ASan: Unauthorized Access in sockaddr_dup

8 views

Skip to first unread message

syzbot

unread,

Mar 22, 2023, 1:15:52 AM3/22/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 0e061ac199c7 Use "sigjmp_buf loc" after switch to sigsetjm..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1611ab6ec80000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=705a2a35990549b12c8d
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a1dbac512deb/disk-0e061ac1.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/37c8b9102b6c/netbsd-0e061ac1.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+705a2a...@syzkaller.appspotmail.com

[ 75.1378599] panic: ASan: Unauthorized Access In 0xffffffff81c5987d: Addr 0xffffdc8012930460 [172 bytes, read, MallocRedZone]

[ 75.1490893] cpu0: Begin traceback...
[ 75.1657816] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
[ 75.2357832] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1059
[ 75.2957835] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
[ 75.2957835] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
[ 75.3457802] kasan_memcpy() at netbsd:kasan_memcpy+0x90 kasan_shadow_Nbyte_isvalid sys/kern/subr_asan.c:382 [inline]
[ 75.3457802] kasan_memcpy() at netbsd:kasan_memcpy+0x90 kasan_shadow_check sys/kern/subr_asan.c:427 [inline]
[ 75.3457802] kasan_memcpy() at netbsd:kasan_memcpy+0x90 sys/kern/subr_asan.c:440
[ 75.3957813] sockaddr_dup() at netbsd:sockaddr_dup+0xdc sockaddr_copy sys/kern/uipc_domain.c:345 [inline]
[ 75.3957813] sockaddr_dup() at netbsd:sockaddr_dup+0xdc sys/kern/uipc_domain.c:402
[ 75.4457810] rt_setgate() at netbsd:rt_setgate+0x4b sys/net/route.c:1329
[ 75.5057825] rtrequest1() at netbsd:rtrequest1+0x4c7 sys/net/route.c:1238
[ 75.5557849] rtrequest() at netbsd:rtrequest+0x100 sys/net/route.c:1058
[ 75.6057831] aa_dosingleroute() at netbsd:aa_dosingleroute+0x1c8 sys/netatalk/at_control.c:820
[ 75.6557882] at_ifinit() at netbsd:at_ifinit+0xd68 aa_addsingleroute sys/netatalk/at_control.c:766 [inline]
[ 75.6557882] at_ifinit() at netbsd:at_ifinit+0xd68 sys/netatalk/at_control.c:639
[ 75.7057851] at_control() at netbsd:at_control+0x875 sys/netatalk/at_control.c:306
[ 75.7557861] ddp_ioctl_wrapper() at netbsd:ddp_ioctl_wrapper+0x34 ddp_ioctl sys/netatalk/ddp_usrreq.c:442 [inline]
[ 75.7557861] ddp_ioctl_wrapper() at netbsd:ddp_ioctl_wrapper+0x34 sys/netatalk/ddp_usrreq.c:620
[ 75.8057823] compat_ifioctl() at netbsd:compat_ifioctl+0x21b sys/compat/common/if_43.c:274
[ 75.8657840] doifioctl() at netbsd:doifioctl+0x1aa5 sys/net/if.c:3585
[ 75.9057826] soo_ioctl() at netbsd:soo_ioctl+0x3c7 sys/kern/sys_socket.c:210
[ 75.9557874] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 75.9957825] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 75.9957825] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 76.0457831] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 76.0457831] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 76.0457831] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 76.0557850] --- syscall (number 54 via SYS_syscall) ---
[ 76.0757823] netbsd:syscall+0x25a:
[ 76.0757823] cpu0: End traceback...
[ 76.0874959] fatal breakpoint trap in supervisor mode
[ 76.0874959] trap type 1 code 0 rip 0xffffffff8023230d cs 0x8 rflags 0x282 cr2 0x6fb9ea617000 ilevel 0x6 rsp 0xffffdc82510b5c70
[ 76.1035203] curlwp 0xffffdc8012d68bc0 pid 1466.720 lowest kstack 0xffffdc82510af2c0
Stopped in pid 1466.720 (syz-executor.0) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1059
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
kasan_memcpy() at netbsd:kasan_memcpy+0x90 kasan_shadow_Nbyte_isvalid sys/kern/subr_asan.c:382 [inline]
kasan_memcpy() at netbsd:kasan_memcpy+0x90 kasan_shadow_check sys/kern/subr_asan.c:427 [inline]
kasan_memcpy() at netbsd:kasan_memcpy+0x90 sys/kern/subr_asan.c:440
sockaddr_dup() at netbsd:sockaddr_dup+0xdc sockaddr_copy sys/kern/uipc_domain.c:345 [inline]
sockaddr_dup() at netbsd:sockaddr_dup+0xdc sys/kern/uipc_domain.c:402
rt_setgate() at netbsd:rt_setgate+0x4b sys/net/route.c:1329
rtrequest1() at netbsd:rtrequest1+0x4c7 sys/net/route.c:1238
rtrequest() at netbsd:rtrequest+0x100 sys/net/route.c:1058
aa_dosingleroute() at netbsd:aa_dosingleroute+0x1c8 sys/netatalk/at_control.c:820
at_ifinit() at netbsd:at_ifinit+0xd68 aa_addsingleroute sys/netatalk/at_control.c:766 [inline]
at_ifinit() at netbsd:at_ifinit+0xd68 sys/netatalk/at_control.c:639
at_control() at netbsd:at_control+0x875 sys/netatalk/at_control.c:306
ddp_ioctl_wrapper() at netbsd:ddp_ioctl_wrapper+0x34 ddp_ioctl sys/netatalk/ddp_usrreq.c:442 [inline]
ddp_ioctl_wrapper() at netbsd:ddp_ioctl_wrapper+0x34 sys/netatalk/ddp_usrreq.c:620
compat_ifioctl() at netbsd:compat_ifioctl+0x21b sys/compat/common/if_43.c:274
doifioctl() at netbsd:doifioctl+0x1aa5 sys/net/if.c:3585
soo_ioctl() at netbsd:soo_ioctl+0x3c7 sys/kern/sys_socket.c:210
sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x25a:
Panic string: ASan: Unauthorized Access In 0xffffffff81c5987d: Addr 0xffffdc8012930460 [172 bytes, read, MallocRedZone]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1579 1579 3 1 180 ffffdc8013f7e080 syz-executor.0 parked
1568 1610 3 0 180 ffffdc8012a38780 syz-executor.5 parked
1568 1568 2 0 10000000 ffffdc8012d25700 syz-executor.5
1490 1490 3 1 10000000 ffffdc8012c64740 syz-executor.4 xclocv
1466 > 720 7 0 100 ffffdc8012d68bc0 syz-executor.0
1466 1466 2 1 10040000 ffffdc8012d25b40 syz-executor.0
588 1465 3 0 40180 ffffdc8012d07240 syz-executor.2 parked
588 588 2 0 10040000 ffffdc8012cfc640 syz-executor.2
1329 1622 3 0 40180 ffffdc8012cfca80 syz-executor.1 parked
1329 1329 2 1 10040140 ffffdc8012cd4a00 syz-executor.1
1207 1207 2 1 140 ffffdc8013e34b00 syz-executor.4
1074 1074 2 1 140 ffffdc8013e346c0 syz-executor.5
1384 1384 2 1 40 ffffdc8013e07680 syz-executor.3
1237 1237 2 1 140 ffffdc8013ddf640 syz-executor.2
1246 1246 2 1 140 ffffdc8013ddf200 syz-executor.1
1243 1243 2 1 140 ffffdc8013cf2a40 syz-executor.0
1235 1214 3 1 180 ffffdc8013ec6700 syz-fuzzer parked
1235 1204 3 0 180 ffffdc8013e34280 syz-fuzzer kqueue
1235 1376 3 0 180 ffffdc8013e07ac0 syz-fuzzer wait
1235 449 3 1 1c0 ffffdc8013e07240 syz-fuzzer wait
1235 991 3 1 180 ffffdc8013ddfa80 syz-fuzzer wait
1235 1244 3 0 180 ffffdc8012ac2500 syz-fuzzer parked
1235 829 3 0 180 ffffdc8013cf21c0 syz-fuzzer wait
1235 801 3 0 180 ffffdc801341fb40 syz-fuzzer parked
1235 942 3 0 180 ffffdc801341f700 syz-fuzzer wait
1235 1088 3 1 180 ffffdc801341f2c0 syz-fuzzer parked
1235 1231 3 1 180 ffffdc8012a38340 syz-fuzzer parked
1235 1260 2 1 140 ffffdc80126d7b80 syz-fuzzer
1235 1235 3 0 180 ffffdc8013391a00 syz-fuzzer wait
1236 1236 3 0 180 ffffdc8012ac2940 sshd select
1254 1254 3 1 180 ffffdc801349f5c0 getty nanoslp
1112 1112 3 1 180 ffffdc801349f180 getty nanoslp
1222 1222 3 1 180 ffffdc80126dabc0 getty nanoslp
1151 1151 3 1 1c0 ffffdc8012a02b80 getty ttyraw
1095 1095 3 1 180 ffffdc80133b5640 sshd select
986 986 3 0 180 ffffdc8012d78040 powerd kqueue
700 700 3 0 180 ffffdc801343ebc0 syslogd kqueue
746 746 3 0 180 ffffdc8012c0bac0 dhcpcd poll
745 745 3 1 180 ffffdc8012cb0500 dhcpcd poll
585 585 3 1 180 ffffdc8012c1d6c0 dhcpcd poll
599 599 3 1 180 ffffdc8012c7f780 dhcpcd poll
487 487 3 0 180 ffffdc8012dbe0c0 dhcpcd poll
292 292 3 1 180 ffffdc8012da1900 dhcpcd poll
485 485 3 0 180 ffffdc8012da14c0 dhcpcd poll
1 1 3 1 180 ffffdc8012868180 init wait
0 815 3 0 200 ffffdc80129916c0 physiod physiod
0 196 3 0 200 ffffdc8012994700 pooldrain pooldrain
0 195 3 0 200 ffffdc80129942c0 ioflush syncer
0 194 3 1 200 ffffdc8012991b00 pgdaemon pgdaemon
0 167 3 1 200 ffffdc8012950ac0 usb7 usbevt
0 172 3 1 200 ffffdc8012950680 usb6 usbevt
0 170 3 0 200 ffffdc8012950240 usb5 usbevt
0 168 3 1 200 ffffdc8012905a80 usb4 usbevt
0 166 3 0 200 ffffdc8012905640 usb3 usbevt
0 165 3 1 200 ffffdc8012905200 usb2 usbevt
0 31 3 1 200 ffffdc80128c9a40 usb1 usbevt
0 63 3 1 200 ffffdc80128c9600 usb0 usbevt
0 126 3 1 200 ffffdc80128c91c0 usbtask-dr usbtsk
0 125 3 1 200 ffffdc8012868a00 usbtask-hc usbtsk
0 124 3 0 200 ffffdc8010d76b00 swwreboot swwreboot
0 123 3 0 200 ffffdc80128685c0 npfgc0 npfgcw
0 122 3 1 200 ffffdc801285a9c0 rt_free rt_free
0 121 3 1 200 ffffdc801285a580 unpgc unpgc
0 120 3 0 200 ffffdc801285a140 key_timehandler key_timehandler
0 119 3 1 200 ffffdc801270a980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffdc801270a540 icmp6_wqinput/0 icmp6_wqinput
0 > 117 7 1 200 ffffdc801270a100 nd6_timer
0 116 3 1 200 ffffdc8012703940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffdc8012703500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffdc80127030c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffdc80126f4900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffdc80126f44c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffdc80126f4080 icmp_wqinput/0 icmp_wqinput
0 110 2 1 200 ffffdc80126db8c0 rt_timer
0 109 3 1 200 ffffdc80126db040 vmem_rehash vmem_rehash
0 100 3 1 200 ffffdc80126d7300 entbutler entropy
0 99 3 1 200 ffffdc80120bcb40 viomb balloon
0 98 3 1 200 ffffdc80120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffdc80120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffdc8010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffdc8010d76280 pms0 pmsreset
0 28 3 1 200 ffffdc8010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffdc8010cbc680 softser/1
0 26 3 1 200 ffffdc8010cbc240 softclk/1 tstile
0 25 1 1 200 ffffdc8010cb9a80 softbio/1
0 24 1 1 200 ffffdc8010cb9640 softnet/1
0 23 1 1 201 ffffdc8010cb9200 idle/1
0 22 3 0 200 ffffdc800fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffdc800fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffdc800fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffdc800fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffdc800fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffdc800fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffdc800fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffffdc800fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffdc800fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffdc800fb49980 sopendfree sopendfr
0 12 3 0 200 ffffdc800fb49540 ifwdog ifwdog
0 11 3 0 200 ffffdc800fb49100 iflnkst iflnkst
0 10 3 0 200 ffffdc800fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffdc800fb3c500 vdrain vdrain
0 8 3 0 200 ffffdc800fb3c0c0 modunload mod_unld
0 7 2 0 200 ffffdc800fb33900 xcall/0
0 6 1 0 200 ffffdc800fb334c0 softser/0
0 5 1 0 200 ffffdc800fb33080 softclk/0
0 4 1 0 200 ffffdc800fb318c0 softbio/0
0 3 1 0 200 ffffdc800fb31480 softnet/0
0 2 1 0 201 ffffdc800fb31040 idle/0
0 0 3 0 200 ffffffff83347880 swapper uvm
[Locks tracked through LWPs]

****** LWP 1466.720 (syz-executor.0) @ 0xffffdc8012d68bc0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:if_initialize+0x284 sys/net/if.c:762)
lock address : ffffdc800f67d880
type : sleep/adaptive
initialized : netbsd:if_initialize+0x284
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc8012d68bc0 last held: 0xffffdc8012d68bc0
last locked* : netbsd:doifioctl+0x5ec
unlocked : netbsd:doifioctl+0x6f5
owner field : 0xffffdc8012d68bc0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc8012d68bc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffdc8012cb0500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffdc8012cb0500 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 585.585 (dhcpcd) @ 0xffffdc8012c1d6c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffdc8012c1d6c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffdc8012da1900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffdc8012da1900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffdc8012da14c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc8012da14c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffdc800fb49100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc800fb49100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffdc800fb33080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc800fb33080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83347880, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff83347880 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:main+0x12e sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x12e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc8012d68bc0 last held: 0xffffdc8012d68bc0
last locked* : netbsd:doifioctl+0x1c15
unlocked : netbsd:ddp_attach_wrapper+0x81
curcpu holds : 2 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:155)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffdc8012d68bc0 last held: 0xffffdc8012d68bc0
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffdc8000017180 0041 00000000 0x0 0x0
0xffffdc8000017200 0041 00000000 0x0 0x0
0xffffdc8000017280 0041 00000000 0x0 0x0
0xffffdc8000017300 0041 00000000 0x0 0x0
0xffffdc8000017380 0041 00000000 0x0 0x0
0xffffdc8000017400 0041 00000000 0x0 0x0
0xffffdc8000017480 0041 00000000 0x0 0x0
0xffffdc8000017500 0041 00000000 0x0 0x0
0xffffdc8000017580 0041 00000000 0x0 0x0
0xffffdc8000017600 0041 00000000 0x0 0x0
0xffffdc8000017680 0041 00000000 0x0 0x0
0xffffdc8000017700 0041 00000000 0x0 0x0
0xffffdc8000017780 0041 00000000 0x0 0x0
0xffffdc8000017800 0041 00000000 0x0 0x0
0xffffdc8000017880 0041 00000000 0x0 0x0
0xffffdc8000017900 0041 00000000 0x0 0x0
0xffffdc8000017980 0041 00000000 0x0 0x0
0xffffdc8000017a00 0041 00000000 0x0 0x0
0xffffdc8000017a80 0041 00000000 0x0 0x0
0xffffdc8000017b00 0041 00000000 0x0 0x0
0xffffdc8000017b80 0041 00000000 0x0 0x0
0xffffdc8000017c00 0041 00000000 0x0 0x0
0xffffdc8000017c80 0041 00000000 0x0 0x0
0xffffdc8000017d00 0041 00000000 0x0 0x0
0xffffdc8000017d80 0041 00000000 0x0 0x0
0xffffdc8000017e00 0041 00000000 0x0 0x0
0xffffdc8000017e80 0041 00000000 0x0 0x0
0xffffdc8000017f00 0041 00000000 0x0 0x0
0xffffdc8000017f80 0041 00000000 0x0 0x0
0xffffdc8000018000 0041 00000000 0x0 0x0
0xffffdc8000018080 0041 00000000 0x0 0x0
0xffffdc8000018100 0041 00000000 0x0 0x0
0xffffdc8000018180 0041 00000000 0x0 0x0
0xffffdc8000018200 0041 00000000 0x0 0x0
0xffffdc8000018280 0041 00000000 0x0 0x0
0xffffdc8000018300 0041 00000000 0x0 0x0
0xffffdc8000018380 0041 00000000 0x0 0x0
0xffffdc8000018400 0041 00000000 0x0 0x0
0xffffdc8000018480 0041 00000000 0x0 0x0
0xffffdc8000018500 0041 00000000 0x0 0x0
0xffffdc8000018580 0041 00000000 0x0 0x0
0xffffdc8000018600 0041 00000000 0x0 0x0
0xffffdc8000018680 0041 00000000 0x0 0x0
0xffffdc8000018700 0041 00000000 0x0 0x0
0xffffdc8000018780 0041 00000000 0x0 0x0
0xffffdc8000018800 0041 00000000 0x0 0x0
0xffffdc8000018880 0041 00000000 0x0 0x0
0xffffdc8000018900 0041 00000000 0x0 0x0
0xffffdc8000018980 0041 00000000 0x0 0x0
0xffffdc8000018a00 0041 00000000 0x0 0x0
0xffffdc8000018a80 0041 00000000 0x0 0x0
0xffffdc8000018b00 0041 00000000 0x0 0x0
0xffffdc8000018b80 0041 00000000 0x0 0x0
0xffffdc8000018c00 0041 00000000 0x0 0x0
0xffffdc8000018c80 0041 00000000 0x0 0x0
0xffffdc8000018d00 0041 00000000 0x0 0x0
0xffffdc8000018d80 0041 00000000 0x0 0x0
0xffffdc8000018e00 0041 00000000 0x0 0x0
0xffffdc8000018e80 0041 00000000 0x0 0x0
0xffffdc8000018f00 0041 00000000 0x0 0x0
0xffffdc8000018f80 0041 00000000 0x0 0x0
0xffffdc8000019000 0041 00000000 0x0 0x0
0xffffdc8000019080 0041 00000000 0x0 0x0
0xffffdc8000019100 0041 00000000 0x0 0x0
0xffffdc8000019180 0041 00000000 0x0 0x0
0xffffdc8000019200 0041 00000000 0x0 0x0
0xffffdc8000019280 0041 00000000 0x0 0x0
0xffffdc8000019300 0041 00000000 0x0 0x0
0xffffdc8000019380 0041 00000000 0x0 0x0
0xffffdc8000019400 0041 00000000 0x0 0x0
0xffffdc8000019480 0041 00000000 0x0 0x0
0xffffdc8000019500 0041 00000000 0x0 0x0
0xffffdc8000019580 0041 00000000 0x0 0x0
0xffffdc8000019600 0041 00000000 0x0 0x0
0xffffdc8000019680 0041 00000000 0x0 0x0
0xffffdc8000019700 0041 00000000 0x0 0x0
0xffffdc8000019780 0041 00000000 0x0 0x0
0xffffdc8000019800 0041 00000000 0x0 0x0
0xffffdc8000019880 0041 00000000 0x0 0x0
0xffffdc8000019900 0041 00000000 0x0 0x0
0xffffdc8000019980 0041 00000000 0x0 0x0
0xffffdc8000019a00 0041 00000000 0x0 0x0
0xffffdc8000019a80 0041 00000000 0x0 0x0
0xffffdc8000019b00 0041 00000000 0x0 0x0
0xffffdc8000019b80 0041 00000000 0x0 0x0
0xffffdc8000019c00 0041 00000000 0x0 0x0
0xffffdc8000019c80 0041 00000000 0x0 0x0
0xffffdc8000019d00 0041 00000000 0x0 0x0
0xffffdc8000019d80 0041 00000000 0x0 0x0
0xffffdc8000019e00 0041 00000000 0x0 0x0
0xffffdc8000019e80 0041 00000000 0x0 0x0
0xffffdc8000019f00 0041 00000000 0x0 0x0
0xffffdc8000019f80 0041 00000000 0x0 0x0
0xffffdc800001a000 0041 00000000 0x0 0x0
0xffffdc800001a080 0041 00000000 0x0 0x0
0xffffdc800001a100 0041 00000000 0x0 0x0
0xffffdc800001a180 0041 00000000 0x0 0x0
0xffffdc800001a200 0041 00000000 0x0 0x0
0xffffdc800001a280 0041 00000000 0x0 0x0
0xffffdc800001a300 0041 00000000 0x0 0x0
0xffffdc800001a380 0041 00000000 0x0 0x0
0xffffdc800001a400 0041 00000000 0x0 0x0
0xffffdc800001a480 0041 00000000 0x0 0x0
0xffffdc800001a500 0041 00000000 0x0 0x0
0xffffdc800001a580 0041 00000000 0x0 0x0
0xffffdc800001a600 0041 00000000 0x0 0x0
0xffffdc800001a680 0041 00000000 0x0 0x0
0xffffdc800001a700 0041 00000000 0x0 0x0
0xffffdc800001a780 0041 00000000 0x0 0x0
0xffffdc800001a800 0041 00000000 0x0 0x0
0xffffdc800001a880 0041 00000000 0x0 0x0
0xffffdc800001a900 0041 00000000 0x0 0x0
0xffffdc800001a980 0041 00000000 0x0 0x0
0xffffdc800001aa00 0041 00000000 0x0 0x0
0xffffdc800001aa80 0041 00000000 0x0 0x0
0xffffdc800001ab00 0041 00000000 0x0 0x0
0xffffdc800001ab80 0041 00000000 0x0 0x0
0xffffdc800001ac00 0041 00000000 0x0 0x0
0xffffdc800001ac80 0041 00000000 0x0 0x0
0xffffdc800001ad00 0041 00000000 0x0 0x0
0xffffdc800001ad80 0041 00000000 0x0 0x0
0xffffdc800001ae00 0041 00000000 0x0 0x0
0xffffdc800001ae80 0041 00000000 0x0 0x0
0xffffdc800001af00 0041 00000000 0x0 0x0
0xffffdc800001af80 0041 00000000 0x0 0x0
0xffffdc800001b000 0041 00000000 0x0 0x0
0xffffdc800001b080 0041 00000000 0x0 0x0
0xffffdc800001b100 0041 00000000 0x0 0x0
0xffffdc800001b180 0041 00000000 0x0 0x0
0xffffdc800001b200 0041 00000000 0x0 0x0
0xffffdc800001b280 0041 00000000 0x0 0x0
0xffffdc800001b300 0041 00000000 0x0 0x0
0xffffdc800001b380 0041 00000000 0x0 0x0
0xffffdc800001b400 0041 00000000 0x0 0x0
0xffffdc800001b480 0041 00000000 0x0 0x0
0xffffdc800001b500 0041 00000000 0x0 0x0
0xffffdc800001b580 0041 00000000 0x0 0x0
0xffffdc800001b600 0041 00000000 0x0 0x0
0xffffdc800001b680 0041 00000000 0x0 0x0
0xffffdc800001b700 0041 00000000 0x0 0x0
0xffffdc800001b780 0041 00000000 0x0 0x0
0xffffdc800001b800 0041 00000000 0x0 0x0
0xffffdc800001b880 0041 00000000 0x0 0x0
0xffffdc800001b900 0041 00000000 0x0 0x0
0xffffdc800001b980 0041 00000000 0x0 0x0
0xffffdc800001ba00 0041 00000000 0x0 0x0
0xffffdc800001ba80 0041 00000000 0x0 0x0
0xffffdc800001bb00 0041 00000000 0x0 0x0
0xffffdc800001bb80 0001 00000000 0x0 0x0
0xffffdc800001bc00 0001 00000000 0x0 0x0
0xffffdc800001bc80 0001 00000000 0x0 0x0
0xffffdc800001bd00 0001 00000000 0x0 0x0
0xffffdc800001bd80 0001 00000000 0x0 0x0
0xffffdc800001be00 0001 00000000 0x0 0x0
0xffffdc800001be80 0001 00000000 0x0 0x0
0xffffdc800001bf00 0001 00000000 0x0 0x0
0xffffdc800001bf80 0001 00000000 0x0 0x0
0xffffdc800001c000 0001 00000000 0x0 0x0
0xffffdc800001c080 0001 00000000 0x0 0x0
0xffffdc800001c100 0001 00000000 0x0 0x0
0xffffdc800001c180 0001 00000000 0x0 0x0
0xffffdc800001c200 0001 00000000 0x0 0x0
0xffffdc800001c280 0001 00000000 0x0 0x0
0xffffdc800001c300 0001 00000000 0x0 0x0
0xffffdc800001c380 0001 00000000 0x0 0x0
0xffffdc800001c400 0001 00000000 0x0 0x0
0xffffdc800001c480 0001 00000000 0x0 0x0
0xffffdc800001c500 0001 00000000 0x0 0x0
0xffffdc800001c580 0001 00000000 0x0 0x0
0xffffdc800001c600 0001 00000000 0x0 0x0
0xffffdc800001c680 0001 00000000 0x0 0x0
0xffffdc800001c700 0001 00000000 0x0 0x0
0xffffdc800001c780 0001 00000000 0x0 0x0
0xffffdc800001c800 0001 00000000 0x0 0x0
0xffffdc800001c880 0001 00000000 0x0 0x0
0xffffdc800001c900 0001 00000000 0x0 0x0
0xffffdc800001c980 0001 00000000 0x0 0x0
0xffffdc800001ca00 0001 00000000 0x0 0x0
0xffffdc800001ca80 0001 00000000 0x0 0x0
0xffffdc800001cb00 0001 00000000 0x0 0x0
0xffffdc800001cb80 0001 00000000 0x0 0x0
0xffffdc800001cc00 0001 00000000 0x0 0x0
0xffffdc800001cc80 0001 00000000 0x0 0x0
0xffffdc800001cd00 0001 00000000 0x0 0x0
0xffffdc800001cd80 0001 00000000 0x0 0x0
0xffffdc800001ce00 0001 00000000 0x0 0x0
0xffffdc800001ce80 0001 00000000 0x0 0x0
0xffffdc800001cf00 0001 00000000 0x0 0x0
0xffffdc800001cf80 0001 00000000 0x0 0x0
0xffffdc800001d000 0001 00000000 0x0 0x0
0xffffdc800001d080 0001 00000000 0x0 0x0
0xffffdc800001d100 0001 00000000 0x0 0x0
0xffffdc800001d180 0001 00000000 0x0 0x0
0xffffdc800001d200 0001 00000000 0x0 0x0
0xffffdc800001d280 0001 00000000 0x0 0x0
0xffffdc800001d300 0001 00000000 0x0 0x0
0xffffdc800001d380 0001 00000000 0x0 0x0
0xffffdc800001d400 0001 00000000 0x0 0x0
0xffffdc800001d480 0001 00000000 0x0 0x0
0xffffdc800001d500 0001 00000000 0x0 0x0
0xffffdc800001d580 0001 00000000 0x0 0x0
0xffffdc800001d600 0001 00000000 0x0 0x0
0xffffdc800001d680 0001 00000000 0x0 0x0
0xffffdc800001d700 0001 00000000 0x0 0x0
0xffffdc800001d780 0001 00000000 0x0 0x0
0xffffdc800001d800 0001 00000000 0x0 0x0
0xffffdc800001d880 0001 00000000 0x0 0x0
0xffffdc800001d900 0001 00000000 0x0 0x0
0xffffdc800001d980 0001 00000000 0x0 0x0
0xffffdc800001da00 0001 00000000 0x0 0x0
0xffffdc800001da80 0001 00000000 0x0 0x0
0xffffdc800001db00 0001 00000000 0x0 0x0
0xffffdc800001db80 0001 00000000 0x0 0x0
0xffffdc800001dc00 0001 00000000 0x0 0x0
0xffffdc800001dc80 0001 00000000 0x0 0x0
0xffffdc800001dd00 0001 00000000 0x0 0x0
0xffffdc800001dd80 0001 00000000 0x0 0x0
0xffffdc800001de00 0001 00000000 0x0 0x0
0xffffdc800001de80 0001 00000000 0x0 0x0
0xffffdc800001df00 0001 00000000 0x0 0x0
0xffffdc800001df80 0001 00000000 0x0 0x0
0xffffdc800001e000 0001 00000000 0x0 0x0
0xffffdc800001e080 0001 00000000 0x0 0x0
0xffffdc800001e100 0001 00000000 0x0 0x0
0xffffdc800001e180 0001 00000000 0x0 0x0
0xffffdc800001e200 0001 00000000 0x0 0x0
0xffffdc800001e280 0001 00000000 0x0 0x0
0xffffdc800001e300 0001 00000000 0x0 0x0
0xffffdc800001e380 0001 00000000 0x0 0x0
0xffffdc800001e400 0001 00000000 0x0 0x0
0xffffdc800001e480 0001 00000000 0x0 0x0
0xffffdc800001e500 0001 00000000 0x0 0x0
0xffffdc800001e580 0001 00000000 0x0 0x0
0xffffdc800001e600 0001 00000000 0x0 0x0
0xffffdc800001e680 0001 00000000 0x0 0x0
0xffffdc800001e700 0001 00000000 0x0 0x0
0xffffdc800001e780 0001 00000000 0x0 0x0
0xffffdc800001e800 0001 00000000 0x0 0x0
0xffffdc800001e880 0001 00000000 0x0 0x0
0xffffdc800001e900 0001 00000000 0x0 0x0
0xffffdc800001e980 0001 00000000 0x0 0x0
0xffffdc800001ea00 0001 00000000 0x0 0x0
0xffffdc800001ea80 0001 00000000 0x0 0x0
0xffffdc800001eb00 0001 00000000 0x0 0x0
0xffffdc800001eb80 0001 00000000 0x0 0x0
0xffffdc800001ec00 0001 00000000 0x0 0x0
0xffffdc800001ec80 0001 00000000 0x0 0x0
0xffffdc800001ed00 0001 00000000 0x0 0x0
0xffffdc800001ed80 0001 00000000 0x0 0x0
0xffffdc800001ee00 0001 00000000 0x0 0x0
0xffffdc800001ee80 0001 00000000 0x0 0x0
0xffffdc800001ef00 0001 00000000 0x0 0x0
0xffffdc800001ef80 0001 00000000 0x0 0x0
0xffffdc800001f000 0001 00000000 0x0 0x0
0xffffdc800001f080 0001 00000000 0x0 0x0
0xffffdc800001f100 0001 00000000 0x0 0x0
0xffffdc800001f180 0001 00000000 0x0 0x0
0xffffdc800001f200 0001 00000000 0x0 0x0
0xffffdc800001f280 0001 00000000 0x0 0x0
0xffffdc800001f300 0001 00000000 0x0 0x0
0xffffdc800001f380 0001 00000000 0x0 0x0
0xffffdc800001f400 0001 00000000 0x0 0x0
0xffffdc800001f480 0001 00000000 0x0 0x0
0xffffdc800001f500 0001 00000000 0x0 0x0
0xffffdc800001f580 0001 00000000 0x0 0x0
0xffffdc800001f600 0001 00000000 0x0 0x0
0xffffdc800001f680 0001 00000000 0x0 0x0
0xffffdc800001f700 0001 00000000 0x0 0x0
0xffffdc800001f780 0001 00000000 0x0 0x0
0xffffdc800001f800 0001 00000000 0x0 0x0
0xffffdc800001f880 0001 00000000 0x0 0x0
0xffffdc800001f900 0001 00000000 0x0 0x0
0xffffdc800001f980 0001 00000000 0x0 0x0
0xffffdc800001fa00 0001 00000000 0x0 0x0
0xffffdc800001fa80 0001 00000000 0x0 0x0
0xffffdc800001fb00 0001 00000000 0x0 0x0
0xffffdc800001fb80 0001 00000000 0x0 0x0
0xffffdc800001fc00 0001 00000000 0x0 0x0
0xffffdc800001fc80 0001 00000000 0x0 0x0
0xffffdc800001fd00 0001 00000000 0x0 0x0
0xffffdc800001fd80 0001 00000000 0x0 0x0
0xffffdc800001fe00 0001 00000000 0x0 0x0
0xffffdc800001fe80 0001 00000000 0x0 0x0
0xffffdc800001ff00 0001 00000000 0x0 0x0
0xffffdc800001ff80 0001 00000000 0x0 0x0
0xffffdc8000020000 0001 00000000 0x0 0x0
0xffffdc8000020080 0001 00000000 0x0 0x0
0xffffdc8000020100 0001 00000000 0x0 0x0
0xffffdc8000020180 0001 00000000 0x0 0x0
0xffffdc8000020200 0001 00000000 0x0 0x0
0xffffdc8000020280 0001 00000000 0x0 0x0
0xffffdc8000020300 0001 00000000 0x0 0x0
0xffffdc8000020380 0001 00000000 0x0 0x0
0xffffdc8000020400 0001 00000000 0x0 0x0
0xffffdc8000020480 0001 00000000 0x0 0x0
0xffffdc8000020500 0001 00000000 0x0 0x0
0xffffdc8000020580 0001 00000000 0x0 0x0
0xffffdc8000020600 0001 00000000 0x0 0x0
0xffffdc8000020680 0001 00000000 0x0 0x0
0xffffdc8000020700 0001 00000000 0x0 0x0
0xffffdc8000020780 0001 00000000 0x0 0x0
0xffffdc8000020800 0001 00000000 0x0 0x0
0xffffdc8000020880 0001 00000000 0x0 0x0
0xffffdc8000020900 0001 00000000 0x0 0x0
0xffffdc8000020980 0001 00000000 0x0 0x0
0xffffdc8000020a00 0001 00000000 0x0 0x0
0xffffdc8000020a80 0001 00000000 0x0 0x0
0xffffdc8000020b00 0001 00000000 0x0 0x0
0xffffdc8000020b80 0001 00000000 0x0 0x0
0xffffdc8000020c00 0001 00000000 0x0 0x0
0xffffdc8000020c80 0001 00000000 0x0 0x0
0xffffdc8000020d00 0001 00000000 0x0 0x0
0xffffdc8000020d80 0001 00000000 0x0 0x0
0xffffdc8000020e00 0001 00000000 0x0 0x0
0xffffdc8000020e80 0001 00000000 0x0 0x0
0xffffdc8000020f00 0001 00000000 0x0 0x0
0xffffdc8000020f80 0001 00000000 0x0 0x0
0xffffdc8000021000 0001 00000000 0x0 0x0
0xffffdc8000021080 0001 00000000 0x0 0x0
0xffffdc8000021100 0001 00000000 0x0 0x0
0xffffdc8000021180 0001 00000000 0x0 0x0
0xffffdc8000021200 0001 00000000 0x0 0x0
0xffffdc8000021280 0001 00000000 0x0 0x0
0xffffdc8000021300 0001 00000000 0x0 0x0
0xffffdc8000021380 0001 00000000 0x0 0x0
0xffffdc8000021400 0001 00000000 0x0 0x0
0xffffdc8000021480 0001 00000000 0x0 0x0
0xffffdc8000021500 0001 00000000 0x0 0x0
0xffffdc8000021580 0001 00000000 0x0 0x0
0xffffdc8000021600 0001 00000000 0x0 0x0
0xffffdc8000021680 0001 00000000 0x0 0x0
0xffffdc8000021700 0001 00000000 0x0 0x0
0xffffdc8000021780 0001 00000000 0x0 0x0
0xffffdc8000021800 0001 00000000 0x0 0x0
0xffffdc8000021880 0001 00000000 0x0 0x0
0xffffdc8000021900 0001 00000000 0x0 0x0
0xffffdc8000021980 0001 00000000 0x0 0x0
0xffffdc8000021a00 0001 00000000 0x0 0x0
0xffffdc8000021a80 0001 00000000 0x0 0x0
0xffffdc8000021b00 0001 00000000 0x0 0x0
0xffffdc8000021b80 0001 00000000 0x0 0x0
0xffffdc8000021c00 0001 00000000 0x0 0x0
0xffffdc8000021c80 0001 00000000 0x0 0x0
0xffffdc8000021d00 0001 00000000 0x0 0x0
0xffffdc8000021d80 0001 00000000 0x0 0x0
0xffffdc8000021e00 0001 00000000 0x0 0x0
0xffffdc8000021e80 0001 00000000 0x0 0x0
0xffffdc8000021f00 0001 00000000 0x0 0x0
0xffffdc8000021f80 0001 00000000 0x0 0x0
0xffffdc8000022000 0001 00000000 0x0 0x0
0xffffdc8000022080 0001 00000000 0x0 0x0
0xffffdc8000022100 0001 00000000 0x0 0x0
0xffffdc8000022180 0001 00000000 0x0 0x0
0xffffdc8000022200 0001 00000000 0x0 0x0
0xffffdc8000022280 0001 00000000 0x0 0x0
0xffffdc8000022300 0001 00000000 0x0 0x0
0xffffdc8000022380 0001 00000000 0x0 0x0
0xffffdc8000022400 0001 00000000 0x0 0x0
0xffffdc8000022480 0001 00000000 0x0 0x0
0xffffdc8000022500 0001 00000000 0x0 0x0
0xffffdc8000022580 0001 00000000 0x0 0x0
0xffffdc8000022600 0001 00000000 0x0 0x0
0xffffdc8000022680 0001 00000000 0x0 0x0
0xffffdc8000022700 0001 00000000 0x0 0x0
0xffffdc8000022780 0001 00000000 0x0 0x0
0xffffdc8000022800 0001 00000000 0x0 0x0
0xffffdc8000022880 0001 00000000 0x0 0x0
0xffffdc8000022900 0001 00000000 0x0 0x0
0xffffdc8000022980 0001 00000000 0x0 0x0
0xffffdc8000022a00 0001 00000000 0x0 0x0
0xffffdc8000022a80 0001 00000000 0x0 0x0
0xffffdc8000022b00 0001 00000000 0x0 0x0
0xffffdc8000022b80 0001 00000000 0x0 0x0
0xffffdc8000022c00 0001 00000000 0x0 0x0
0xffffdc8000022c80 0001 00000000 0x0 0x0
0xffffdc8000022d00 0001 00000000 0x0 0x0
0xffffdc8000022d80 0001 00000000 0x0 0x0
0xffffdc8000022e00 0001 00000000 0x0 0x0
0xffffdc8000022e80 0001 00000000 0x0 0x0
0xffffdc8000022f00 0001 00000000 0x0 0x0
0xffffdc8000022f80 0001 00000000 0x0 0x0
0xffffdc8000023000 0001 00000000 0x0 0x0
0xffffdc8000023080 0001 00000000 0x0 0x0
0xffffdc8000023100 0001 00000000 0x0 0x0
0xffffdc8000023180 0001 00000000 0x0 0x0
0xffffdc8000023200 0001 00000000 0x0 0x0
0xffffdc8000023280 0001 00000000 0x0 0x0
0xffffdc8000023300 0001 00000000 0x0 0x0
0xffffdc8000023380 0001 00000000 0x0 0x0
0xffffdc8000023400 0001 00000000 0x0 0x0
0xffffdc8000023480 0001 00000000 0x0 0x0
0xffffdc8000023500 0001 00000000 0x0 0x0
0xffffdc8000023580 0001 00000000 0x0 0x0
0xffffdc8000023600 0001 00000000 0x0 0x0
0xffffdc8000023680 0001 00000000 0x0 0x0
0xffffdc8000023700 0001 00000000 0x0 0x0
0xffffdc8000023780 0001 00000000 0x0 0x0
0xffffdc8000023800 0001 00000000 0x0 0x0
0xffffdc8000023880 0001 00000000 0x0 0x0
0xffffdc8000023900 0001 00000000 0x0 0x0
0xffffdc8000023980 0001 00000000 0x0 0x0
0xffffdc8000023a00 0001 00000000 0x0 0x0
0xffffdc8000023a80 0001 00000000 0x0 0x0
0xffffdc8000023b00 0001 00000000 0x0 0x0
0xffffdc8000023b80 0001 00000000 0x0 0x0
0xffffdc8000023c00 0001 00000000 0x0 0x0
0xffffdc8000023c80 0001 00000000 0x0 0x0
0xffffdc8000023d00 0001 00000000 0x0 0x0
0xffffdc8000023d80 0001 00000000 0x0 0x0
0xffffdc8000023e00 0001 00000000 0x0 0x0
0xffffdc8000023e80 0001 00000000 0x0 0x0
0xffffdc8000023f00 0001 00000000 0x0 0x0
0xffffdc8000023f80 0001 00000000 0x0 0x0
0xffffdc8000024000 0001 00000000 0x0 0x0
0xffffdc8000024080 0001 00000000 0x0 0x0
0xffffdc8000024100 0001 00000000 0x0 0x0
0xffffdc8000024180 0001 00000000 0x0 0x0
0xffffdc8000024200 0001 00000000 0x0 0x0
0xffffdc8000024280 0001 00000000 0x0 0x0
0xffffdc8000024300 0001 00000000 0x0 0x0
0xffffdc8000024380 0001 00000000 0x0 0x0
0xffffdc8000024400 0001 00000000 0x0 0x0
0xffffdc8000024480 0001 00000000 0x0 0x0
0xffffdc8000024500 0001 00000000 0x0 0x0
0xffffdc8000024580 0001 00000000 0x0 0x0
0xffffdc8000024600 0001 00000000 0x0 0x0
0xffffdc8000024680 0001 00000000 0x0 0x0
0xffffdc8000024700 0001 00000000 0x0 0x0
0xffffdc8000024780 0001 00000000 0x0 0x0
0xffffdc8000024800 0001 00000000 0x0 0x0
0xffffdc8000024880 0001 00000000 0x0 0x0
0xffffdc8000024900 0001 00000000 0x0 0x0
0xffffdc8000024980 0001 00000000 0x0 0x0
0xffffdc8000024a00 0001 00000000 0x0 0x0
0xffffdc8000024a80 0001 00000000 0x0 0x0
0xffffdc8000024b00 0001 00000000 0x0 0x0
0xffffdc8000024b80 0001 00000000 0x0 0x0
0xffffdc8000024c00 0001 00000000 0x0 0x0
0xffffdc8000024c80 0001 00000000 0x0 0x0
0xffffdc8000024d00 0001 00000000 0x0 0x0
0xffffdc8000024d80 0001 00000000 0x0 0x0
0xffffdc8000024e00 0001 00000000 0x0 0x0
0xffffdc8000024e80 0001 00000000 0x0 0x0
0xffffdc8000024f00 0001 00000000 0x0 0x0
0xffffdc8000024f80 0001 00000000 0x0 0x0
0xffffdc8000025000 0001 00000000 0x0 0x0
0xffffdc8000025080 0001 00000000 0x0 0x0
0xffffdc8000025100 0001 00000000 0x0 0x0
0xffffdc8000025180 0001 00000000 0x0 0x0
0xffffdc8000025200 0001 00000000 0x0 0x0
0xffffdc8000025280 0001 00000000 0x0 0x0
0xffffdc8000025300 0001 00000000 0x0 0x0
0xffffdc8000025380 0001 00000000 0x0 0x0
0xffffdc8000025400 0001 00000000 0x0 0x0
0xffffdc8000025480 0001 00000000 0x0 0x0
0xffffdc8000025500 0001 00000000 0x0 0x0
0xffffdc8000025580 0001 00000000 0x0 0x0
0xffffdc8000025600 0001 00000000 0x0 0x0
0xffffdc8000025680 0001 00000000 0x0 0x0
0xffffdc8000025700 0001 00000000 0x0 0x0
0xffffdc8000025780 0001 00000000 0x0 0x0
0xffffdc8000025800 0001 00000000 0x0 0x0
0xffffdc8000025880 0001 00000000 0x0 0x0
0xffffdc8000025900 0001 00000000 0x0 0x0
0xffffdc8000025980 0001 00000000 0x0 0x0
0xffffdc8000025a00 0001 00000000 0x0 0x0
0xffffdc8000025a80 0001 00000000 0x0 0x0
0xffffdc8000025b00 0001 00000000 0x0 0x0
0xffffdc8000025b80 0001 00000000 0x0 0x0
0xffffdc8000025c00 0001 00000000 0x0 0x0
0xffffdc8000025c80 0001 00000000 0x0 0x0
0xffffdc8000025d00 0001 00000000 0x0 0x0
0xffffdc8000025d80 0001 00000000 0x0 0x0
0xffffdc8000025e00 0001 00000000 0x0 0x0
0xffffdc8000025e80 0001 00000000 0x0 0x0
0xffffdc8000025f00 0001 00000000 0x0 0x0
0xffffdc8000025f80 0001 00000000 0x0 0x0
0xffffdc8000026000 0001 00000000 0x0 0x0
0xffffdc8000026080 0001 00000000 0x0 0x0
0xffffdc8000026100 0001 00000000 0x0 0x0
0xffffdc8000026180 0001 00000000 0x0 0x0
0xffffdc8000026200 0001 00000000 0x0 0x0
0xffffdc8000026280 0001 00000000 0x0 0x0
0xffffdc8000026300 0001 00000000 0x0 0x0
0xffffdc8000026380 0001 00000000 0x0 0x0
0xffffdc8000026400 0001 00000000 0x0 0x0
0xffffdc8000026480 0001 00000000 0x0 0x0
0xffffdc8000026500 0001 00000000 0x0 0x0
0xffffdc8000026580 0001 00000000 0x0 0x0
0xffffdc8000026600 0001 00000000 0x0 0x0
0xffffdc8000026680 0001 00000000 0x0 0x0
0xffffdc8000026700 0001 00000000 0x0 0x0
0xffffdc8000026780 0001 00000000 0x0 0x0
0xffffdc8000026800 0001 00000000 0x0 0x0
0xffffdc8000026880 0001 00000000 0x0 0x0
0xffffdc8000026900 0001 00000000 0x0 0x0
0xffffdc8000026980 0001 00000000 0x0 0x0
0xffffdc8000026a00 0001 00000000 0x0 0x0
0xffffdc8000026a80 0001 00000000 0x0 0x0
0xffffdc8000026b00 0001 00000000 0x0 0x0
0xffffdc8000026b80 0001 00000000 0x0 0x0
0xffffdc8000026c00 0001 00000000 0x0 0x0
0xffffdc8000026c80 0001 00000000 0x0 0x0
0xffffdc8000026d00 0001 00000000 0x0 0x0
0xffffdc8000026d80 0001 00000000 0x0 0x0
0xffffdc8000026e00 0001 00000000 0x0 0x0
0xffffdc8000026e80 0001 00000000 0x0 0x0
0xffffdc8000026f00 0001 00000000 0x0 0x0
0xffffdc8000026f80 0001 00000000 0x0 0x0
0xffffdc8000027000 0001 00000000 0x0 0x0
0xffffdc8000027080 0001 00000000 0x0 0x0
0xffffdc8000027100 0001 00000000 0x0 0x0
0xffffdc8000027180 0001 00000000 0x0 0x0
0xffffdc8000027200 0001 00000000 0x0 0x0
0xffffdc8000027280 0001 00000000 0x0 0x0
0xffffdc8000027300 0001 00000000 0x0 0x0
0xffffdc8000027380 0001 00000000 0x0 0x0
0xffffdc8000027400 0001 00000000 0x0 0x0
0xffffdc8000027480 0001 00000000 0x0 0x0
0xffffdc8000027500 0001 00000000 0x0 0x0
0xffffdc8000027580 0001 00000000 0x0 0x0
0xffffdc8000027600 0001 00000000 0x0 0x0
0xffffdc8000027680 0001 00000000 0x0 0x0
0xffffdc8000027700 0001 00000000 0x0 0x0
0xffffdc8000027780 0001 00000000 0x0 0x0
0xffffdc8000027800 0001 00000000 0x0 0x0
0xffffdc8000027880 0001 00000000 0x0 0x0
0xffffdc8000027900 0001 00000000 0x0 0x0
0xffffdc8000027980 0001 00000000 0x0 0x0
0xffffdc8000027a00 0001 00000000 0x0 0x0
0xffffdc8000027a80 0001 00000000 0x0 0x0
0xffffdc8000027b00 0001 00000000 0x0 0x0
0xffffdc8000027b80 0001 00000000 0x0 0x0
0xffffdc8000027c00 0001 00000000 0x0 0x0
0xffffdc8000027c80 0001 00000000 0x0 0x0
0xffffdc8000027d00 0001 00000000 0x0 0x0
0xffffdc8000027d80 0001 00000000 0x0 0x0
0xffffdc8000027e00 0001 00000000 0x0 0x0
0xffffdc8000027e80 0001 00000000 0x0 0x0
0xffffdc8000027f00 0001 00000000 0x0 0x0
0xffffdc8000027f80 0001 00000000 0x0 0x0
0xffffdc8000028000 0001 00000000 0x0 0x0
0xffffdc8000028080 0001 00000000 0x0 0x0
0xffffdc8000028100 0001 00000000 0x0 0x0
0xffffdc8000028180 0001 00000000 0x0 0x0
0xffffdc8000028200 0001 00000000 0x0 0x0
0xffffdc8000028280 0001 00000000 0x0 0x0
0xffffdc8000028300 0001 00000000 0x0 0x0
0xffffdc8000028380 0001 00000000 0x0 0x0
0xffffdc8000028400 0001 00000000 0x0 0x0
0xffffdc8000028480 0001 00000000 0x0 0x0
0xffffdc8000028500 0001 00000000 0x0 0x0
0xffffdc8000028580 0001 00000000 0x0 0x0
0xffffdc8000028600 0001 00000000 0x0 0x0
0xffffdc8000028680 0001 00000000 0x0 0x0
0xffffdc8000028700 0001 00000000 0x0 0x0
0xffffdc8000028780 0001 00000000 0x0 0x0
0xffffdc8000028800 0001 00000000 0x0 0x0
0xffffdc8000028880 0001 00000000 0x0 0x0
0xffffdc8000028900 0001 00000000 0x0 0x0
0xffffdc8000028980 0001 00000000 0x0 0x0
0xffffdc8000028a00 0001 00000000 0x0 0x0
0xffffdc8000028a80 0001 00000000 0x0 0x0
0xffffdc8000028b00 0001 00000000 0x0 0x0
0xffffdc8000028b80 0001 00000000 0x0 0x0
0xffffdc8000028c00 0001 00000000 0x0 0x0
0xffffdc8000028c80 0001 00000000 0x0 0x0
0xffffdc8000028d00 0001 00000000 0x0 0x0
0xffffdc8000028d80 0001 00000000 0x0 0x0
0xffffdc8000028e00 0001 00000000 0x0 0x0
0xffffdc8000028e80 0001 00000000 0x0 0x0
0xffffdc8000028f00 0001 00000000 0x0 0x0
0xffffdc8000028f80 0001 00000000 0x0 0x0
0xffffdc8000029000 0001 00000000 0x0 0x0
0xffffdc8000029080 0001 00000000 0x0 0x0
0xffffdc8000029100 0001 00000000 0x0 0x0
0xffffdc8000029180 0001 00000000 0x0 0x0
0xffffdc8000029200 0001 00000000 0x0 0x0
0xffffdc8000029280 0001 00000000 0x0 0x0
0xffffdc8000029300 0001 00000000 0x0 0x0
0xffffdc8000029380 0001 00000000 0x0 0x0
0xffffdc8000029400 0001 00000000 0x0 0x0
0xffffdc8000029480 0001 00000000 0x0 0x0
0xffffdc8000029500 0001 00000000 0x0 0x0
0xffffdc8000029580 0001 00000000 0x0 0x0
0xffffdc8000029600 0001 00000000 0x0 0x0
0xffffdc8000029680 0001 00000000 0x0 0x0
0xffffdc8000029700 0001 00000000 0x0 0x0
0xffffdc8000029780 0001 00000000 0x0 0x0
0xffffdc8000029800 0001 00000000 0x0 0x0
0xffffdc8000029880 0001 00000000 0x0 0x0
0xffffdc8000029900 0001 00000000 0x0 0x0
0xffffdc8000029980 0001 00000000 0x0 0x0
0xffffdc8000029a00 0001 00000000 0x0 0x0
0xffffdc8000029a80 0001 00000000 0x0 0x0
0xffffdc8000029b00 0001 00000000 0x0 0x0
0xffffdc8000029b80 0001 00000000 0x0 0x0
0xffffdc8000029c00 0001 00000000 0x0 0x0
0xffffdc8000029c80 0001 00000000 0x0 0x0
0xffffdc8000029d00 0001 00000000 0x0 0x0
0xffffdc8000029d80 0001 00000000 0x0 0x0
0xffffdc8000029e00 0001 00000000 0x0 0x0
0xffffdc8000029e80 0001 00000000 0x0 0x0
0xffffdc8000029f00 0001 00000000 0x0 0x0
0xffffdc8000029f80 0001 00000000 0x0 0x0
0xffffdc800002a000 0001 00000000 0x0 0x0
0xffffdc800002a080 0001 00000000 0x0 0x0
0xffffdc800002a100 0001 00000000 0x0 0x0
0xffffdc800002a180 0001 00000000 0x0 0x0
0xffffdc800002a200 0001 00000000 0x0 0x0
0xffffdc800002a280 0001 00000000 0x0 0x0
0xffffdc800002a300 0001 00000000 0x0 0x0
0xffffdc800002a380 0001 00000000 0x0 0x0
0xffffdc800002a400 0001 00000000 0x0 0x0
0xffffdc800002a480 0001 00000000 0x0 0x0
0xffffdc800002a500 0001 00000000 0x0 0x0
0xffffdc800002a580 0001 00000000 0x0 0x0
0xffffdc800002a600 0001 00000000 0x0 0x0
0xffffdc800002a680 0001 00000000 0x0 0x0
0xffffdc800002a700 0001 00000000 0x0 0x0
0xffffdc800002a780 0001 00000000 0x0 0x0
0xffffdc800002a800 0001 00000000 0x0 0x0
0xffffdc800002a880 0001 00000000 0x0 0x0
0xffffdc800002a900 0001 00000000 0x0 0x0
0xffffdc800002a980 0001 00000000 0x0 0x0
0xffffdc800002aa00 0001 00000000 0x0 0x0
0xffffdc800002aa80 0001 00000000 0x0 0x0
0xffffdc800002ab00 0001 00000000 0x0 0x0
0xffffdc800002ab80 0001 00000000 0x0 0x0
0xffffdc800002ac00 0001 00000000 0x0 0x0
0xffffdc800002ac80 0001 00000000 0x0 0x0
0xffffdc800002ad00 0001 000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Mar 22, 2023, 1:36:48 AM3/22/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 0e061ac199c7 Use "sigjmp_buf loc" after switch to sigsetjm..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=139a3186c80000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=705a2a35990549b12c8d
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1406b87ac80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10c27281c80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a1dbac512deb/disk-0e061ac1.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/37c8b9102b6c/netbsd-0e061ac1.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+705a2a...@syzkaller.appspotmail.com

[ 53.5650346] panic: ASan: Unauthorized Access In 0xffffffff81c5987d: Addr 0xffffa600128fb7e0 [172 bytes, read, MallocRedZone]

[ 53.5850033] cpu1: Begin traceback...
[ 53.6050052] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
[ 53.6650073] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1059
[ 53.7150104] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
[ 53.7150104] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
[ 53.7550091] kasan_memcpy() at netbsd:kasan_memcpy+0x90 kasan_shadow_Nbyte_isvalid sys/kern/subr_asan.c:382 [inline]
[ 53.7550091] kasan_memcpy() at netbsd:kasan_memcpy+0x90 kasan_shadow_check sys/kern/subr_asan.c:427 [inline]
[ 53.7550091] kasan_memcpy() at netbsd:kasan_memcpy+0x90 sys/kern/subr_asan.c:440
[ 53.8050419] sockaddr_dup() at netbsd:sockaddr_dup+0xdc sockaddr_copy sys/kern/uipc_domain.c:345 [inline]
[ 53.8050419] sockaddr_dup() at netbsd:sockaddr_dup+0xdc sys/kern/uipc_domain.c:402
[ 53.8450049] rt_setgate() at netbsd:rt_setgate+0x4b sys/net/route.c:1329
[ 53.8850266] rtrequest1() at netbsd:rtrequest1+0x4c7 sys/net/route.c:1238
[ 53.9250062] rtrequest() at netbsd:rtrequest+0x100 sys/net/route.c:1058
[ 53.9750213] aa_dosingleroute() at netbsd:aa_dosingleroute+0x1c8 sys/netatalk/at_control.c:820
[ 54.0150059] at_ifinit() at netbsd:at_ifinit+0xd68 aa_addsingleroute sys/netatalk/at_control.c:766 [inline]
[ 54.0150059] at_ifinit() at netbsd:at_ifinit+0xd68 sys/netatalk/at_control.c:639
[ 54.0550089] at_control() at netbsd:at_control+0x875 sys/netatalk/at_control.c:306
[ 54.0950036] ddp_ioctl_wrapper() at netbsd:ddp_ioctl_wrapper+0x34 ddp_ioctl sys/netatalk/ddp_usrreq.c:442 [inline]
[ 54.0950036] ddp_ioctl_wrapper() at netbsd:ddp_ioctl_wrapper+0x34 sys/netatalk/ddp_usrreq.c:620
[ 54.1450058] compat_ifioctl() at netbsd:compat_ifioctl+0x21b sys/compat/common/if_43.c:274
[ 54.1850070] doifioctl() at netbsd:doifioctl+0x1aa5 sys/net/if.c:3585
[ 54.2350043] soo_ioctl() at netbsd:soo_ioctl+0x3c7 sys/kern/sys_socket.c:210
[ 54.2750044] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 54.3150077] sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 54.3150077] sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90
[ 54.3550055] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 54.3550055] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 54.3550055] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 54.3750050] --- syscall (number 54 via SYS_syscall) ---
[ 54.3850011] netbsd:syscall+0x25a:
[ 54.3950051] cpu1: End traceback...
[ 54.3950051] fatal breakpoint trap in supervisor mode
[ 54.3950051] trap type 1 code 0 rip 0xffffffff8023230d cs 0x8 rflags 0x282 cr2 0x742843a3ed30 ilevel 0x6 rsp 0xffffa602483bac70
[ 54.4050023] curlwp 0xffffa600133c4240 pid 1242.1242 lowest kstack 0xffffa602483b42c0
Stopped in pid 1242.1242 (syz-executor3430) at netbsd:breakpoint+0x5: leave

sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x25a:

Panic string: ASan: Unauthorized Access In 0xffffffff81c5987d: Addr 0xffffa600128fb7e0 [172 bytes, read, MallocRedZone]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

449 449 2 0 0 ffffa60013cf8640 syz-executor3430
1239 1239 2 0 0 ffffa60013cf8200 syz-executor3430
1078 1078 2 0 0 ffffa60013cd5a40 syz-executor3430
991 991 2 0 0 ffffa60013cd5600 syz-executor3430
1115 >1115 7 0 0 ffffa60013cd51c0 syz-executor3430
942 942 2 0 0 ffffa600133c4ac0 syz-executor3430
929 929 2 0 0 ffffa600133c4680 syz-executor3430
1242 >1242 7 1 0 ffffa600133c4240 syz-executor3430
1226 1226 2 0 140 ffffa60012c69b80 syz-executor3430
1235 1235 3 1 180 ffffa60013421b40 syz-executor3430 nanoslp
1229 1229 3 1 180 ffffa60013442bc0 syz-executor3430 nanoslp
1237 1237 3 0 180 ffffa60012b8a580 syz-executor3430 nanoslp
1080 1080 3 1 40180 ffffa60012b6b540 sshd select
1151 1151 3 0 180 ffffa600126db480 getty nanoslp
1132 1132 3 0 180 ffffa600134a3180 getty nanoslp
1081 1081 3 0 180 ffffa600126d7b80 getty nanoslp
1079 1079 3 0 1c0 ffffa60012991280 getty ttyraw
1110 1110 3 1 180 ffffa600133b7a80 sshd select
1056 1056 3 1 180 ffffa60012d67780 powerd kqueue
702 702 3 1 180 ffffa600133dcb00 syslogd kqueue
746 746 3 1 180 ffffa600126dabc0 dhcpcd poll
747 747 3 0 180 ffffa60012cc0100 dhcpcd poll
742 742 3 0 180 ffffa600126da780 dhcpcd poll
487 487 3 0 180 ffffa60012dbc0c0 dhcpcd poll
292 292 3 0 180 ffffa60012d9c900 dhcpcd poll
485 485 3 0 180 ffffa60012d9c4c0 dhcpcd poll
1 1 3 0 180 ffffa60012868180 init wait
0 967 3 0 200 ffffa600129916c0 physiod physiod
0 196 3 0 200 ffffa60012994700 pooldrain pooldrain
0 195 3 0 200 ffffa600129942c0 ioflush syncer
0 194 3 1 200 ffffa60012991b00 pgdaemon pgdaemon
0 167 3 0 200 ffffa60012950ac0 usb7 usbevt
0 172 3 0 200 ffffa60012950680 usb6 usbevt
0 170 3 0 200 ffffa60012950240 usb5 usbevt
0 168 3 0 200 ffffa60012905a80 usb4 usbevt
0 166 3 0 200 ffffa60012905640 usb3 usbevt
0 165 3 0 200 ffffa60012905200 usb2 usbevt
0 31 3 0 200 ffffa600128c9a40 usb1 usbevt
0 63 3 0 200 ffffa600128c9600 usb0 usbevt
0 126 3 1 200 ffffa600128c91c0 usbtask-dr usbtsk
0 125 3 1 200 ffffa60012868a00 usbtask-hc usbtsk
0 124 3 0 200 ffffa60010d76b00 swwreboot swwreboot
0 123 3 0 200 ffffa600128685c0 npfgc0 npfgcw
0 122 3 1 200 ffffa6001285a9c0 rt_free rt_free
0 121 3 1 200 ffffa6001285a580 unpgc unpgc
0 120 3 0 200 ffffa6001285a140 key_timehandler key_timehandler
0 119 3 1 200 ffffa6001270a980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffa6001270a540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffa6001270a100 nd6_timer nd6_timer
0 116 3 1 200 ffffa60012703940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffa60012703500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffa600127030c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffa600126f4900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffa600126f44c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffa600126f4080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffa600126db8c0 rt_timer rt_timer
0 109 3 0 200 ffffa600126db040 vmem_rehash vmem_rehash
0 100 3 0 200 ffffa600126d7300 entbutler entropy
0 99 3 1 200 ffffa600120bcb40 viomb balloon
0 98 3 1 200 ffffa600120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffa600120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffa60010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffa60010d76280 pms0 pmsreset
0 28 3 1 200 ffffa60010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffa60010cbc680 softser/1
0 26 1 1 200 ffffa60010cbc240 softclk/1
0 25 1 1 200 ffffa60010cb9a80 softbio/1
0 24 1 1 200 ffffa60010cb9640 softnet/1
0 23 1 1 201 ffffa60010cb9200 idle/1
0 22 3 0 200 ffffa6000fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffa6000fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffa6000fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffa6000fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffa6000fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffa6000fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffa6000fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffffa6000fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffa6000fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffa6000fb49980 sopendfree sopendfr
0 12 3 0 200 ffffa6000fb49540 ifwdog ifwdog
0 11 3 1 200 ffffa6000fb49100 iflnkst iflnkst
0 10 3 0 200 ffffa6000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffa6000fb3c500 vdrain vdrain
0 8 3 0 200 ffffa6000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffa6000fb33900 xcall/0 xcall
0 6 1 0 200 ffffa6000fb334c0 softser/0
0 > 5 7 0 200 ffffa6000fb33080 softclk/0
0 4 1 0 200 ffffa6000fb318c0 softbio/0
0 3 1 0 200 ffffa6000fb31480 softnet/0
0 2 1 0 201 ffffa6000fb31040 idle/0
0 0 3 1 200 ffffffff83347880 swapper uvm
[Locks tracked through LWPs]

****** LWP 1115.1115 (syz-executor3430) @ 0xffffa60013cd51c0, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffa60013c59900
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffffa60013cd51c0 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x88a
unlocked* : netbsd:uvm_fault_upper_enter+0x366
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 942.942 (syz-executor3430) @ 0xffffa600133c4ac0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffa60012bc9740
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa600133c4ac0 last held: 0xffffa600133c4ac0
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:uvm_fault_upper_enter+0x366
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffa600134a1b80
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa600133c4ac0 last held: 0xffffa600133c4ac0
last locked* : netbsd:pmap_enter_ma+0x386
unlocked : netbsd:pmap_extract+0x345

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0x9f sys/arch/x86/x86/pmap.c:2861)
lock address : ffffa600134a1b88
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x9f

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffffa600133c4ac0 last held: 000000000000000000
last locked : netbsd:pmap_find_ptp+0xf9
unlocked* : netbsd:pmap_find_ptp+0x11b
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 929.929 (syz-executor3430) @ 0xffffa600133c4680, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffa600134a1980
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa600133c4680 last held: 0xffffa600133c4680
last locked* : netbsd:pmap_enter_ma+0x386
unlocked : netbsd:pmap_extract+0x345
owner field : 0xffffa600133c4680 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1242.1242 (syz-executor3430) @ 0xffffa600133c4240, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:if_initialize+0x284 sys/net/if.c:762)

lock address : ffffa6000f67d880

type : sleep/adaptive
initialized : netbsd:if_initialize+0x284
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1
relevant lwp : 0xffffa600133c4240 last held: 0xffffa600133c4240

last locked* : netbsd:doifioctl+0x5ec
unlocked : netbsd:doifioctl+0x6f5

owner field : 0xffffa600133c4240 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 0

relevant lwp : 0xffffa600133c4240 last held: 000000000000000000