panic: gnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/miscfs/specfs/spec_vno

0 views
Skip to first unread message

syzbot

unread,
Jun 10, 2024, 8:02:31 PMJun 10
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: b670cbfc5870 tests/lib/libm/t_pow: Revamp.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1348b126980000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=e07c0a72d0a28516f79a
compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/3b148999e392/disk-b670cbfc.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/b40f60dfbc3d/netbsd-b670cbfc.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e07c0a...@syzkaller.appspotmail.com

[ 335.22kernel di5a6991] panic: gnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/miscfs/specfs/spec_vnops.c", line 1705
[ 335.2456727] cpu1: Begin traceback...
[ 335.2557068] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
[ 335.2956829] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0xc91c
[ 335.3356579] spec_close() at netbsd:spec_close+0x73c sys/miscfs/specfs/spec_vnops.c:1705
[ 335.3656445] VOP_CLOSE() at netbsd:VOP_CLOSE+0xfc sys/kern/vnode_if.c:605
[ 335.4056257] cnclose() at netbsd:cnclose+0xa8 sys/dev/cons.c:196
[ 335.4356101] cdev_close() at netbsd:cdev_close+0x189 sys/kern/subr_devsw.c:1471
[ 335.4755966] spec_close() at netbsd:spec_close+0x4ec sys/miscfs/specfs/spec_vnops.c:1756
[ 335.5155715] VOP_CLOSE() at netbsd:VOP_CLOSE+0xfc sys/kern/vnode_if.c:605
[ 335.5455564] vn_close() at netbsd:vn_close+0x52 sys/kern/vfs_vnops.c:493
[ 335.5855364] closef() at netbsd:closef+0x1d7 sys/kern/kern_descrip.c:861
[ 335.6155484] fd_free() at netbsd:fd_free+0x532 sys/kern/kern_descrip.c:1597
[ 335.6555020] exit1() at netbsd:exit1+0x306 sys/kern/kern_exit.c:302
[ 335.6854572] sigexit() at netbsd:sigexit+0x367 sys/kern/kern_sig.c:2317
[ 335.7554470] postsig() at netbsd:postsig+0x69f sys/kern/kern_sig.c:2166
[ 335.7954276] lwp_userret() at netbsd:lwp_userret+0x4b1 sys/kern/kern_lwp.c:1730
[ 335.8354120] mi_userret() at netbsd:mi_userret+0x31d sys/sys/userret.h:59
[ 335.8653934] syscall() at netbsd:syscall+0x311 sys/arch/x86/x86/syscall.c:92
[ 335.8753970] --- syscall (number 0 via SYS_syscall) ---
[ 335.8953765] netbsd:syscall+0x311:
[ 335.8953765] cpu1: End traceback...
[ 335.8953765] fatal breakpoint trap in supervisor mode
[ 335.9053881] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x7a1ed195b000 ilevel 0 rsp 0xffffbc82482573d0
[ 335.9153590] curlwp 0xffffbc8014028900 pid 3299.3299 lowest kstack 0xffffbc82482502c0
Stopped in pid 3299.3299 (getty) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0xc91c
spec_close() at netbsd:spec_close+0x73c sys/miscfs/specfs/spec_vnops.c:1705
VOP_CLOSE() at netbsd:VOP_CLOSE+0xfc sys/kern/vnode_if.c:605
cnclose() at netbsd:cnclose+0xa8 sys/dev/cons.c:196
cdev_close() at netbsd:cdev_close+0x189 sys/kern/subr_devsw.c:1471
spec_close() at netbsd:spec_close+0x4ec sys/miscfs/specfs/spec_vnops.c:1756
VOP_CLOSE() at netbsd:VOP_CLOSE+0xfc sys/kern/vnode_if.c:605
vn_close() at netbsd:vn_close+0x52 sys/kern/vfs_vnops.c:493
closef() at netbsd:closef+0x1d7 sys/kern/kern_descrip.c:861
fd_free() at netbsd:fd_free+0x532 sys/kern/kern_descrip.c:1597
exit1() at netbsd:exit1+0x306 sys/kern/kern_exit.c:302
sigexit() at netbsd:sigexit+0x367 sys/kern/kern_sig.c:2317
postsig() at netbsd:postsig+0x69f sys/kern/kern_sig.c:2166
lwp_userret() at netbsd:lwp_userret+0x4b1 sys/kern/kern_lwp.c:1730
mi_userret() at netbsd:mi_userret+0x31d sys/sys/userret.h:59
syscall() at netbsd:syscall+0x311 sys/arch/x86/x86/syscall.c:92
--- syscall (number 0 via SYS_syscall) ---
netbsd:syscall+0x311:
Panic string: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/miscfs/specfs/spec_vnops.c", line 1705
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
7636 7636 2 1 0 ffffbc8012bc05c0 ifconfig
5790 5790 3 0 40000 ffffbc8014281180 syz-executor.0 mutex
8238 8238 3 0 40180 ffffbc80144d36c0 syz-executor.4 wait
5511 5511 2 1 10000000 ffffbc8012c472c0 syz-executor.1
6727 6727 3 0 0 ffffbc8013332980 syz-executor.5 mutex
7504 7504 2 1 140 ffffbc8012c82340 syz-executor.1
6635 6635 3 1 180 ffffbc8013f36740 syz-executor.2 parked
5225 6059 3 1 1100000 ffffbc8012a99080 syz-executor.2 vfork
5225 5225 2 1 11000040 ffffbc80144d3280 syz-executor.2
7477 7477 3 1 180 ffffbc801485c6c0 syz-executor.5 parked
4742 4742 3 1 1c0 ffffbc8012cfc240 syz-executor.2 wait
5207 5207 3 1 180 ffffbc801344e4c0 syz-executor.0 parked
4314 4314 3 0 180 ffffbc80147d1a00 syz-executor.4 parked
4649 4649 3 0 0 ffffbc80147d15c0 syz-executor.4 vfork
3809 3809 3 0 0 ffffbc80147a59c0 syz-executor.4 vfork
3623 3623 3 0 0 ffffbc8014490640 syz-executor.4 vfork
3759 3759 3 0 0 ffffbc80147a5580 syz-executor.4 vfork
3629 3629 3 0 0 ffffbc80147a5140 syz-executor.4 vfork
3723 3723 3 0 0 ffffbc8014782980 syz-executor.4 vfork
6345 6345 3 1 0 ffffbc8014782540 syz-executor.4 vfork
3565 3565 3 1 0 ffffbc8014782100 syz-executor.4 vfork
4939 4939 3 1 0 ffffbc801475d940 syz-executor.4 vfork
3734 3734 3 1 0 ffffbc801475d500 syz-executor.4 vfork
3568 3568 3 1 0 ffffbc8014733900 syz-executor.4 vfork
6103 6103 3 1 0 ffffbc80147334c0 syz-executor.4 vfork
5428 5428 3 1 0 ffffbc8014733080 syz-executor.4 vfork
3581 3581 3 1 0 ffffbc8014704480 syz-executor.4 vfork
4933 4933 3 0 0 ffffbc8014704040 syz-executor.4 vfork
5792 5792 3 0 0 ffffbc80146ec780 syz-executor.4 vfork
5435 5435 3 0 0 ffffbc80146ec340 syz-executor.4 vfork
3065 3065 3 0 0 ffffbc80146cfb80 syz-executor.4 vfork
3060 3060 3 0 0 ffffbc80146cf740 syz-executor.4 vfork
6329 6329 3 0 0 ffffbc801466bb40 syz-executor.4 vfork
3429 3429 3 0 0 ffffbc801466b700 syz-executor.4 vfork
3736 3736 3 1 0 ffffbc8013f86bc0 syz-executor.4 vfork
4004 4004 3 1 0 ffffbc8012cb30c0 syz-executor.4 vfork
3571 3571 3 1 0 ffffbc8013444040 syz-executor.4 vfork
4003 4003 3 1 0 ffffbc80143881c0 syz-executor.4 vfork
5714 5714 3 0 0 ffffbc8013332540 syz-executor.4 vfork
3722 3722 3 0 0 ffffbc8012cbe980 syz-executor.4 vfork
5939 5939 3 0 0 ffffbc8014142980 syz-executor.4 vfork
3474 3474 3 0 0 ffffbc8013f36300 syz-executor.4 vfork
3714 3714 3 0 0 ffffbc801338aa40 syz-executor.4 vfork
5686 5686 3 1 0 ffffbc8013f86340 syz-executor.4 vfork
5665 5665 3 0 0 ffffbc8013461540 syz-executor.4 vfork
4412 3720 2 1 1000040 ffffbc8012c82780 syz-executor.4
4412 5438 3 0 1100000 ffffbc8012a728c0 syz-executor.4 vfork
5061 5061 3 1 180 ffffbc8012ce71c0 syz-executor.5 parked
3318 3318 3 1 180 ffffbc8012d162c0 syz-executor.5 parked
3215 3215 3 1 180 ffffbc8014490200 syz-executor.5 parked
4046 4046 3 0 180 ffffbc80133c6280 syz-executor.3 parked
3326 3326 3 0 180 ffffbc8012cf4640 syz-executor.3 parked
4669 4669 3 0 180 ffffbc80133a0640 syz-executor.3 parked
3299 > 3299 7 1 1000000 ffffbc8014028900 getty
4576 4576 3 0 180 ffffbc8012d24740 syz-executor.2 parked
2751 2751 3 0 180 ffffbc801342e740 arp netio
2452 2452 3 0 180 ffffbc80133a0a80 dhcpcd poll
4313 4313 3 1 180 ffffbc8013458940 syz-executor.4 parked
3806 3806 3 1 180 ffffbc8013458500 syz-executor.4 parked
1179 1179 3 0 180 ffffbc8013332100 syz-executor.3 parked
1155 1155 3 0 180 ffffbc80142815c0 syz-executor.3 parked
1847 1847 3 1 180 ffffbc8013ea7700 syz-executor.1 parked
3673 3673 3 0 180 ffffbc80134580c0 syz-executor.2 parked
1663 1663 3 0 180 ffffbc8012b9b140 syz-executor.5 parked
762 3362 2 1 1000040 ffffbc801334b9c0 syz-executor.2
762 3385 3 0 1100000 ffffbc8012a20300 syz-executor.2 vfork
2491 2491 3 0 180 ffffbc8014028080 syz-executor.2 parked
2654 2654 3 0 180 ffffbc8012a994c0 syz-executor.0 parked
2269 2269 3 1 180 ffffbc8012d0b6c0 syz-executor.5 parked
1071 1071 3 0 180 ffffbc8012ac80c0 syz-executor.5 parked
1244 2734 3 0 180 ffffbc8012cb3500 syz-fuzzer wait
1244 1212 3 1 180 ffffbc8013ea72c0 syz-fuzzer wait
1244 1210 3 0 180 ffffbc8013e71b00 syz-fuzzer wait
1244 1279 3 1 180 ffffbc8013e716c0 syz-fuzzer wait
1244 1243 3 1 180 ffffbc8012b7c100 syz-fuzzer wait
1244 1237 3 0 0 ffffbc8013deba80 syz-fuzzer biolock
1244 991 3 1 1c0 ffffbc8013deb640 syz-fuzzer parked
1244 1376 3 1 180 ffffbc8013dbb1c0 syz-fuzzer parked
1244 1102 3 1 180 ffffbc8012d24b80 syz-fuzzer parked
1244 449 3 1 180 ffffbc80133aeac0 syz-fuzzer parked
1244 1131 3 0 180 ffffbc80133ae680 syz-fuzzer parked
1244 1235 2 1 0 ffffbc80133c66c0 syz-fuzzer
1244 > 1238 7 0 140 ffffbc80134448c0 syz-fuzzer
1244 1244 3 0 180 ffffbc8012ac8940 syz-fuzzer parked
1193 1193 3 0 180 ffffbc8012ac8500 sshd select
1112 1112 3 1 180 ffffbc801348e180 getty nanoslp
1229 1229 3 1 180 ffffbc80126d7b80 getty nanoslp
1226 1226 3 1 180 ffffbc801334b140 getty nanoslp
1105 1105 3 0 180 ffffbc80133ae240 sshd select
1094 1094 3 1 180 ffffbc8012d54780 powerd kqueue
811 811 3 0 180 ffffbc80133ec2c0 syslogd kqueue
561 561 3 0 180 ffffbc8012cb3940 dhcpcd poll
748 748 3 0 180 ffffbc8012c256c0 dhcpcd poll
429 429 3 0 180 ffffbc8012c82bc0 dhcpcd poll
487 487 3 0 180 ffffbc8012da20c0 dhcpcd poll
292 292 3 0 180 ffffbc8012d88900 dhcpcd poll
485 485 3 0 180 ffffbc8012d884c0 dhcpcd poll
1 1 3 0 180 ffffbc801286f180 init wait
0 5786 3 0 200 ffffbc8012ce7600 ktrace ktrwait
0 5880 2 0 200 ffffbc8013dbb600 ktrace
0 5020 3 0 200 ffffbc8013372180 ktrace ktrwait
0 5257 3 1 200 ffffbc8012d88080 ktrace ktrwait
0 5554 3 1 200 ffffbc80126d9bc0 poolthread pooljob
0 5680 3 1 200 ffffbc801342eb80 ktrace ktrwait
0 4533 3 1 200 ffffbc8014388600 ktrace ktrwait
0 2513 3 1 200 ffffbc80133725c0 ktrace ktrwait
0 1883 3 0 200 ffffbc8012be7600 ktrace ktrwait
0 2880 3 0 200 ffffbc8012c15ac0 ktrace ktrwait
0 818 3 0 200 ffffbc80129bf6c0 physiod physiod
0 196 3 0 200 ffffbc80129c1700 pooldrain pooldrain
0 195 3 0 240 ffffbc80129c12c0 ioflush biolock
0 194 3 1 200 ffffbc80129bfb00 pgdaemon pgdaemon
0 167 3 1 200 ffffbc8012976ac0 usb7 usbevt
0 172 3 1 200 ffffbc8012976680 usb6 usbevt
0 170 3 1 200 ffffbc8012976240 usb5 usbevt
0 168 3 0 200 ffffbc801291ea80 usb4 usbevt
0 166 3 1 200 ffffbc801291e640 usb3 usbevt
0 165 3 1 240 ffffbc801291e200 usb2 usbxfer
0 31 3 1 200 ffffbc80128caa40 usb1 usbevt
0 63 3 0 200 ffffbc80128ca600 usb0 usbevt
0 126 3 1 200 ffffbc80128ca1c0 usbtask-dr usbtsk
0 125 3 1 200 ffffbc801286fa00 usbtask-hc usbtsk
0 124 3 0 200 ffffbc8010d66b00 swwreboot swwreboot
0 123 3 0 200 ffffbc801286f5c0 npfgc0 npfgcw
0 122 3 1 200 ffffbc80128669c0 rt_free rt_free
0 121 3 1 200 ffffbc8012866580 unpgc unpgc
0 120 3 0 200 ffffbc8012866140 key_timehandler key_timehandler
0 119 3 1 200 ffffbc8012703980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffbc8012703540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffbc8012703100 nd6_timer nd6_timer
0 116 3 1 200 ffffbc80126fc940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffbc80126fc500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffbc80126fc0c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffbc80126ed900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffbc80126ed4c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffbc80126ed080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffbc80126db040 rt_timer rt_timer
0 109 3 1 200 ffffbc80126db8c0 vmem_rehash vmem_rehash
0 100 3 0 200 ffffbc80126d7300 entbutler entropy
0 99 3 1 200 ffffbc80120bdb40 viomb balloon
0 98 3 1 200 ffffbc80120bd700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffbc80120bd2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffbc8010d666c0 scsibus0 sccomp
0 29 3 0 200 ffffbc8010d66280 pms0 pmsreset
0 28 3 1 200 ffffbc8010cacac0 xcall/1 xcall
0 27 1 1 200 ffffbc8010cac680 softser/1
0 26 1 1 200 ffffbc8010cac240 softclk/1
0 25 1 1 200 ffffbc8010ca9a80 softbio/1
0 24 1 1 200 ffffbc8010ca9640 softnet/1
0 23 1 1 201 ffffbc8010ca9200 idle/1
0 22 3 0 200 ffffbc800fb55a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffbc800fb55600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffbc800fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffbc800fb54a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffffbc800fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffbc800fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffbc800fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffffbc800fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffbc800fb4d140 pmfevent pmfevent
0 13 3 0 200 ffffbc800fb4a980 sopendfree sopendfr
0 12 3 0 200 ffffbc800fb4a540 ifwdog ifwdog
0 11 3 1 200 ffffbc800fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffbc800fb3b940 nfssilly nfssilly
0 9 3 0 200 ffffbc800fb3b500 pooldisp pooldisp
0 8 3 1 200 ffffbc800fb3b0c0 modunload mod_unld
0 7 3 0 200 ffffbc800fb32900 xcall/0 xcall
0 6 1 0 200 ffffbc800fb324c0 softser/0
0 5 1 0 200 ffffbc800fb32080 softclk/0
0 4 1 0 200 ffffbc800fb308c0 softbio/0
0 3 1 0 200 ffffbc800fb30480 softnet/0
0 2 1 0 201 ffffbc800fb30040 idle/0
0 0 2 1 240 ffffffff83350200 swapper
[Locks tracked through LWPs]

****** LWP 7636.7636 (ifconfig) @ 0xffffbc8012bc05c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x365 sys/kern/kern_fork.c:366)
lock address : ffffbc8012d013d0
type : sleep/adaptive
initialized : netbsd:fork1+0x365
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8012bc05c0 last held: 0xffffbc8012bc05c0
last locked* : netbsd:exit1+0x2f2
unlocked : netbsd:execve_runproc+0x2211
owner/count : 0xffffbc8012bc05c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffbc80148a2880
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8012bc05c0 last held: 0xffffbc8012bc05c0
last locked* : netbsd:amap_unref+0x35
unlocked : netbsd:uvm_fault_lower_enter+0x59c
owner/count : 0xffffbc8012bc05c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffbc8012bc05c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 5790.5790 (syz-executor.0) @ 0xffffbc8014281180, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x40 sys/kern/subr_kcov.c:461)
lock address : ffffbc80149f7400
type : sleep/adaptive
initialized : netbsd:kcov_open+0x40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc8014281180 last held: 0xffffbc8014281180
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_map_setup+0x11c sys/uvm/uvm_map.c:4786)
lock address : netbsd:kernel_map_store+0x8
type : sleep/adaptive
initialized : netbsd:uvm_map_setup+0x11c
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffbc8014281180 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x344
unlocked* : netbsd:ubc_fault+0xa44
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 5511.5511 (syz-executor.1) @ 0xffffbc8012c472c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x365 sys/kern/kern_fork.c:366)
lock address : ffffbc80147c8e90
type : sleep/adaptive
initialized : netbsd:fork1+0x365
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffbc8012c472c0 last held: 0xffffbc8012c472c0
last locked* : netbsd:exit1+0x2f2
unlocked : 0
owner/count : 0xffffbc8012c472c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0x4a sys/kern/vfs_vnode.c:1438)
lock address : ffffbc8013df2e80
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x4a
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 0
relevant lwp : 0xffffbc8012c472c0 last held: 000000000000000000
last locked : netbsd:vrele+0x45
unlocked* : netbsd:vrelel+0x4ee
owner field : 0xffffbc8012c472c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 6727.6727 (syz-executor.5) @ 0xffffbc8013332980, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffbc80148abc40
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffbc8013332980 last held: 0xffffbc8013332980
last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffffbc8013332980 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffbc8014ab34c0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffbc8013332980 last held: 0xffffbc8013332980
last locked* : netbsd:genfs_lock+0x160
unlocked : 0
owner/count : 0xffffbc8013332980 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3299.3299 (getty) @ 0xffffbc8014028900, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x365 sys/kern/kern_fork.c:366)
lock address : ffffbc8012cf1a90
type : sleep/adaptive
initialized : netbsd:fork1+0x365
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8014028900 last held: 0xffffbc8014028900
last locked* : netbsd:exit1+0x2f2
unlocked : netbsd:execve_runproc+0x2211
owner/count : 0xffffbc8014028900 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:cons_modcmd+0x71 cons_modcmd sys/dev/cons.c:527 [inline])
* Lock 1 (initialized at netbsd:cons_modcmd+0x71 sys/dev/cons.c:522)
lock address : netbsd:cn_lock
type : sleep/adaptive
initialized : netbsd:cons_modcmd+0x71
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8014028900 last held: 0xffffbc8014028900
last locked* : netbsd:cnclose+0x51
unlocked : netbsd:cnopen+0xdb
owner field : 0xffffbc8014028900 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffbc8014846c80
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8014028900 last held: 0xffffbc8014028900
last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffffbc8014028900 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 3 (initialized at netbsd:devsw_init+0x77 sys/kern/subr_devsw.c:378)
lock address : netbsd:device_lock
type : sleep/adaptive
initialized : netbsd:devsw_init+0x77
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8014028900 last held: 0xffffbc8014028900
last locked* : netbsd:spec_close+0x1e7
unlocked : netbsd:spec_close+0x40a
owner field : 0xffffbc8014028900 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 2 waiting writers: 0xffffbc8014281180 0xffffbc8013332980

*** Locks wanted: none

****** LWP 1244.1237 (syz-fuzzer) @ 0xffffbc8013deba80, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffbc8014ab3740
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc8013deba80 last held: 0xffffbc8013deba80
last locked* : netbsd:genfs_lock+0x127
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffffbc8013deba80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 748.748 (dhcpcd) @ 0xffffbc8012c256c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc8012c256c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 429.429 (dhcpcd) @ 0xffffbc8012c82bc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc8012c82bc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffbc8012d88900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc8012d88900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffbc8012d884c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc8012d884c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffbc8010cac240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffbc8010cac240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffbc800fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffbc800fb4a100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffbc800fb32080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbc800fb32080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83350200, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff83350200 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbc8014028900 last held: 0xffffbc8014028900
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffbc8000017180 0041 00000000 0x0 0x0
0xffffbc8000017200 0041 00000000 0x0 0x0
0xffffbc8000017280 0041 00000000 0x0 0x0
0xffffbc8000017300 0041 00000000 0x0 0x0
0xffffbc8000017380 0041 00000000 0x0 0x0
0xffffbc8000017400 0041 00000000 0x0 0x0
0xffffbc8000017480 0041 00000000 0x0 0x0
0xffffbc8000017500 0041 00000000 0x0 0x0
0xffffbc8000017580 0041 00000000 0x0 0x0
0xffffbc8000017600 0041 00000000 0x0 0x0
0xffffbc8000017680 0041 00000000 0x0 0x0
0xffffbc8000017700 0041 00000000 0x0 0x0
0xffffbc8000017780 0041 00000000 0x0 0x0
0xffffbc8000017800 0041 00000000 0x0 0x0
0xffffbc8000017880 0041 00000000 0x0 0x0
0xffffbc8000017900 0041 00000000 0x0 0x0
0xffffbc8000017980 0041 00000000 0x0 0x0
0xffffbc8000017a00 0041 00000000 0x0 0x0
0xffffbc8000017a80 0041 00000000 0x0 0x0
0xffffbc8000017b00 0041 00000000 0x0 0x0
0xffffbc8000017b80 0041 00000000 0x0 0x0
0xffffbc8000017c00 0041 00000000 0x0 0x0
0xffffbc8000017c80 0041 00000000 0x0 0x0
0xffffbc8000017d00 0041 00000000 0x0 0x0
0xffffbc8000017d80 0041 00000000 0x0 0x0
0xffffbc8000017e00 0041 00000000 0x0 0x0
0xffffbc8000017e80 0041 00000000 0x0 0x0
0xffffbc8000017f00 0041 00000000 0x0 0x0
0xffffbc8000017f80 0041 00000000 0x0 0x0
0xffffbc8000018000 0041 00000000 0x0 0x0
0xffffbc8000018080 0041 00000000 0x0 0x0
0xffffbc8000018100 0041 00000000 0x0 0x0
0xffffbc8000018180 0041 00000000 0x0 0x0
0xffffbc8000018200 0041 00000000 0x0 0x0
0xffffbc8000018280 0041 00000000 0x0 0x0
0xffffbc8000018300 0041 00000000 0x0 0x0
0xffffbc8000018380 0041 00000000 0x0 0x0
0xffffbc8000018400 0041 00000000 0x0 0x0
0xffffbc8000018480 0041 00000000 0x0 0x0
0xffffbc8000018500 0041 00000000 0x0 0x0
0xffffbc8000018580 0041 00000000 0x0 0x0
0xffffbc8000018600 0041 00000000 0x0 0x0
0xffffbc8000018680 0041 00000000 0x0 0x0
0xffffbc8000018700 0041 00000000 0x0 0x0
0xffffbc8000018780 0041 00000000 0x0 0x0
0xffffbc8000018800 0041 00000000 0x0 0x0
0xffffbc8000018880 0041 00000000 0x0 0x0
0xffffbc8000018900 0041 00000000 0x0 0x0
0xffffbc8000018980 0041 00000000 0x0 0x0
0xffffbc8000018a00 0041 00000000 0x0 0x0
0xffffbc8000018a80 0041 00000000 0x0 0x0
0xffffbc8000018b00 0041 00000000 0x0 0x0
0xffffbc8000018b80 0041 00000000 0x0 0x0
0xffffbc8000018c00 0041 00000000 0x0 0x0
0xffffbc8000018c80 0041 00000000 0x0 0x0
0xffffbc8000018d00 0041 00000000 0x0 0x0
0xffffbc8000018d80 0041 00000000 0x0 0x0
0xffffbc8000018e00 0041 00000000 0x0 0x0
0xffffbc8000018e80 0041 00000000 0x0 0x0
0xffffbc8000018f00 0041 00000000 0x0 0x0
0xffffbc8000018f80 0041 00000000 0x0 0x0
0xffffbc8000019000 0041 00000000 0x0 0x0
0xffffbc8000019080 0041 00000000 0x0 0x0
0xffffbc8000019100 0041 00000000 0x0 0x0
0xffffbc8000019180 0041 00000000 0x0 0x0
0xffffbc8000019200 0041 00000000 0x0 0x0
0xffffbc8000019280 0041 00000000 0x0 0x0
0xffffbc8000019300 0041 00000000 0x0 0x0
0xffffbc8000019380 0041 00000000 0x0 0x0
0xffffbc8000019400 0041 00000000 0x0 0x0
0xffffbc8000019480 0041 00000000 0x0 0x0
0xffffbc8000019500 0041 00000000 0x0 0x0
0xffffbc8000019580 0041 00000000 0x0 0x0
0xffffbc8000019600 0041 00000000 0x0 0x0
0xffffbc8000019680 0041 00000000 0x0 0x0
0xffffbc8000019700 0041 00000000 0x0 0x0
0xffffbc8000019780 0041 00000000 0x0 0x0
0xffffbc8000019800 0041 00000000 0x0 0x0
0xffffbc8000019880 0041 00000000 0x0 0x0
0xffffbc8000019900 0041 00000000 0x0 0x0
0xffffbc8000019980 0041 00000000 0x0 0x0
0xffffbc8000019a00 0041 00000000 0x0 0x0
0xffffbc8000019a80 0041 00000000 0x0 0x0
0xffffbc8000019b00 0041 00000000 0x0 0x0
0xffffbc8000019b80 0041 00000000 0x0 0x0
0xffffbc8000019c00 0041 00000000 0x0 0x0
0xffffbc8000019c80 0041 00000000 0x0 0x0
0xffffbc8000019d00 0041 00000000 0x0 0x0
0xffffbc8000019d80 0041 00000000 0x0 0x0
0xffffbc8000019e00 0041 00000000 0x0 0x0
0xffffbc8000019e80 0041 00000000 0x0 0x0
0xffffbc8000019f00 0041 00000000 0x0 0x0
0xffffbc8000019f80 0041 00000000 0x0 0x0
0xffffbc800001a000 0041 00000000 0x0 0x0
0xffffbc800001a080 0041 00000000 0x0 0x0
0xffffbc800001a100 0041 00000000 0x0 0x0
0xffffbc800001a180 0041 00000000 0x0 0x0
0xffffbc800001a200 0041 00000000 0x0 0x0
0xffffbc800001a280 0041 00000000 0x0 0x0
0xffffbc800001a300 0041 00000000 0x0 0x0
0xffffbc800001a380 0041 00000000 0x0 0x0
0xffffbc800001a400 0041 00000000 0x0 0x0
0xffffbc800001a480 0041 00000000 0x0 0x0
0xffffbc800001a500 0041 00000000 0x0 0x0
0xffffbc800001a580 0041 00000000 0x0 0x0
0xffffbc800001a600 0041 00000000 0x0 0x0
0xffffbc800001a680 0041 00000000 0x0 0x0
0xffffbc800001a700 0041 00000000 0x0 0x0
0xffffbc800001a780 0041 00000000 0x0 0x0
0xffffbc800001a800 0041 00000000 0x0 0x0
0xffffbc800001a880 0041 00000000 0x0 0x0
0xffffbc800001a900 0041 00000000 0x0 0x0
0xffffbc800001a980 0041 00000000 0x0 0x0
0xffffbc800001aa00 0041 00000000 0x0 0x0
0xffffbc800001aa80 0041 00000000 0x0 0x0
0xffffbc800001ab00 0041 00000000 0x0 0x0
0xffffbc800001ab80 0041 00000000 0x0 0x0
0xffffbc800001ac00 0041 00000000 0x0 0x0
0xffffbc800001ac80 0041 00000000 0x0 0x0
0xffffbc800001ad00 0041 00000000 0x0 0x0
0xffffbc800001ad80 0041 00000000 0x0 0x0
0xffffbc800001ae00 0041 00000000 0x0 0x0
0xffffbc800001ae80 0041 00000000 0x0 0x0
0xffffbc800001af00 0041 00000000 0x0 0x0
0xffffbc800001af80 0041 00000000 0x0 0x0
0xffffbc800001b000 0041 00000000 0x0 0x0
0xffffbc800001b080 0041 00000000 0x0 0x0
0xffffbc800001b100 0041 00000000 0x0 0x0
0xffffbc800001b180 0041 00000000 0x0 0x0
0xffffbc800001b200 0041 00000000 0x0 0x0
0xffffbc800001b280 0041 00000000 0x0 0x0
0xffffbc800001b300 0041 00000000 0x0 0x0
0xffffbc800001b380 0041 00000000 0x0 0x0
0xffffbc800001b400 0041 00000000 0x0 0x0
0xffffbc800001b480 0041 00000000 0x0 0x0
0xffffbc800001b500 0041 00000000 0x0 0x0
0xffffbc800001b580 0041 00000000 0x0 0x0
0xffffbc800001b600 0041 00000000 0x0 0x0
0xffffbc800001b680 0041 00000000 0x0 0x0
0xffffbc800001b700 0041 00000000 0x0 0x0
0xffffbc800001b780 0041 00000000 0x0 0x0
0xffffbc800001b800 0041 00000000 0x0 0x0
0xffffbc800001b880 0041 00000000 0x0 0x0
0xffffbc800001b900 0041 00000000 0x0 0x0
0xffffbc800001b980 0041 00000000 0x0 0x0
0xffffbc800001ba00 0041 00000000 0x0 0x0
0xffffbc800001ba80 0041 00000000 0x0 0x0
0xffffbc800001bb00 0001 00000000 0x0 0x0
0xffffbc800001bb80 0001 00000000 0x0 0x0
0xffffbc800001bc00 0001 00000000 0x0 0x0
0xffffbc800001bc80 0001 00000000 0x0 0x0
0xffffbc800001bd00 0001 00000000 0x0 0x0
0xffffbc800001bd80 0001 00000000 0x0 0x0
0xffffbc800001be00 0001 00000000 0x0 0x0
0xffffbc800001be80 0001 00000000 0x0 0x0
0xffffbc800001bf00 0001 00000000 0x0 0x0
0xffffbc800001bf80 0001 00000000 0x0 0x0
0xffffbc800001c000 0001 00000000 0x0 0x0
0xffffbc800001c080 0001 00000000 0x0 0x0
0xffffbc800001c100 0001 00000000 0x0 0x0
0xffffbc800001c180 0001 00000000 0x0 0x0
0xffffbc800001c200 0001 00000000 0x0 0x0
0xffffbc800001c280 0001 00000000 0x0 0x0
0xffffbc800001c300 0001 00000000 0x0 0x0
0xffffbc800001c380 0001 00000000 0x0 0x0
0xffffbc800001c400 0001 00000000 0x0 0x0
0xffffbc800001c480 0001 00000000 0x0 0x0
0xffffbc800001c500 0001 00000000 0x0 0x0
0xffffbc800001c580 0001 00000000 0x0 0x0
0xffffbc800001c600 0001 00000000 0x0 0x0
0xffffbc800001c680 0001 00000000 0x0 0x0
0xffffbc800001c700 0001 00000000 0x0 0x0
0xffffbc800001c780 0001 00000000 0x0 0x0
0xffffbc800001c800 0001 00000000 0x0 0x0
0xffffbc800001c880 0001 00000000 0x0 0x0
0xffffbc800001c900 0001 00000000 0x0 0x0
0xffffbc800001c980 0001 00000000 0x0 0x0
0xffffbc800001ca00 0001 00000000 0x0 0x0
0xffffbc800001ca80 0001 00000000 0x0 0x0
0xffffbc800001cb00 0001 00000000 0x0 0x0
0xffffbc800001cb80 0001 00000000 0x0 0x0
0xffffbc800001cc00 0001 00000000 0x0 0x0
0xffffbc800001cc80 0001 00000000 0x0 0x0
0xffffbc800001cd00 0001 00000000 0x0 0x0
0xffffbc800001cd80 0001 00000000 0x0 0x0
0xffffbc800001ce00 0001 00000000 0x0 0x0
0xffffbc800001ce80 0001 00000000 0x0 0x0
0xffffbc800001cf00 0001 00000000 0x0 0x0
0xffffbc800001cf80 0001 00000000 0x0 0x0
0xffffbc800001d000 0001 00000000 0x0 0x0
0xffffbc800001d080 0001 00000000 0x0 0x0
0xffffbc800001d100 0001 00000000 0x0 0x0
0xffffbc800001d180 0001 00000000 0x0 0x0
0xffffbc800001d200 0001 00000000 0x0 0x0
0xffffbc800001d280 0001 00000000 0x0 0x0
0xffffbc800001d300 0001 00000000 0x0 0x0
0xffffbc800001d380 0001 00000000 0x0 0x0
0xffffbc800001d400 0001 00000000 0x0 0x0
0xffffbc800001d480 0001 00000000 0x0 0x0
0xffffbc800001d500 0001 00000000 0x0 0x0
0xffffbc800001d580 0001 00000000 0x0 0x0
0xffffbc800001d600 0001 00000000 0x0 0x0
0xffffbc800001d680 0001 00000000 0x0 0x0
0xffffbc800001d700 0001 00000000 0x0 0x0
0xffffbc800001d780 0001 00000000 0x0 0x0
0xffffbc800001d800 0001 00000000 0x0 0x0
0xffffbc800001d880 0001 00000000 0x0 0x0
0xffffbc800001d900 0001 00000000 0x0 0x0
0xffffbc800001d980 0001 00000000 0x0 0x0
0xffffbc800001da00 0001 00000000 0x0 0x0
0xffffbc800001da80 0001 00000000 0x0 0x0
0xffffbc800001db00 0001 00000000 0x0 0x0
0xffffbc800001db80 0001 00000000 0x0 0x0
0xffffbc800001dc00 0001 00000000 0x0 0x0
0xffffbc800001dc80 0001 00000000 0x0 0x0
0xffffbc800001dd00 0001 00000000 0x0 0x0
0xffffbc800001dd80 0001 00000000 0x0 0x0
0xffffbc800001de00 0001 00000000 0x0 0x0
0xffffbc800001de80 0001 00000000 0x0 0x0
0xffffbc800001df00 0001 00000000 0x0 0x0
0xffffbc800001df80 0001 00000000 0x0 0x0
0xffffbc800001e000 0001 00000000 0x0 0x0
0xffffbc800001e080 0001 00000000 0x0 0x0
0xffffbc800001e100 0001 00000000 0x0 0x0
0xffffbc800001e180 0001 00000000 0x0 0x0
0xffffbc800001e200 0001 00000000 0x0 0x0
0xffffbc800001e280 0001 00000000 0x0 0x0
0xffffbc800001e300 0001 00000000 0x0 0x0
0xffffbc800001e380 0001 00000000 0x0 0x0
0xffffbc800001e400 0001 00000000 0x0 0x0
0xffffbc800001e480 0001 00000000 0x0 0x0
0xffffbc800001e500 0001 00000000 0x0 0x0
0xffffbc800001e580 0001 00000000 0x0 0x0
0xffffbc800001e600 0001 00000000 0x0 0x0
0xffffbc800001e680 0001 00000000 0x0 0x0
0xffffbc800001e700 0001 00000000 0x0 0x0
0xffffbc800001e780 0001 00000000 0x0 0x0
0xffffbc800001e800 0001 00000000 0x0 0x0
0xffffbc800001e880 0001 00000000 0x0 0x0
0xffffbc800001e900 0001 00000000 0x0 0x0
0xffffbc800001e980 0001 00000000 0x0 0x0
0xffffbc800001ea00 0001 00000000 0x0 0x0
0xffffbc800001ea80 0001 00000000 0x0 0x0
0xffffbc800001eb00 0001 00000000 0x0 0x0
0xffffbc800001eb80 0001 00000000 0x0 0x0
0xffffbc800001ec00 0001 00000000 0x0 0x0
0xffffbc800001ec80 0001 00000000 0x0 0x0
0xffffbc800001ed00 0001 00000000 0x0 0x0
0xffffbc800001ed80 0001 00000000 0x0 0x0
0xffffbc800001ee00 0001 00000000 0x0 0x0
0xffffbc800001ee80 0001 00000000 0x0 0x0
0xffffbc800001ef00 0001 00000000 0x0 0x0
0xffffbc800001ef80 0001 00000000 0x0 0x0
0xffffbc800001f000 0001 00000000 0x0 0x0
0xffffbc800001f080 0001 00000000 0x0 0x0
0xffffbc800001f100 0001 00000000 0x0 0x0
0xffffbc800001f180 0001 00000000 0x0 0x0
0xffffbc800001f200 0001 00000000 0x0 0x0
0xffffbc800001f280 0001 00000000 0x0 0x0
0xffffbc800001f300 0001 00000000 0x0 0x0
0xffffbc800001f380 0001 00000000 0x0 0x0
0xffffbc800001f400 0001 00000000 0x0 0x0
0xffffbc800001f480 0001 00000000 0x0 0x0
0xffffbc800001f500 0001 00000000 0x0 0x0
0xffffbc800001f580 0001 00000000 0x0 0x0
0xffffbc800001f600 0001 00000000 0x0 0x0
0xffffbc800001f680 0001 00000000 0x0 0x0
0xffffbc800001f700 0001 00000000 0x0 0x0
0xffffbc800001f780 0001 00000000 0x0 0x0
0xffffbc800001f800 0001 00000000 0x0 0x0
0xffffbc800001f880 0001 00000000 0x0 0x0
0xffffbc800001f900 0001 00000000 0x0 0x0
0xffffbc800001f980 0001 00000000 0x0 0x0
0xffffbc800001fa00 0001 00000000 0x0 0x0
0xffffbc800001fa80 0001 00000000 0x0 0x0
0xffffbc800001fb00 0001 00000000 0x0 0x0
0xffffbc800001fb80 0001 00000000 0x0 0x0
0xffffbc800001fc00 0001 00000000 0x0 0x0
0xffffbc800001fc80 0001 00000000 0x0 0x0
0xffffbc800001fd00 0001 00000000 0x0 0x0
0xffffbc800001fd80 0001 00000000 0x0 0x0
0xffffbc800001fe00 0001 00000000 0x0 0x0
0xffffbc800001fe80 0001 00000000 0x0 0x0
0xffffbc800001ff00 0001 00000000 0x0 0x0
0xffffbc800001ff80 0001 00000000 0x0 0x0
0xffffbc8000020000 0001 00000000 0x0 0x0
0xffffbc8000020080 0001 00000000 0x0 0x0
0xffffbc8000020100 0001 00000000 0x0 0x0
0xffffbc8000020180 0001 00000000 0x0 0x0
0xffffbc8000020200 0001 00000000 0x0 0x0
0xffffbc8000020280 0001 00000000 0x0 0x0
0xffffbc8000020300 0001 00000000 0x0 0x0
0xffffbc8000020380 0001 00000000 0x0 0x0
0xffffbc8000020400 0001 00000000 0x0 0x0
0xffffbc8000020480 0001 00000000 0x0 0x0
0xffffbc8000020500 0001 00000000 0x0 0x0
0xffffbc8000020580 0001 00000000 0x0 0x0
0xffffbc8000020600 0001 00000000 0x0 0x0
0xffffbc8000020680 0001 00000000 0x0 0x0
0xffffbc8000020700 0001 00000000 0x0 0x0
0xffffbc8000020780 0001 00000000 0x0 0x0
0xffffbc8000020800 0001 00000000 0x0 0x0
0xffffbc8000020880 0001 00000000 0x0 0x0
0xffffbc8000020900 0001 00000000 0x0 0x0
0xffffbc8000020980 0001 00000000 0x0 0x0
0xffffbc8000020a00 0001 00000000 0x0 0x0
0xffffbc8000020a80 0001 00000000 0x0 0x0
0xffffbc8000020b00 0001 00000000 0x0 0x0
0xffffbc8000020b80 0001 00000000 0x0 0x0
0xffffbc8000020c00 0001 00000000 0x0 0x0
0xffffbc8000020c80 0001 00000000 0x0 0x0
0xffffbc8000020d00 0001 00000000 0x0 0x0
0xffffbc8000020d80 0001 00000000 0x0 0x0
0xffffbc8000020e00 0001 00000000 0x0 0x0
0xffffbc8000020e80 0001 00000000 0x0 0x0
0xffffbc8000020f00 0001 00000000 0x0 0x0
0xffffbc8000020f80 0001 00000000 0x0 0x0
0xffffbc8000021000 0001 00000000 0x0 0x0
0xffffbc8000021080 0001 00000000 0x0 0x0
0xffffbc8000021100 0001 00000000 0x0 0x0
0xffffbc8000021180 0001 00000000 0x0 0x0
0xffffbc8000021200 0001 00000000 0x0 0x0
0xffffbc8000021280 0001 00000000 0x0 0x0
0xffffbc8000021300 0001 00000000 0x0 0x0
0xffffbc8000021380 0001 00000000 0x0 0x0
0xffffbc8000021400 0001 00000000 0x0 0x0
0xffffbc8000021480 0001 00000000 0x0 0x0
0xffffbc8000021500 0001 00000000 0x0 0x0
0xffffbc8000021580 0001 00000000 0x0 0x0
0xffffbc8000021600 0001 00000000 0x0 0x0
0xffffbc8000021680 0001 00000000 0x0 0x0
0xffffbc8000021700 0001 00000000 0x0 0x0
0xffffbc8000021780 0001 00000000 0x0 0x0
0xffffbc8000021800 0001 00000000 0x0 0x0
0xffffbc8000021880 0001 00000000 0x0 0x0
0xffffbc8000021900 0001 00000000 0x0 0x0
0xffffbc8000021980 0001 00000000 0x0 0x0
0xffffbc8000021a00 0001 00000000 0x0 0x0
0xffffbc8000021a80 0001 00000000 0x0 0x0
0xffffbc8000021b00 0001 00000000 0x0 0x0
0xffffbc8000021b80 0001 00000000 0x0 0x0
0xffffbc8000021c00 0001 00000000 0x0 0x0
0xffffbc8000021c80 0001 00000000 0x0 0x0
0xffffbc8000021d00 0001 00000000 0x0 0x0
0xffffbc8000021d80 0001 00000000 0x0 0x0
0xffffbc8000021e00 0001 00000000 0x0 0x0
0xffffbc8000021e80 0001 00000000 0x0 0x0
0xffffbc8000021f00 0001 00000000 0x0 0x0
0xffffbc8000021f80 0001 00000000 0x0 0x0
0xffffbc8000022000 0001 00000000 0x0 0x0
0xffffbc8000022080 0001 00000000 0x0 0x0
0xffffbc8000022100 0001 00000000 0x0 0x0
0xffffbc8000022180 0001 00000000 0x0 0x0
0xffffbc8000022200 0001 00000000 0x0 0x0
0xffffbc8000022280 0001 00000000 0x0 0x0
0xffffbc8000022300 0001 00000000 0x0 0x0
0xffffbc8000022380 0001 00000000 0x0 0x0
0xffffbc8000022400 0001 00000000 0x0 0x0
0xffffbc8000022480 0001 00000000 0x0 0x0
0xffffbc8000022500 0001 00000000 0x0 0x0
0xffffbc8000022580 0001 00000000 0x0 0x0
0xffffbc8000022600 0001 00000000 0x0 0x0
0xffffbc8000022680 0001 00000000 0x0 0x0
0xffffbc8000022700 0001 00000000 0x0 0x0
0xffffbc8000022780 0001 00000000 0x0 0x0
0xffffbc8000022800 0001 00000000 0x0 0x0
0xffffbc8000022880 0001 00000000 0x0 0x0
0xffffbc8000022900 0001 00000000 0x0 0x0
0xffffbc8000022980 0001 00000000 0x0 0x0
0xffffbc8000022a00 0001 00000000 0x0 0x0
0xffffbc8000022a80 0001 00000000 0x0 0x0
0xffffbc8000022b00 0001 00000000 0x0 0x0
0xffffbc8000022b80 0001 00000000 0x0 0x0
0xffffbc8000022c00 0001 00000000 0x0 0x0
0xffffbc8000022c80 0001 00000000 0x0 0x0
0xffffbc8000022d00 0001 00000000 0x0 0x0
0xffffbc8000022d80 0001 00000000 0x0 0x0
0xffffbc8000022e00 0001 00000000 0x0 0x0
0xffffbc8000022e80 0001 00000000 0x0 0x0
0xffffbc8000022f00 0001 00000000 0x0 0x0
0xffffbc8000022f80 0001 00000000 0x0 0x0
0xffffbc8000023000 0001 00000000 0x0 0x0
0xffffbc8000023080 0001 00000000 0x0 0x0
0xffffbc8000023100 0001 00000000 0x0 0x0
0xffffbc8000023180 0001 00000000 0x0 0x0
0xffffbc8000023200 0001 00000000 0x0 0x0
0xffffbc8000023280 0001 00000000 0x0 0x0
0xffffbc8000023300 0001 00000000 0x0 0x0
0xffffbc8000023380 0001 00000000 0x0 0x0
0xffffbc8000023400 0001 00000000 0x0 0x0
0xffffbc8000023480 0001 00000000 0x0 0x0
0xffffbc8000023500 0001 00000000 0x0 0x0
0xffffbc8000023580 0001 00000000 0x0 0x0
0xffffbc8000023600 0001 00000000 0x0 0x0
0xffffbc8000023680 0001 00000000 0x0 0x0
0xffffbc8000023700 0001 00000000 0x0 0x0
0xffffbc8000023780 0001 00000000 0x0 0x0
0xffffbc8000023800 0001 00000000 0x0 0x0
0xffffbc8000023880 0001 00000000 0x0 0x0
0xffffbc8000023900 0001 00000000 0x0 0x0
0xffffbc8000023980 0001 00000000 0x0 0x0
0xffffbc8000023a00 0001 00000000 0x0 0x0
0xffffbc8000023a80 0001 00000000 0x0 0x0
0xffffbc8000023b00 0001 00000000 0x0 0x0
0xffffbc8000023b80 0001 00000000 0x0 0x0
0xffffbc8000023c00 0001 00000000 0x0 0x0
0xffffbc8000023c80 0001 00000000 0x0 0x0
0xffffbc8000023d00 0001 00000000 0x0 0x0
0xffffbc8000023d80 0001 00000000 0x0 0x0
0xffffbc8000023e00 0001 00000000 0x0 0x0
0xffffbc8000023e80 0001 00000000 0x0 0x0
0xffffbc8000023f00 0001 00000000 0x0 0x0
0xffffbc8000023f80 0001 00000000 0x0 0x0
0xffffbc8000024000 0001 00000000 0x0 0x0
0xffffbc8000024080 0001 00000000 0x0 0x0
0xffffbc8000024100 0001 00000000 0x0 0x0
0xffffbc8000024180 0001 00000000 0x0 0x0
0xffffbc8000024200 0001 00000000 0x0 0x0
0xffffbc8000024280 0001 00000000 0x0 0x0
0xffffbc8000024300 0001 00000000 0x0 0x0
0xffffbc8000024380 0001 00000000 0x0 0x0
0xffffbc8000024400 0001 00000000 0x0 0x0
0xffffbc8000024480 0001 00000000 0x0 0x0
0xffffbc8000024500 0001 00000000 0x0 0x0
0xffffbc8000024580 0001 00000000 0x0 0x0
0xffffbc8000024600 0001 00000000 0x0 0x0
0xffffbc8000024680 0001 00000000 0x0 0x0
0xffffbc8000024700 0001 00000000 0x0 0x0
0xffffbc8000024780 0001 00000000 0x0 0x0
0xffffbc8000024800 0001 00000000 0x0 0x0
0xffffbc8000024880 0001 00000000 0x0 0x0
0xffffbc8000024900 0001 00000000 0x0 0x0
0xffffbc8000024980 0001 00000000 0x0 0x0
0xffffbc8000024a00 0001 00000000 0x0 0x0
0xffffbc8000024a80 0001 00000000 0x0 0x0
0xffffbc8000024b00 0001 00000000 0x0 0x0
0xffffbc8000024b80 0001 00000000 0x0 0x0
0xffffbc8000024c00 0001 00000000 0x0 0x0
0xffffbc8000024c80 0001 00000000 0x0 0x0
0xffffbc8000024d00 0001 00000000 0x0 0x0
0xffffbc8000024d80 0001 00000000 0x0 0x0
0xffffbc8000024e00 0001 00000000 0x0 0x0
0xffffbc8000024e80 0001 00000000 0x0 0x0
0xffffbc8000024f00 0001 00000000 0x0 0x0
0xffffbc8000024f80 0001 00000000 0x0 0x0
0xffffbc8000025000 0001 00000000 0x0 0x0
0xffffbc8000025080 0001 00000000 0x0 0x0
0xffffbc8000025100 0001 00000000 0x0 0x0
0xffffbc8000025180 0001 00000000 0x0 0x0
0xffffbc8000025200 0001 00000000 0x0 0x0
0xffffbc8000025280 0001 00000000 0x0 0x0
0xffffbc8000025300 0001 00000000 0x0 0x0
0xffffbc8000025380 0001 00000000 0x0 0x0
0xffffbc8000025400 0001 00000000 0x0 0x0
0xffffbc8000025480 0001 00000000 0x0 0x0
0xffffbc8000025500 0001 00000000 0x0 0x0
0xffffbc8000025580 0001 00000000 0x0 0x0
0xffffbc8000025600 0001 00000000 0x0 0x0
0xffffbc8000025680 0001 00000000 0x0 0x0
0xffffbc8000025700 0001 00000000 0x0 0x0
0xffffbc8000025780 0001 00000000 0x0 0x0
0xffffbc8000025800 0001 00000000 0x0 0x0
0xffffbc8000025880 0001 00000000 0x0 0x0
0xffffbc8000025900 0001 00000000 0x0 0x0
0xffffbc8000025980 0001 00000000 0x0 0x0
0xffffbc8000025a00 0001 00000000 0x0 0x0
0xffffbc8000025a80 0001 00000000 0x0 0x0
0xffffbc8000025b00 0001 00000000 0x0 0x0
0xffffbc8000025b80 0001 00000000 0x0 0x0
0xffffbc8000025c00 0001 00000000 0x0 0x0
0xffffbc8000025c80 0001 00000000 0x0 0x0
0xffffbc8000025d00 0001 00000000 0x0 0x0
0xffffbc8000025d80 0001 00000000 0x0 0x0
0xffffbc8000025e00 0001 00000000 0x0 0x0
0xffffbc8000025e80 0001 00000000 0x0 0x0
0xffffbc8000025f00 0001 00000000 0x0 0x0
0xffffbc8000025f80 0001 00000000 0x0 0x0
0xffffbc8000026000 0001 00000000 0x0 0x0
0xffffbc8000026080 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages