpcd) @ 0xffffac0013c88480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac0013c88480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffffac0013d944c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac0013d944c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffffac0013d94080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac0013d94080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffac000f771100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffac000f771100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffac000f758080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac000f758080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)
lock address : 0xffffffff82ff67c0 type : spin
initialized : 0xffffffff81c8af44
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac00151ef200 last held: 0xffffac00151ef200
last locked* : 0xffffffff80268f3f unlocked : 0xffffffff81a7b4ad
curcpu holds : 0 wanted by: 000000000000000000

* Lock 1 (initialized at virtio_init_vq)
lock address : 0xffffac0010cbd9c0 type : spin
initialized : 0xffffffff81c0423b
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffac00151ef200 last held: 0xffffac00151ef200
last locked* : 0xffffffff81c05f55 unlocked : 0xffffffff81c05fde
owner field : 0x0000000000000600 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffac0000017180 0041 00000000 0x0 0x0
0xffffac0000017200 0041 00000000 0x0 0x0
0xffffac0000017280 0041 00000000 0x0 0x0
0xffffac0000017300 0041 00000000 0x0 0x0
0xffffac0000017380 0041 00000000 0x0 0x0
0xffffac0000017400 0041 00000000 0x0 0x0
0xffffac0000017480 0041 00000000 0x0 0x0
0xffffac0000017500 0041 00000000 0x0 0x0
0xffffac0000017580 0041 00000000 0x0 0x0
0xffffac0000017600 0041 00000000 0x0 0x0
0xffffac0000017680 0041 00000000 0x0 0x0
0xffffac0000017700 0041 00000000 0x0 0x0
0xffffac0000017780 0041 00000000 0x0 0x0
0xffffac0000017800 0041 00000000 0x0 0x0
0xffffac0000017880 0041 00000000 0x0 0x0
0xffffac0000017900 0041 00000000 0x0 0x0
0xffffac0000017980 0041 00000000 0x0 0x0
0xffffac0000017a00 0041 00000000 0x0 0x0
0xffffac0000017a80 0041 00000000 0x0 0x0
0xffffac0000017b00 0041 00000000 0x0 0x0
0xffffac0000017b80 0041 00000000 0x0 0x0
0xffffac0000017c00 0041 00000000 0x0 0x0
0xffffac0000017c80 0041 00000000 0x0 0x0
0xffffac0000017d00 0041 00000000 0x0 0x0
0xffffac0000017d80 0041 00000000 0x0 0x0
0xffffac0000017e00 0041 00000000 0x0 0x0
0xffffac0000017e80 0041 00000000 0x0 0x0
0xffffac0000017f00 0041 00000000 0x0 0x0
0xffffac0000017f80 0041 00000000 0x0 0x0
0xffffac0000018000 0041 00000000 0x0 0x0
0xffffac0000018080 0041 00000000 0x0 0x0
0xffffac0000018100 0041 00000000 0x0 0x0
0xffffac0000018180 0041 00000000 0x0 0x0
0xffffac0000018200 0041 00000000 0x0 0x0
0xffffac0000018280 0041 00000000 0x0 0x0
0xffffac0000018300 0041 00000000 0x0 0x0
0xffffac0000018380 0041 00000000 0x0 0x0
0xffffac0000018400 0041 00000000 0x0 0x0
0xffffac0000018480 0041 00000000 0x0 0x0
0xffffac0000018500 0041 00000000 0x0 0x0
0xffffac0000018580 0041 00000000 0x0 0x0
0xffffac0000018600 0041 00000000 0x0 0x0
0xffffac0000018680 0041 00000000 0x0 0x0
0xffffac0000018700 0041 00000000 0x0 0x0
0xffffac0000018780 0041 00000000 0x0 0x0
0xffffac0000018800 0041 00000000 0x0 0x0
0xffffac0000018880 0041 00000000 0x0 0x0
0xffffac0000018900 0041 00000000 0x0 0x0
0xffffac0000018980 0041 00000000 0x0 0x0
0xffffac0000018a00 0041 00000000 0x0 0x0
0xffffac0000018a80 0041 00000000 0x0 0x0
0xffffac0000018b00 0041 00000000 0x0 0x0
0xffffac0000018b80 0041 00000000 0x0 0x0
0xffffac0000018c00 0041 00000000 0x0 0x0
0xffffac0000018c80 0041 00000000 0x0 0x0
0xffffac0000018d00 0041 00000000 0x0 0x0
0xffffac0000018d80 0041 00000000 0x0 0x0
0xffffac0000018e00 0041 00000000 0x0 0x0
0xffffac0000018e80 0041 00000000 0x0 0x0
0xffffac0000018f00 0041 00000000 0x0 0x0
0xffffac0000018f80 0041 00000000 0x0 0x0
0xffffac0000019000 0041 00000000 0x0 0x0
0xffffac0000019080 0041 00000000 0x0 0x0
0xffffac0000019100 0041 00000000 0x0 0x0
0xffffac0000019180 0041 00000000 0x0 0x0
0xffffac0000019200 0041 00000000 0x0 0x0
0xffffac0000019280 0041 00000000 0x0 0x0
0xffffac0000019300 0041 00000000 0x0 0x0
0xffffac0000019380 0041 00000000 0x0 0x0
0xffffac0000019400 0041 00000000 0x0 0x0
0xffffac0000019480 0041 00000000 0x0 0x0
0xffffac0000019500 0041 00000000 0x0 0x0
0xffffac0000019580 0041 00000000 0x0 0x0
0xffffac0000019600 0041 00000000 0x0 0x0
0xffffac0000019680 0041 00000000 0x0 0x0
0xffffac0000019700 0041 00000000 0x0 0x0
0xffffac0000019780 0041 00000000 0x0 0x0
0xffffac0000019800 0041 00000000 0x0 0x0
0xffffac0000019880 0041 00000000 0x0 0x0
0xffffac0000019900 0041 00000000 0x0 0x0
0xffffac0000019980 0041 00000000 0x0 0x0
0xffffac0000019a00 0041 00000000 0x0 0x0
0xffffac0000019a80 0041 00000000 0x0 0x0
0xffffac0000019b00 0041 00000000 0x0 0x0
0xffffac0000019b80 0041 00000000 0x0 0x0
0xffffac0000019c00 0041 00000000 0x0 0x0
0xffffac0000019c80 0041 00000000 0x0 0x0
0xffffac0000019d00 0041 00000000 0x0 0x0
0xffffac0000019d80 0041 00000000 0x0 0x0
0xffffac0000019e00 0041 00000000 0x0 0x0
0xffffac0000019e80 0041 00000000 0x0 0x0
0xffffac0000019f00 0041 00000000 0x0 0x0
0xffffac0000019f80 0041 00000000 0x0 0x0
0xffffac000001a000 0041 00000000 0x0 0x0
0xffffac000001a080 0041 00000000 0x0 0x0
0xffffac000001a100 0041 00000000 0x0 0x0
0xffffac000001a180 0041 00000000 0x0 0x0
0xffffac000001a200 0041 00000000 0x0 0x0
0xffffac000001a280 0041 00000000 0x0 0x0
0xffffac000001a300 0041 00000000 0x0 0x0
0xffffac000001a380 0041 00000000 0x0 0x0
0xffffac000001a400 0041 00000000 0x0 0x0
0xffffac000001a480 0041 00000000 0x0 0x0
0xffffac000001a500 0041 00000000 0x0 0x0
0xffffac000001a580 0041 00000000 0x0 0x0
0xffffac000001a600 0041 00000000 0x0 0x0
0xffffac000001a680 0041 00000000 0x0 0x0
0xffffac000001a700 0041 00000000 0x0 0x0
0xffffac000001a780 0041 00000000 0x0 0x0
0xffffac000001a800 0041 00000000 0x0 0x0
0xffffac000001a880 0041 00000000 0x0 0x0
0xffffac000001a900 0041 00000000 0x0 0x0
0xffffac000001a980 0041 00000000 0x0 0x0
0xffffac000001aa00 0041 00000000 0x0 0x0
0xffffac000001aa80 0041 00000000 0x0 0x0
0xffffac000001ab00 0041 00000000 0x0 0x0
0xffffac000001ab80 0001 00000000 0x0 0x0
0xffffac000001ac00 0001 00000000 0x0 0x0
0xffffac000001ac80 0001 00000000 0x0 0x0
0xffffac000001ad00 0001 00000000 0x0 0x0
0xffffac000001ad80 0001 00000000 0x0 0x0
0xffffac000001ae00 0001 00000000 0x0 0x0
0xffffac000001ae80 0001 00000000 0x0 0x0
0xffffac000001af00 0001 00000000 0x0 0x0
0xffffac000001af80 0001 00000000 0x0 0x0
0xffffac000001b000 0001 00000000 0x0 0x0
0xffffac000001b080 0001 00000000 0x0 0x0
0xffffac000001b100 0001 00000000 0x0 0x0
0xffffac000001b180 0001 00000000 0x0 0x0
0xffffac000001b200 0001 00000000 0x0 0x0
0xffffac000001b280 0001 00000000 0x0 0x0
0xffffac000001b300 0001 00000000 0x0 0x0
0xffffac000001b380 0001 00000000 0x0 0x0
0xffffac000001b400 0001 00000000 0x0 0x0
0xffffac000001b480 0001 00000000 0x0 0x0
0xffffac000001b500 0001 00000000 0x0 0x0
0xffffac000001b580 0001 00000000 0x0 0x0
0xffffac000001b600 0001 00000000 0x0 0x0
0xffffac000001b680 0001 00000000 0x0 0x0
0xffffac000001b700 0001 00000000 0x0 0x0
0xffffac000001b780 0001 00000000 0x0 0x0
0xffffac000001b800 0001 00000000 0x0 0x0
0xffffac000001b880 0001 00000000 0x0 0x0
0xffffac000001b900 0001 00000000 0x0 0x0
0xffffac000001b980 0001 00000000 0x0 0x0
0xffffac000001ba00 0001 00000000 0x0 0x0
0xffffac000001ba80 0001 00000000 0x0 0x0
0xffffac000001bb00 0001 00000000 0x0 0x0
0xffffac000001bb80 0001 00000000 0x0 0x0
0xffffac000001bc00 0001 00000000 0x0 0x0
0xffffac000001bc80 0001 00000000 0x0 0x0
0xffffac000001bd00 0001 00000000 0x0 0x0
0xffffac000001bd80 0001 00000000 0x0 0x0
0xffffac000001be00 0001 00000000 0x0 0x0
0xffffac000001be80 0001 00000000 0x0 0x0
0xffffac000001bf00 0001 00000000 0x0 0x0
0xffffac000001bf80 0001 00000000 0x0 0x0
0xffffac000001c000 0001 00000000 0x0 0x0
0xffffac000001c080 0001 00000000 0x0 0x0
0xffffac000001c100 0001 00000000 0x0 0x0
0xffffac000001c180 0001 00000000 0x0 0x0
0xffffac000001c200 0001 00000000 0x0 0x0
0xffffac000001c280 0001 00000000 0x0 0x0
0xffffac000001c300 0001 00000000 0x0 0x0
0xffffac000001c380 0001 00000000 0x0 0x0
0xffffac000001c400 0001 00000000 0x0 0x0
0xffffac000001c480 0001 00000000 0x0 0x0
0xffffac000001c500 0001 00000000 0x0 0x0
0xffffac000001c580 0001 00000000 0x0 0x0
0xffffac000001c600 0001 00000000 0x0 0x0
0xffffac000001c680 0001 00000000 0x0 0x0
0xffffac000001c700 0001 00000000 0x0 0x0
0xffffac000001c780 0001 00000000 0x0 0x0
0xffffac000001c800 0001 00000000 0x0 0x0
0xffffac000001c880 0001 00000000 0x0 0x0
0xffffac000001c900 0001 00000000 0x0 0x0
0xffffac000001c980 0001 00000000 0x0 0x0
0xffffac000001ca00 0001 00000000 0x0 0x0
0xffffac000001ca80 0001 00000000 0x0 0x0
0xffffac000001cb00 0001 00000000 0x0 0x0
0xffffac000001cb80 0001 00000000 0x0 0x0
0xffffac000001cc00 0001 00000000 0x0 0x0
0xffffac000001cc80 0001 00000000 0x0 0x0
0xffffac000001cd00 0001 00000000 0x0 0x0
0xffffac000001cd80 0001 00000000 0x0 0x0
0xffffac000001ce00 0001 00000000 0x0 0x0
0xffffac000001ce80 0001 00000000 0x0 0x0
0xffffac000001cf00 0001 00000000 0x0 0x0
0xffffac000001cf80 0001 00000000 0x0 0x0
0xffffac000001d000 0001 00000000 0x0 0x0
0xffffac000001d080 0001 00000000 0x0 0x0
0xffffac000001d100 0001 00000000 0x0 0x0
0xffffac000001d180 0001 00000000 0x0 0x0
0xffffac000001d200 0001 00000000 0x0 0x0
0xffffac000001d280 0001 00000000 0x0 0x0
0xffffac000001d300 0001 00000000 0x0 0x0
0xffffac000001d380 0001 00000000 0x0 0x0
0xffffac000001d400 0001 00000000 0x0 0x0
0xffffac000001d480 0001 00000000 0x0 0x0
0xffffac000001d500 0001 00000000 0x0 0x0
0xffffac000001d580 0001 00000000 0x0 0x0
0xffffac000001d600 0001 00000000 0x0 0x0
0xffffac000001d680 0001 00000000 0x0 0x0
0xffffac000001d700 0001 00000000 0x0 0x0
0xffffac000001d780 0001 00000000 0x0 0x0
0xffffac000001d800 0001 00000000 0x0 0x0
0xffffac000001d880 0001 00000000 0x0 0x0
0xffffac000001d900 0001 00000000 0x0 0x0
0xffffac000001d980 0001 00000000 0x0 0x0
0xffffac000001da00 0001 00000000 0x0 0x0
0xffffac000001da80 0001 00000000 0x0 0x0
0xffffac000001db00 0001 00000000 0x0 0x0
0xffffac000001db80 0001 00000000 0x0 0x0
0xffffac000001dc00 0001 00000000 0x0 0x0
0xffffac000001dc80 0001 00000000 0x0 0x0
0xffffac000001dd00 0001 00000000 0x0 0x0
0xffffac000001dd80 0001 00000000 0x0 0x0
0xffffac000001de00 0001 00000000 0x0 0x0
0xffffac000001de80 0001 00000000 0x0 0x0
0xffffac000001df00 0001 00000000 0x0 0x0
0xffffac000001df80 0001 00000000 0x0 0x0
0xffffac000001e000 0001 00000000 0x0 0x0
0xffffac000001e080 0001 00000000 0x0 0x0
0xffffac000001e100 0001 00000000 0x0 0x0
0xffffac000001e180 0001 00000000 0x0 0x0
0xffffac000001e200 0001 00000000 0x0 0x0
0xffffac000001e280 0001 00000000 0x0 0x0
0xffffac000001e300 0001 00000000 0x0 0x0
0xffffac000001e380 0001 00000000 0x0 0x0
0xffffac000001e400 0001 00000000 0x0 0x0
0xffffac000001e480 0001 00000000 0x0 0x0
0xffffac000001e500 0001 00000000 0x0 0x0
0xffffac000001e580 0001 00000000 0x0 0x0
0xffffac000001e600 0001 00000000 0x0 0x0
0xffffac000001e680 0001 00000000 0x0 0x0
0xffffac000001e700 0001 00000000 0x0 0x0
0xffffac000001e780 0001 00000000 0x0 0x0
0xffffac000001e800 0001 00000000 0x0 0x0
0xffffac000001e880 0001 00000000 0x0 0x0
0xffffac000001e900 0001 00000000 0x0 0x0
0xffffac000001e980 0001 00000000 0x0 0x0
0xffffac000001ea00 0001 00000000 0x0 0x0
0xffffac000001ea80 0001 00000000 0x0 0x0
0xffffac000001eb00 0001 00000000 0x0 0x0
0xffffac000001eb80 0001 00000000 0x0 0x0
0xffffac000001ec00 0001 00000000 0x0 0x0
0xffffac000001ec80 0001 00000000 0x0 0x0
0xffffac000001ed00 0001 00000000 0x0 0x0
0xffffac000001ed80 0001 00000000 0x0 0x0
0xffffac000001ee00 0001 00000000 0x0 0x0
0xffffac000001ee80 0001 00000000 0x0 0x0
0xffffac000001ef00 0001 00000000 0x0 0x0
0xffffac000001ef80 0001 00000000 0x0 0x0
0xffffac000001f000 0001 00000000 0x0 0x0
0xffffac000001f080 0001 00000000 0x0 0x0
0xffffac000001f100 0001 00000000 0x0 0x0
0xffffac000001f180 0001 00000000 0x0 0x0
0xffffac000001f200 0001 00000000 0x0 0x0
0xffffac000001f280 0001 00000000 0x0 0x0
0xffffac000001f300 0001 00000000 0x0 0x0
0xffffac000001f380 0001 00000000 0x0 0x0
0xffffac000001f400 0001 00000000 0x0 0x0
0xffffac000001f480 0001 00000000 0x0 0x0
0xffffac000001f500 0001 00000000 0x0 0x0
0xffffac000001f580 0001 00000000 0x0 0x0
0xffffac000001f600 0001 00000000 0x0 0x0
0xffffac000001f680 0001 00000000 0x0 0x0
0xffffac000001f700 0001 00000000 0x0 0x0
0xffffac000001f780 0001 00000000 0x0 0x0
0xffffac000001f800 0001 00000000 0x0 0x0
0xffffac000001f880 0001 00000000 0x0 0x0
0xffffac000001f900 0001 00000000 0x0 0x0
0xffffac000001f980 0001 00000000 0x0 0x0
0xffffac000001fa00 0001 00000000 0x0 0x0
0xffffac000001fa80 0001 00000000 0x0 0x0
0xffffac000001fb00 0001 00000000 0x0 0x0
0xffffac000001fb80 0001 00000000 0x0 0x0
0xffffac000001fc00 0001 00000000 0x0 0x0
0xffffac000001fc80 0001 00000000 0x0 0x0
0xffffac000001fd00 0001 00000000 0x0 0x0
0xffffac000001fd80 0001 00000000 0x0 0x0
0xffffac000001fe00 0001 00000000 0x0 0x0
0xffffac000001fe80 0001 00000000 0x0 0x0
0xffffac000001ff00 0001 00000000 0x0 0x0
0xffffac000001ff80 0001 00000000 0x0 0x0
0xffffac0000020000 0001 00000000 0x0 0x0
0xffffac0000020080 0001 00000000 0x0 0x0
0xffffac0000020100 0001 00000000 0x0 0x0
0xffffac0000020180 0001 00000000 0x0 0x0
0xffffac0000020200 0001 00000000 0x0 0x0
0xffffac0000020280 0001 00000000 0x0 0x0
0xffffac0000020300 0001 00000000 0x0 0x0
0xffffac0000020380 0001 00000000 0x0 0x0
0xffffac0000020400 0001 00000000 0x0 0x0
0xffffac0000020480 0001 00000000 0x0 0x0
0xffffac0000020500 0001 00000000 0x0 0x0
0xffffac0000020580 0001 00000000 0x0 0x0
0xffffac0000020600 0001 00000000 0x0 0x0
0xffffac0000020680 0001 00000000 0x0 0x0
0xffffac0000020700 0001 00000000 0x0 0x0
0xffffac0000020780 0001 00000000 0x0 0x0
0xffffac0000020800 0001 00000000 0x0 0x0
0xffffac0000020880 0001 00000000 0x0 0x0
0xffffac0000020900 0001 00000000 0x0 0x0
0xffffac0000020980 0001 00000000 0x0 0x0
0xffffac0000020a00 0001 00000000 0x0 0x0
0xffffac0000020a80 0001 00000000 0x0 0x0
0xffffac0000020b00 0001 00000000 0x0 0x0
0xffffac0000020b80 0001 00000000 0x0 0x0
0xffffac0000020c00 0001 00000000 0x0 0x0
0xffffac0000020c80 0001 00000000 0x0 0x0
0xffffac0000020d00 0001 00000000 0x0 0x0
0xffffac0000020d80 0001 00000000 0x0 0x0
0xffffac0000020e00 0001 00000000 0x0 0x0
0xffffac0000020e80 0001 00000000 0x0 0x0
0xffffac0000020f00 0001 00000000 0x0 0x0
0xffffac0000020f80 0001 00000000 0x0 0x0
0xffffac0000021000 0001 00000000 0x0 0x0
0xffffac0000021080 0001 00000000 0x0 0x0
0xffffac0000021100 0001 00000000 0x0 0x0
0xffffac0000021180 0001 00000000 0x0 0x0
0xffffac0000021200 0001 00000000 0x0 0x0
0xffffac0000021280 0001 00000000 0x0 0x0
0xffffac0000021300 0001 00000000 0x0 0x0
0xffffac0000021380 0001 00000000 0x0 0x0
0xffffac0000021400 0001 00000000 0x0 0x0
0xffffac0000021480 0001 00000000 0x0 0x0
0xffffac0000021500 0001 00000000 0x0 0x0
0xffffac0000021580 0001 00000000 0x0 0x0
0xffffac0000021600 0001 00000000 0x0 0x0
0xffffac0000021680 0001 00000000 0x0 0x0
0xffffac0000021700 0001 00000000 0x0 0x0
0xffffac0000021780 0001 00000000 0x0 0x0
0xffffac0000021800 0001 00000000 0x0 0x0
0xffffac0000021880 0001 00000000 0x0 0x0
0xffffac0000021900 0001 00000000 0x0 0x0
0xffffac0000021980 0001 00000000 0x0 0x0
0xffffac0000021a00 0001 00000000 0x0 0x0
0xffffac0000021a80 0001 00000000 0x0 0x0
0xffffac0000021b00 0001 00000000 0x0 0x0
0xffffac0000021b80 0001 00000000 0x0 0x0
0xffffac0000021c00 0001 00000000 0x0 0x0
0xffffac0000021c80 0001 00000000 0x0 0x0
0xffffac0000021d00 0001 00000000 0x0 0x0
0xffffac0000021d80 0001 00000000 0x0 0x0
0xffffac0000021e00 0001 00000000 0x0 0x0
0xffffac0000021e80 0001 00000000 0x0 0x0
0xffffac0000021f00 0001 00000000 0x0 0x0
0xffffac0000021f80 0001 00000000 0x0 0x0
0xffffac0000022000 0001 00000000 0x0 0x0
0xffffac0000022080 0001 00000000 0x0 0x0
0xffffac0000022100 0001 00000000 0x0 0x0
0xffffac0000022180 0001 00000000 0x0 0x0
0xffffac0000022200 0001 00000000 0x0 0x0
0xffffac0000022280 0001 00000000 0x0 0x0
0xffffac0000022300 0001 00000000 0x0 0x0
0xffffac0000022380 0001 00000000 0x0 0x0
0xffffac0000022400 0001 00000000 0x0 0x0
0xffffac0000022480 0001 00000000 0x0 0x0
0xffffac0000022500 0001 00000000 0x0 0x0
0xffffac0000022580 0001 00000000 0x0 0x0
0xffffac0000022600 0001 00000000 0x0 0x0
0xffffac0000022680 0001 00000000 0x0 0x0
0xffffac0000022700 0001 00000000 0x0 0x0
0xffffac0000022780 0001 00000000 0x0 0x0
0xffffac0000022800 0001 00000000 0x0 0x0
0xffffac0000022880 0001 00000000 0x0 0x0
0xffffac0000022900 0001 00000000 0x0 0x0
0xffffac0000022980 0001 00000000 0x0 0x0
0xffffac0000022a00 0001 00000000 0x0 0x0
0xffffac0000022a80 0001 00000000 0x0 0x0
0xffffac0000022b00 0001 00000000 0x0 0x0
0xffffac0000022b80 0001 00000000 0x0 0x0
0xffffac0000022c00 0001 00000000 0x0 0x0
0xffffac0000022c80 0001 00000000 0x0 0x0
0xffffac0000022d00 0001 00000000 0x0 0x0
0xffffac0000022d80 0001 00000000 0x0 0x0
0xffffac0000022e00 0001 00000000 0x0 0x0
0xffffac0000022e80 0001 00000000 0x0 0x0
0xffffac0000022f00 0001 00000000 0x0 0x0
0xffffac0000022f80 0001 00000000 0x0 0x0
0xffffac0000023000 0001 00000000 0x0 0x0
0xffffac0000023080 0001 00000000 0x0 0x0
0xffffac0000023100 0001 00000000 0x0 0x0
0xffffac0000023180 0001 00000000 0x0 0x0
0xffffac0000023200 0001 00000000 0x0 0x0
0xffffac0000023280 0001 00000000 0x0 0x0
0xffffac0000023300 0001 00000000 0x0 0x0
0xffffac0000023380 0001 00000000 0x0 0x0
0xffffac0000023400 0001 00000000 0x0 0x0
0xffffac0000023480 0001 00000000 0x0 0x0
0xffffac0000023500 0001 00000000 0x0 0x0
0xffffac0000023580 0001 00000000 0x0 0x0
0xffffac0000023600 0001 00000000 0x0 0x0
0xffffac0000023680 0001 00000000 0x0 0x0
0xffffac0000023700 0001 00000000 0x0 0x0
0xffffac0000023780 0001 00000000 0x0 0x0
0xffffac0000023800 0001 00000000 0x0 0x0
0xffffac0000023880 0001 00000000 0x0 0x0
0xffffac0000023900 0001 00000000 0x0 0x0
0xffffac0000023980 0001 00000000 0x0 0x0
0xffffac0000023a00 0001 00000000 0x0 0x0
0xffffac0000023a80 0001 00000000 0x0 0x0
0xffffac0000023b00 0001 00000000 0x0 0x0
0xffffac0000023b80 0001 00000000 0x0 0x0
0xffffac0000023c00 0001 00000000 0x0 0x0
0xffffac0000023c80 0001 00000000 0x0 0x0
0xffffac0000023d00 0001 00000000 0x0 0x0
0xffffac0000023d80 0001 00000000 0x0 0x0
0xffffac0000023e00 0001 00000000 0x0 0x0
0xffffac0000023e80 0001 00000000 0x0 0x0
0xffffac0000023f00 0001 00000000 0x0 0x0
0xffffac0000023f80 0001 00000000 0x0 0x0
0xffffac0000024000 0001 00000000 0x0 0x0
0xffffac0000024080 0001 00000000 0x0 0x0
0xffffac0000024100 0001 00000000 0x0 0x0
0xffffac0000024180 0001 00000000 0x0 0x0
0xffffac0000024200 0001 00000000 0x0 0x0
0xffffac0000024280 0001 00000000 0x0 0x0
0xffffac0000024300 0001 00000000 0x0 0x0
0xffffac0000024380 0001 00000000 0x0 0x0
0xffffac0000024400 0001 00000000 0x0 0x0
0xffffac0000024480 0001 00000000 0x0 0x0
0xffffac0000024500 0001 00000000 0x0 0x0
0xffffac0000024580 0001 00000000 0x0 0x0
0xffffac0000024600 0001 00000000 0x0 0x0
0xffffac0000024680 0001 00000000 0x0 0x0
0xffffac0000024700 0001 00000000 0x0 0x0
0xffffac0000024780 0001 00000000 0x0 0x0
0xffffac0000024800 0001 00000000 0x0 0x0
0xffffac0000024880 0001 00000000 0x0 0x0
0xffffac0000024900 0001 00000000 0x0 0x0
0xffffac0000024980 0001 00000000 0x0 0x0
0xffffac0000024a00 0001 00000000 0x0 0x0
0xffffac0000024a80 0001 00000000 0x0 0x0
0xffffac0000024b00 0001 00000000 0x0 0x0
0xffffac0000024b80 0001 00000000 0x0 0x0
0xffffac0000024c00 0001 00000000 0x0 0x0
0xffffac0000024c80 0001 00000000 0x0 0x0
0xffffac0000024d00 0001 00000000 0x0 0x0
0xffffac0000024d80 0001 00000000 0x0 0x0
0xffffac0000024e00 0001 00000000 0x0 0x0
0xffffac0000024e80 0001 00000000 0x0 0x0
0xffffac0000024f00 0001 00000000 0x0 0x0
0xffffac0000024f80 0001 00000000 0x0 0x0
0xffffac0000025000 0001 00000000 0x0 0x0
0xffffac0000025080 0001 00000000 0x0 0x0
0xffffac0000025100 0001 00000000 0x0 0x0
0xffffac0000025180 0001 00000000 0x0 0x0
0xffffac0000025200 0001 00000000 0x0 0x0
0xffffac0000025280 0001 00000000 0x0 0x0
0xffffac0000025300 0001 00000000 0x0 0x0
0xffffac0000025380 0001 00000000 0x0 0x0
0xffffac0000025400 0001 00000000 0x0 0x0
0xffffac0000025480 0001 00000000 0x0 0x0
0xffffac0000025500 0001 00000000 0x0 0x0
0xffffac0000025580 0001 00000000 0x0 0x0
0xffffac0000025600 0001 00000000 0x0 0x0
0xffffac0000025680 0001 00000000 0x0 0x0
0xffffac0000025700 0001 00000000 0x0 0x0
0xffffac0000025780 0001 00000000 0x0 0x0
0xffffac0000025800 0001 00000000 0x0 0x0
0xffffac0000025880 0001 00000000 0x0 0x0
0xffffac0000025900 0001 00000000 0x0 0x0
0xffffac0000025980 0001 00000000 0x0 0x0
0xffffac0000025a00 0001 00000000 0x0 0x0
0xffffac0000025a80 0001 00000000 0x0 0x0
0xffffac0000025b00 0001 00000000 0x0 0x0
0xffffac0000025b80 0001 00000000 0x0 0x0
0xffffac0000025c00 0001 00000000 0x0 0x0
0xffffac0000025c80 0001 00000000 0x0 0x0
0xffffac0000025d00 0001 00000000 0x0 0x0
0xffffac0000025d80 0001 00000000 0x0 0x0
0xffffac0000025e00 0001 00000000 0x0 0x0
0xffffac0000025e80 0001 00000000 0x0 0x0
0xffffac0000025f00 0001 00000000 0x0 0x0
0xffffac0000025f80 0001 00000000 0x0 0x0
0xffffac0000026000 0001 00000000 0x0 0x0
0xffffac0000026080 0001 00000000 0x0 0x0
0xffffac0000026100 0001 00000000 0x0 0x0
0xffffac0000026180 0001 00000000 0x0 0x0
0xffffac0000026200 0001 00000000 0x0 0x0
0xffffac0000026280 0001 00000000 0x0 0x0
0xffffac0000026300 0001 00000000 0x0 0x0
0xffffac0000026380 0001 00000000 0x0 0x0
0xffffac0000026400 0001 00000000 0x0 0x0
0xffffac0000026480 0001 00000000 0x0 0x0
0xffffac0000026500 0001 00000000 0x0 0x0
0xffffac0000026580 0001 00000000 0x0 0x0
0xffffac0000026600 0001 00000000 0x0 0x0
0xffffac0000026680 0001 00000000 0x0 0x0
0xffffac0000026700 0001 00000000 0x0 0x0
0xffffac0000026780 0001 00000000 0x0 0x0
0xffffac0000026800 0001 00000000 0x0 0x0
0xffffac0000026880 0001 00000000 0x0 0x0
0xffffac0000026900 0001 00000000 0x0 0x0
0xffffac0000026980 0001 00000000 0x0 0x0
0xffffac0000026a00 0001 00000000 0x0 0x0
0xffffac0000026a80 0001 00000000 0x0 0x0
0xffffac0000026b00 0001 00000000 0x0 0x0
0xffffac0000026b80 0001 00000000 0x0 0x0
0xffffac0000026c00 0001 00000000 0x0 0x0
0xffffac0000026c80 0001 00000000 0x0 0x0
0xffffac0000026d00 0001 00000000 0x0 0x0
0xffffac0000026d80 0001 00000000 0x0 0x0
0xffffac0000026e00 0001 00000000 0x0 0x0
0xffffac0000026e80 0001 00000000 0x0 0x0
0xffffac0000026f00 0001 00000000 0x0 0x0
0xffffac0000026f80 0001 00000000 0x0 0x0
0xffffac0000027000 0001 00000000 0x0 0x0
0xffffac0000027080 0001 00000000 0x0 0x0
0xffffac0000027100 0001 00000000 0x0 0x0
0xffffac0000027180 0001 00000000 0x0 0x0
0xffffac0000027200 0001 00000000 0x0 0x0
0xffffac0000027280 0001 00000000 0x0 0x0
0xffffac0000027300 0001 00000000 0x0 0x0
0xffffac0000027380 0001 00000000 0x0 0x0
0xffffac0000027400 0001 00000000 0x0 0x0
0xffffac0000027480 0001 00000000 0x0 0x0
0xffffac0000027500 0001 00000000 0x0 0x0
0xffffac0000027580 0001 00000000 0x0 0x0
0xffffac0000027600 0001 00000000 0x0 0x0
0xffffac0000027680 0001 00000000 0x0 0x0
0xffffac0000027700 0001 00000000 0x0 0x0
0xffffac0000027780 0001 00000000 0x0 0x0
0xffffac0000027800 0001 00000000 0x0 0x0
0xffffac0000027880 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Mar 10, 2021, 11:48:15 PM3/10/21

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 59ee1e30 make(1): replace global preserveUndefined with VA..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=1501dbb0d00000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=0f384db774babe002120
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1236bdfad00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=178d3bead00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0f384d...@syzkaller.appspotmail.com

[ 78.1210922] panic: kernel diagnostic assertion "nmp == NULL || nmp == mp" failed: file "/syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c", line 271
[ 78.1310656] cpu1: Begin traceback...
[ 78.1510665] vpanic() at netbsd:vpanic+0x265 syzkaller/managers/netbsd/kernel/sys/kern/subr_prf.c:290
[ 78.2010773] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 78.2510766] mountd_set_exports_list() at netbsd:mountd_set_exports_list+0x284 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:272
[ 78.3010658] nfs_export_update_30() at netbsd:nfs_export_update_30+0xe8 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:458
[ 78.3510665] vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 syzkaller/managers/netbsd/kernel/sys/kern/vfs_hooks.c:138
[ 78.3910683] do_sys_mount() at netbsd:do_sys_mount+0xbdf mount_update syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:334 [inline]
[ 78.3910683] do_sys_mount() at netbsd:do_sys_mount+0xbdf syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:548
[ 78.4410644] compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd syzkaller/managers/netbsd/kernel/sys/compat/common/vfs_syscalls_40.c:88
[ 78.4810684] sys_syscall() at netbsd:sys_syscall+0xff sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
[ 78.4810684] sys_syscall() at netbsd:sys_syscall+0xff syzkaller/managers/netbsd/kernel/sys/kern/sys_syscall.c:77
[ 78.5310656] syscall() at netbsd:syscall+0x259 sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
[ 78.5310656] syscall() at netbsd:syscall+0x259 sy_invoke syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:94 [inline]
[ 78.5310656] syscall() at netbsd:syscall+0x259 syzkaller/managers/netbsd/kernel/sys/arch/x86/x86/syscall.c:138
[ 78.5410689] --- syscall (number 0) ---
[ 78.5610630] netbsd:syscall+0x259:
[ 78.5610630] cpu1: End traceback...
[ 78.5710676] fatal breakpoint trap in supervisor mode
[ 78.5710676] trap type 1 code 0 rip 0xffffffff80220a2d cs 0x8 rflags 0x282 cr2 0x72dcf2338ff8 ilevel 0 rsp 0xffffb2019db5f770
[ 78.5810642] curlwp 0xffffb20013b7e980 pid 1127.1222 lowest kstack 0xffffb2019db582c0
Stopped in pid 1127.1222 (syz-executor6694) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 syzkaller/managers/netbsd/kernel/sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x265 syzkaller/managers/netbsd/kernel/sys/kern/subr_prf.c:290
_GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
mountd_set_exports_list() at netbsd:mountd_set_exports_list+0x284 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:272
nfs_export_update_30() at netbsd:nfs_export_update_30+0xe8 syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c:458
vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 syzkaller/managers/netbsd/kernel/sys/kern/vfs_hooks.c:138
do_sys_mount() at netbsd:do_sys_mount+0xbdf mount_update syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:334 [inline]
do_sys_mount() at netbsd:do_sys_mount+0xbdf syzkaller/managers/netbsd/kernel/sys/kern/vfs_syscalls.c:548
compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd syzkaller/managers/netbsd/kernel/sys/compat/common/vfs_syscalls_40.c:88

sys_syscall() at netbsd:sys_syscall+0xff sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0xff syzkaller/managers/netbsd/kernel/sys/kern/sys_syscall.c:77

syscall() at netbsd:syscall+0x259 sy_call syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x259 sy_invoke syzkaller/managers/netbsd/kernel/sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x259 syzkaller/managers/netbsd/kernel/sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---

netbsd:syscall+0x259:
Panic string: kernel diagnostic assertion "nmp == NULL || nmp == mp" failed: file "/syzkaller/managers/netbsd/kernel/sys/nfs/nfs_export.c", line 271
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1107 1107 2 0 0 ffffb20013a56bc0 syz-executor6694
1127 1239 3 1 180 ffffb20013baf140 syz-executor6694 parked
1127 >1222 7 1 0 ffffb20013b7e980 syz-executor6694
1127 1127 2 0 10000140 ffffb20013bcb180 syz-executor6694
1219 984 3 0 180 ffffb20013b7e540 syz-executor6694 parked
1219 1219 2 0 10000000 ffffb20015191280 syz-executor6694
1080 1069 3 0 0 ffffb20013baf580 syz-executor6694 fstchg
1080 1119 3 0 180 ffffb200151b12c0 syz-executor6694 parked
1080 1080 2 0 10000000 ffffb20015177680 syz-executor6694
1188 1231 3 1 180 ffffb20013b64940 syz-executor6694 parked
1188 1218 3 0 180 ffffb20015191b00 syz-executor6694 parked
1188 1188 2 1 10000000 ffffb20015177240 syz-executor6694
1073 1189 3 1 180 ffffb20015162a80 syz-executor6694 parked
1073 1052 3 0 180 ffffb20015162200 syz-executor6694 parked
1073 1099 3 0 180 ffffb2001515f600 syz-executor6694 parked
1073 1073 2 0 10040000 ffffb200151455c0 syz-executor6694
422 422 2 0 140 ffffb20015145180 syz-executor6694
1084 1084 2 0 140 ffffb20013c4eb40 syz-executor6694
1083 1083 2 1 140 ffffb2001483cb00 syz-executor6694
951 951 2 0 40140 ffffb200147d4a40 syz-executor6694
1128 1128 2 1 140 ffffb200148bc140 syz-executor6694
1071 >1071 7 0 140 ffffb20013a56780 syz-executor6694
1076 1076 3 0 40180 ffffb20013b640c0 syz-executor6694 nanoslp
1074 1074 3 0 180 ffffb20013b7e100 sshd select
1249 1249 3 0 180 ffffb200136e9b40 getty nanoslp
1098 1098 3 0 180 ffffb200148a1980 getty nanoslp
698 698 3 1 180 ffffb200136ec740 getty nanoslp
947 947 3 0 1c0 ffffb200139fb700 getty ttyraw
965 965 3 1 180 ffffb200147d4600 sshd select
1122 1122 3 1 180 ffffb20013d04b00 powerd kqueue
555 555 3 0 180 ffffb2001484f700 syslogd kqueue
598 598 3 0 180 ffffb20013c0cac0 dhcpcd poll
597 597 3 0 180 ffffb20013c914c0 dhcpcd poll
594 594 3 1 180 ffffb20013c0c240 dhcpcd poll
462 462 3 1 180 ffffb20013c63300 dhcpcd poll
350 350 3 1 180 ffffb20013d808c0 dhcpcd poll
349 349 3 0 180 ffffb20013d80480 dhcpcd poll
348 348 3 1 180 ffffb20013d80040 dhcpcd poll
1 1 3 0 180 ffffb2001385b140 init wait
0 895 3 0 200 ffffb2001398c240 physiod physiod
0 192 3 0 200 ffffb2001398e280 pooldrain pooldrain
0 163 3 0 200 ffffb2001398cac0 ioflush syncer
0 168 3 1 200 ffffb2001398c680 pgdaemon pgdaemon
0 162 3 0 200 ffffb20013959640 usb7 usbevt
0 161 3 1 200 ffffb20013959200 usb6 usbevt
0 31 3 0 200 ffffb2001390ba40 usb5 usbevt
0 63 3 1 200 ffffb2001390b600 usb4 usbevt
0 126 3 0 200 ffffb2001390b1c0 usb3 usbevt
0 125 3 0 200 ffffb200138b9a00 usb2 usbevt
0 124 3 1 200 ffffb200138b95c0 usb1 usbevt
0 123 3 0 200 ffffb200138b9180 usb0 usbevt
0 122 3 0 200 ffffb2001385b9c0 usbtask-dr usbtsk
0 121 3 0 200 ffffb20010dbbac0 usbtask-hc usbtsk
0 120 3 1 200 ffffb2001385b580 npfgc0 npfgcw
0 119 3 0 200 ffffb2001384b980 rt_free rt_free
0 118 3 1 200 ffffb2001384b540 unpgc unpgc
0 117 3 0 200 ffffb2001384b100 key_timehandler key_timehandler
0 116 3 1 200 ffffb2001371b940 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffffb2001371b500 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffffb2001371b0c0 nd6_timer nd6_timer
0 113 3 1 200 ffffb20013711900 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffffb200137114c0 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffffb20013711080 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffffb200137008c0 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffffb20013700480 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffffb20013700040 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 ffffb200136edbc0 rt_timer rt_timer
0 106 3 0 200 ffffb200136ed780 vmem_rehash vmem_rehash
0 105 3 0 200 ffffb200136ecb80 entbutler entropy
0 96 3 0 200 ffffb200130c0b00 viomb balloon
0 30 3 1 200 ffffb200130c06c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffb200130c0280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffb20010dbb680 scsibus0 sccomp
0 26 3 0 200 ffffb20010dbb240 pms0 pmsreset
0 25 3 1 200 ffffb20010d0ea80 xcall/1 xcall
0 24 1 1 200 ffffb20010d0e640 softser/1
0 23 1 1 200 ffffb20010d0e200 softclk/1
0 22 1 1 200 ffffb20010d0ca40 softbio/1
0 21 1 1 200 ffffb20010d0c600 softnet/1
0 20 1 1 201 ffffb20010d0c1c0 idle/1
0 19 3 0 200 ffffb2000f77da00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffb2000f77d5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffb2000f77d180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffb2000f7759c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffb2000f775580 sysmon smtaskq
0 14 3 0 200 ffffb2000f775140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffb2000f771980 pmfevent pmfevent
0 12 3 0 200 ffffb2000f771540 sopendfree sopendfr
0 11 3 0 200 ffffb2000f771100 iflnkst iflnkst
0 10 3 0 200 ffffb2000f766940 nfssilly nfssilly
0 9 3 0 200 ffffb2000f766500 vdrain vdrain
0 8 3 0 200 ffffb2000f7660c0 modunload mod_unld
0 7 3 0 200 ffffb2000f758900 xcall/0 xcall
0 6 1 0 200 ffffb2000f7584c0 softser/0
0 5 1 0 200 ffffb2000f758080 softclk/0
0 4 1 0 200 ffffb2000f7568c0 softbio/0
0 3 1 0 200 ffffb2000f756480 softnet/0
0 2 1 0 201 ffffb2000f756040 idle/0
0 0 3 1 200 ffffffff82eee940 swapper uvm
[Locks tracked through LWPs]

****** LWP 1127.1222 (syz-executor6694) @ 0xffffb20013b7e980, l_stat=7

*** Locks held:

* Lock 0 (initialized at fstrans_init)
lock address : 0xffffffff830009c0 type : sleep/adaptive
initialized : 0xffffffff81a56ddb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffb20013b7e980 last held: 0xffffb20013b7e980
last locked* : 0xffffffff81a592ba unlocked : 0xffffffff81a3f4cf
owner field : 0xffffb20013b7e980 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vfs_mountalloc)

lock address : 0xffffb20015196980 type : sleep/adaptive

initialized : 0xffffffff81a3c2cf
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffb20013b7e980 last held: 0xffffb20013b7e980
last locked* : 0xffffffff81a4b118 unlocked : 0xffffffff81a3f7bd
owner field : 0xffffb20013b7e980 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at vfsinit)
lock address : 0xffffffff831162c0 type : sleep/adaptive
initialized : 0xffffffff81a2ef22
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffb20013b7e980 last held: 0xffffb20013b7e980

last locked* : 0xffffffff81a2e7be unlocked : 0xffffffff81a2e832

owner field : 0xffffb20013b7e980 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 3 (initialized at vcache_alloc)

lock address : 0xffffb200151b59c0 type : sleep/adaptive

initialized : 0xffffffff81a5b250
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffb20013b7e980 last held: 0xffffb20013b7e980

last locked* : 0xffffffff81a8df50 unlocked : 0xffffffff81a8dfb2

owner/count : 0xffffb20013b7e980 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1080.1069 (syz-executor6694) @ 0xffffb20013baf580, l_stat=3

*** Locks held:

* Lock 0 (initialized at vfs_mountalloc)

lock address : 0xffffb20014ff4580 type : sleep/adaptive

initialized : 0xffffffff81a3c2cf
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffb20013baf580 last held: 0xffffb20013baf580

last locked* : 0xffffffff81a3f1c7 unlocked : 000000000000000000

owner field : 0xffffb20013baf580 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vfs_mount_sysinit)
lock address : 0xffffffff83116480 type : sleep/adaptive
initialized : 0xffffffff81a3ad5a

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffb20013baf580 last held: 0xffffb20013baf580
last locked* : 0xffffffff81a3d345 unlocked : 0xffffffff81a3d4ee
owner field : 0xffffb20013baf580 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 597.597 (dhcpcd) @ 0xffffb20013c914c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff68c0 type : sleep/adaptive
initialized : 0xffffffff818e1d61
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffb20013c914c0 last held: 000000000000000000