UBSan: Undefined Behavior in union_parsepath

6 views

Skip to first unread message

syzbot

unread,

Jun 27, 2023, 2:40:05 PM6/27/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 87d35fd690e9 Convert UDF file system code from the deprica..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16e82ee0a80000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=f020b34edc832623410a
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/037f34c6a094/disk-87d35fd6.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/dfcbea8aab6f/netbsd-87d35fd6.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f020b3...@syzkaller.appspotmail.com

[ 922.6714395] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/fs/union/union_vnops.c:213:11, member access within null pointer of type 'struct union_node'

[ 922.6901203] cpu0: Begin traceback...
[ 922.7314402] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:292
[ 922.8715066] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 922.9915667] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
[ 923.0916170] union_parsepath() at netbsd:union_parsepath+0x313 sys/fs/union/union_vnops.c:213
[ 923.1916646] VOP_PARSEPATH() at netbsd:VOP_PARSEPATH+0x12f sys/kern/vnode_if.c:408
[ 923.3017197] lookup_parsepath() at netbsd:lookup_parsepath+0xa0 sys/kern/vfs_lookup.c:849
[ 923.4117737] namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 lookup_fastforward sys/kern/vfs_lookup.c:1286 [inline]
[ 923.4117737] namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 namei_oneroot sys/kern/vfs_lookup.c:1539 [inline]
[ 923.4117737] namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 sys/kern/vfs_lookup.c:1906
[ 923.5118243] namei() at netbsd:namei+0x2e sys/kern/vfs_lookup.c:1942
[ 923.6118727] do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
[ 923.6118727] do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe sys/kern/vfs_syscalls.c:2699
[ 923.7219261] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 923.7219261] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 923.8219762] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 923.8219762] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 923.8219762] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 923.8419863] --- syscall (number 470 via SYS_syscall) ---
[ 923.8820087] netbsd:syscall+0x2da:
[ 923.8820087] cpu0: End traceback...
[ 923.8820087] fatal breakpoint trap in supervisor mode
[ 923.8921495] trap type 1 code 0 rip 0xffffffff80235485 cs 0x8 rflags 0x246 cr2 0x7588aae00000 ilevel 0 rsp 0xffffd102483e85c0
[ 923.9049307] curlwp 0xfffffebf393e2080 pid 12727.5513 lowest kstack 0xffffd102483e42c0
Stopped in pid 12727.5513 (syz-executor.2) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:292
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
union_parsepath() at netbsd:union_parsepath+0x313 sys/fs/union/union_vnops.c:213
VOP_PARSEPATH() at netbsd:VOP_PARSEPATH+0x12f sys/kern/vnode_if.c:408
lookup_parsepath() at netbsd:lookup_parsepath+0xa0 sys/kern/vfs_lookup.c:849
namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 lookup_fastforward sys/kern/vfs_lookup.c:1286 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 namei_oneroot sys/kern/vfs_lookup.c:1539 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 sys/kern/vfs_lookup.c:1906
namei() at netbsd:namei+0x2e sys/kern/vfs_lookup.c:1942
do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe sys/kern/vfs_syscalls.c:2699
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 470 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/fs/union/union_vnops.c:213:11, member access within null pointer of type 'struct union_node'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
8496 8496 2 0 0 fffffebf2eb40100 syz-fuzzer
10131 10131 2 0 0 fffffebf39282b80 syz-executor.4
5707 23389 2 0 0 fffffebf38acc700 syz-executor.1
5707 5707 2 0 10040000 fffffebf35662580 syz-executor.1
10385 7978 3 0 180 fffffebf3a74c1c0 syz-executor.3 parked
10385 8795 3 1 40180 fffffebf39282300 syz-executor.3 parked
10385 10385 2 0 10040000 fffffebf41b6f6c0 syz-executor.3
12727>5513 7 0 0 fffffebf393e2080 syz-executor.2
12727 10984 3 1 180 fffffebf3901c8c0 syz-executor.2 parked
12727 12727 2 1 10040000 fffffebf2eb40540 syz-executor.2
20548 20548 2 0 40 fffffebf1c8f7640 syz-executor.5
7659 7659 2 1 40 fffffebf389c5a40 syz-executor.4
7877 7877 2 0 140 fffffebf38cdc200 syz-executor.3
4597 4597 2 0 140 fffffebf4a7cd700 syz-executor.2
4658 4658 2 0 140 fffffebf35500980 syz-executor.1
27382 27382 3 1 180 fffffebf38acc2c0 syz-executor.4 parked
21488 21488 3 1 180 fffffebf3a654a80 syz-executor.0 parked
26684 26684 3 0 180 fffffebf393e2900 syz-executor.3 parked
24401 24401 3 0 180 fffffebf1f4dd540 syz-executor.3 parked
27879 27879 3 0 180 fffffebf326af6c0 syz-executor.3 parked
24884 24884 3 1 180 fffffebf35662140 syz-executor.5 parked
14695 14695 3 1 180 fffffebf13cbe9c0 syz-executor.0 parked
9452 9452 3 0 180 fffffebf356629c0 syz-executor.4 parked
12081 12081 3 0 180 fffffebf2eeae080 syz-executor.4 parked
11084 11084 3 0 180 fffffebf392ff0c0 syz-executor.4 parked
11183 11183 3 0 180 fffffebf1ed62b00 syz-executor.4 parked
8023 8023 3 0 180 fffffebf39282740 syz-executor.4 parked
7150 7150 3 0 180 fffffebf3901c040 syz-executor.4 parked
8507 8507 3 0 180 fffffebf3265f240 syz-executor.0 parked
6138 6138 3 0 180 fffffebf3265f680 syz-executor.0 parked
7159 7159 3 1 180 fffffebf38cdc640 syz-executor.0 parked
6899 6899 3 1 180 fffffebf34851940 syz-executor.2 parked
7532 7532 3 1 180 fffffebf326af280 syz-executor.2 parked
5883 5883 3 1 180 fffffebf2eeae4c0 syz-executor.2 parked
6482 6482 3 1 180 fffffebf35262a00 syz-executor.2 parked
7119 7119 3 0 180 fffffebf2aef02c0 syz-executor.1 parked
8141 8141 3 1 180 fffffebf34c88580 syz-executor.1 parked
7989 7989 3 0 180 fffffebf38cdca80 syz-executor.1 parked
6532 6532 3 0 180 fffffebf326afb00 syz-executor.1 parked
2604 2604 3 0 180 fffffebf234e6280 syz-executor.2 parked
1168 1168 3 0 180 fffffebf35500540 syz-executor.2 parked
1488 2494 3 0 1100000 fffffebf1d479680 syz-executor.2 vfork
1488 1488 2 1 11000040 fffffebf1f8d6240 syz-executor.2
2480 2480 3 0 180 fffffebf35500100 syz-executor.4 parked
2517 2517 3 0 180 fffffebf34851500 syz-executor.4 parked
2618 2618 3 0 180 fffffebf259058c0 syz-executor.1 parked
1382 2225 3 0 1100000 fffffebf348510c0 syz-executor.4 vfork
1382 1382 2 1 11000040 fffffebf234e66c0 syz-executor.4
2665 2665 3 0 180 fffffebf28d94300 syz-executor.1 parked
994 1009 3 0 1100000 fffffebf1f84b900 syz-executor.1 vfork
994 994 2 0 11000040 fffffebf1238d8c0 syz-executor.1
2485 2485 3 0 180 fffffebf28ce1780 syz-executor.2 parked
2488 2488 3 1 180 fffffebf28ce1340 syz-executor.2 parked
2491 2465 3 1 1100000 fffffebf25905480 syz-executor.2 vfork
2491 2491 2 0 11000040 fffffebf1ed62280 syz-executor.2
809 809 3 0 180 fffffebf25905040 syz-executor.1 parked
1846 1846 3 1 180 fffffebf28ce1bc0 syz-executor.1 parked
959 959 3 1 180 fffffebf1fb829c0 syz-executor.5 parked
807 2746 3 1 1100000 fffffebf1fcd9a80 syz-executor.1 vfork
807 807 2 0 11000040 fffffebf28d94b80 syz-executor.1
1725 1725 3 1 180 fffffebf16007180 syz-executor.5 parked
1187 1187 3 1 180 fffffebf1e234a40 syz-executor.3 parked
919 926 3 1 1100000 fffffebf1f8d6ac0 syz-executor.5 vfork
919 919 2 0 11000040 fffffebf1f7e0500 syz-executor.5
901 901 3 0 180 fffffebf1f4dd100 syz-executor.3 parked
921 921 3 0 180 fffffebf16007a00 syz-executor.4 parked
923 923 3 0 180 fffffebf234e6b00 syz-executor.4 parked
2732 808 3 0 1100000 fffffebf1f7e00c0 syz-executor.3 vfork
2732 2732 2 0 11000040 fffffebf2aef0700 syz-executor.3
925 924 3 0 1100000 fffffebf2aef0b40 syz-executor.4 vfork
925 925 2 0 11000040 fffffebf1d5a0340 syz-executor.4
2271 2271 3 0 180 fffffebf1fcd9200 syz-executor.5 parked
1535 1535 3 0 180 fffffebf1f8d6680 syz-executor.5 parked
2347 2347 3 0 180 fffffebf1f84b080 syz-executor.3 parked
765 1843 3 1 1100000 fffffebf1f39f5c0 syz-executor.5 vfork
765 765 2 0 11000040 fffffebf1f7e0940 syz-executor.5
2104 764 3 0 1100000 fffffebf1fcd9640 syz-executor.3 vfork
2104 2104 2 0 11000040 fffffebf1fc10b40 syz-executor.3
1620 1620 3 0 180 fffffebf1fb82580 syz-executor.1 parked
749 749 3 0 180 fffffebf1d479ac0 syz-executor.2 parked
2125 2125 3 0 180 fffffebf1d479240 syz-executor.2 parked
1619 1619 3 0 180 fffffebf1d5a0780 syz-executor.4 parked
2126 2126 3 1 180 fffffebf1fc102c0 syz-executor.1 parked
2537 2537 3 0 180 fffffebf1fb82140 syz-executor.4 parked
1609 1624 3 0 1100000 fffffebf1f74e040 syz-executor.2 vfork
1609 1609 2 0 11000040 fffffebf1c8f7a80 syz-executor.2
2143 869 3 0 1100000 fffffebf1e234600 syz-executor.4 vfork
2143 2143 2 0 11000040 fffffebf1238d480 syz-executor.4
1607 1622 3 1 1100000 fffffebf1d5a0bc0 syz-executor.1 vfork
1607 1607 2 0 11000040 fffffebf1f84b4c0 syz-executor.1
2133 2133 3 0 180 fffffebf191d7600 syz-executor.5 parked
1606 1606 3 0 180 fffffebf191d7a40 syz-executor.5 parked
1242 1608 3 0 1100000 fffffebf1f74e480 syz-executor.5 vfork
1242 1242 2 0 11000040 fffffebf1f39fa00 syz-executor.5
579 579 3 0 180 fffffebf1ed626c0 syz-executor.3 parked
1971 2122 3 0 1100000 fffffebf1f74cb80 syz-executor.3 vfork
1971 1971 2 1 11000040 fffffebf1fc10700 syz-executor.3
666 666 3 0 180 fffffebf1c8f7200 syz-executor.5 parked
1825 662 3 0 1100000 fffffebf1f74c300 syz-executor.5 vfork
1825 1825 2 1 11000040 fffffebf1f74e8c0 syz-executor.5
1223 6606 2 1 140 fffffebf389c51c0 syz-fuzzer
1223 1384 3 0 180 fffffebf191d71c0 syz-fuzzer parked
1223 1204 3 0 180 fffffebf11e85ac0 syz-fuzzer wait
1223 1236 3 1 180 fffffebf121d3b00 syz-fuzzer wait
1223 449 3 1 1c0 fffffebf160075c0 syz-fuzzer wait
1223 1244 3 1 1c0 fffffebf121d36c0 syz-fuzzer pipe_rd
1223 895 3 0 1c0 fffffebf13cbe580 syz-fuzzer wait
1223 1239 3 0 180 fffffebf1309b940 syz-fuzzer parked
1223 1130 3 0 180 fffffebf1301f4c0 syz-fuzzer parked
1223 1120 2 0 100 fffffebf1309b0c0 syz-fuzzer
1223 941 3 0 180 fffffebf12829340 syz-fuzzer wait
1223 1233 3 0 180 fffffebf1239b700 syz-fuzzer parked
1223 1238 2 0 100 fffffebf1309b500 syz-fuzzer
1223 1223 3 0 180 fffffebf12354300 syz-fuzzer parked
1235 1235 3 0 180 fffffebf13f19980 sshd select
1222 1222 3 1 180 fffffebf13f19540 getty nanoslp
1224 1224 3 0 180 fffffebf13f19100 getty nanoslp
1225 1225 3 0 180 fffffebf11e7f200 getty nanoslp
1216 1216 3 0 1c0 fffffebf121d3280 getty ttyraw
1103 1103 3 0 180 fffffebf13cbe140 sshd select
953 953 3 1 180 fffffebf1238d040 powerd kqueue
700 700 3 0 180 fffffebf1301f900 syslogd kqueue
559 559 3 0 180 fffffebf1301f080 dhcpcd poll
558 558 3 1 180 fffffebf12829780 dhcpcd poll
742 742 3 0 180 fffffebf1239b2c0 dhcpcd poll
602 602 3 1 180 fffffebf12829bc0 dhcpcd poll
292 292 3 0 180 fffffebf12354740 dhcpcd poll
485 485 3 1 180 fffffebf1239bb40 dhcpcd poll
291 291 3 0 180 fffffebf12354b80 dhcpcd poll
1 1 3 1 180 fffffebf09c80140 init wait
0 7672 5 0 200 fffffebf3bfe9ac0 (zombie)
0 10699 3 0 200 fffffebf2eeae900 swapiod swapiod
0 7320 3 1 200 fffffebf41b6f280 ktrace ktrwait
0 3714 3 1 200 fffffebf389c5600 ktrace ktrwait
0 3646 3 1 200 fffffebf35262180 ktrace ktrwait
0 734 3 1 200 fffffebf11e7f640 physiod physiod
0 196 3 0 200 fffffebf11e85680 pooldrain pooldrain
0 > 195 7 1 240 fffffebf11e85240 ioflush
0 194 3 1 200 fffffebf11e7fa80 pgdaemon pgdaemon
0 170 3 1 200 fffffebf0fdbfa40 usb7 usbevt
0 169 3 0 200 fffffebf0fdbf600 usb6 usbevt
0 168 3 0 200 fffffebf0fdbf1c0 usb5 usbevt
0 167 3 1 200 fffffebf0cd42a00 usb4 usbevt
0 166 3 1 200 fffffebf0cd425c0 usb3 usbevt
0 165 3 0 200 fffffebf0cd42180 usb2 usbevt
0 31 3 0 200 fffffebf09c809c0 usb1 usbevt
0 63 3 1 200 fffffebf09af0740 usb0 usbevt
0 126 3 1 200 fffffebf09af0b80 usbtask-dr usbtsk
0 125 3 1 200 fffffebf09be7340 usbtask-hc usbtsk
0 124 3 0 200 fffffebf080a1b00 swwreboot swwreboot
0 123 2 0 240 fffffebf09c80580 npfgc0
0 122 3 1 200 fffffebf09c6b980 rt_free rt_free
0 121 3 0 200 fffffebf09c6b540 unpgc unpgc
0 120 2 0 200 fffffebf09c6b100 key_timehandler
0 119 3 1 200 fffffebf09c56940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 fffffebf09c56500 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 fffffebf09c560c0 nd6_timer
0 116 3 1 200 fffffebf09c3a900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 fffffebf09c3a4c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 fffffebf09c3a080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 fffffebf09c248c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 fffffebf09c24480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 fffffebf09c24040 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 fffffebf09be7bc0 rt_timer
0 109 3 0 200 fffffebf09be7780 vmem_rehash vmem_rehash
0 100 3 0 200 fffffebf09af0300 entbutler entropy
0 99 3 0 200 fffffebf09550b40 viomb balloon
0 98 3 1 200 fffffebf09550700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 fffffebf095502c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 fffffebf080a16c0 scsibus0 sccomp
0 29 3 0 200 fffffebf080a1280 pms0 pmsreset
0 28 3 1 200 fffffebf07facac0 xcall/1 xcall
0 27 1 1 200 fffffebf07fac680 softser/1
0 26 1 1 200 fffffebf07fac240 softclk/1
0 25 1 1 200 fffffebf07f87a80 softbio/1
0 24 1 1 200 fffffebf07f87640 softnet/1
0 23 1 1 201 fffffebf07f87200 idle/1
0 22 3 0 200 fffffec03632da40 lnxsyswq lnxsyswq
0 21 3 1 200 fffffec03632d600 lnxubdwq lnxubdwq
0 20 3 1 200 fffffec03632d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 fffffec036334a00 lnxlngwq lnxlngwq
0 18 3 1 200 fffffec0363345c0 lnxhipwq lnxhipwq
0 17 3 1 200 fffffec036334180 lnxrcugc lnxrcugc
0 16 3 0 200 fffffec0363539c0 sysmon smtaskq
0 15 3 1 200 fffffec036353580 pmfsuspend pmfsuspend
0 14 3 0 200 fffffec036353140 pmfevent pmfevent
0 13 3 1 200 fffffec03635e980 sopendfree sopendfr
0 12 3 0 200 fffffec03635e540 ifwdog ifwdog
0 11 3 1 200 fffffec03635e100 iflnkst iflnkst
0 10 3 1 200 fffffec037393940 nfssilly nfssilly
0 9 3 1 200 fffffec037393500 vdrain vdrain
0 8 3 1 200 fffffec0373930c0 modunload mod_unld
0 7 3 0 200 fffffec0373ba900 xcall/0 xcall
0 6 1 0 200 fffffec0373ba4c0 softser/0
0 5 1 0 200 fffffec0373ba080 softclk/0
0 4 1 0 200 fffffec0373e98c0 softbio/0
0 3 1 0 200 fffffec0373e9480 softnet/0
0 2 1 0 201 fffffec0373e9040 idle/0
0 0 2 0 240 ffffffff8674e000 swapper
[Locks tracked through LWPs]

****** LWP 12727.10984 (syz-executor.2) @ 0xfffffebf3901c8c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fstrans_init+0x20 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffffebf3901c8c0 last held: 0xfffffebf3901c8c0
last locked* : netbsd:vfs_suspend+0x27e
unlocked : netbsd:mount_domount+0xba1
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:fstrans_init+0x33 sys/kern/vfs_trans.c:137)
lock address : netbsd:fstrans_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x33
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffffebf3901c8c0 last held: 0xfffffebf3901c8c0
last locked* : netbsd:fstrans_setstate+0x1d5
unlocked : netbsd:fstrans_done+0x6e6
owner field : 0xfffffebf11e85240 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 558.558 (dhcpcd) @ 0xfffffebf12829780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffebf12829780 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xfffffebf1239b2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffebf1239b2c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xfffffebf1239bb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffebf1239bb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xfffffebf12354b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffebf12354b80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xfffffebf07fac240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffebf07fac240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffffec03635e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffec03635e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8674e000, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8674e000 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffebf393e2080 last held: 0xfffffebf393e2080
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffd10000007180 0045 00000000 0x0 0x0
0xffffd10000007200 0045 00000000 0x0 0x0
0xffffd10000007280 0045 00000000 0x0 0x0
0xffffd10000007300 0045 00000000 0x0 0x0
0xffffd10000007380 0045 00000000 0x0 0x0
0xffffd10000007400 0045 00000000 0x0 0x0
0xffffd10000007480 0045 00000000 0x0 0x0
0xffffd10000007500 0045 00000000 0x0 0x0
0xffffd10000007580 0045 00000000 0x0 0x0
0xffffd10000007600 0045 00000000 0x0 0x0
0xffffd10000007680 0041 00000000 0x0 0x0
0xffffd10000007700 0041 00000000 0x0 0x0
0xffffd10000007780 0041 00000000 0x0 0x0
0xffffd10000007800 0041 00000000 0x0 0x0
0xffffd10000007880 0045 00000000 0x0 0x0
0xffffd10000007900 0045 00000000 0x0 0x0
0xffffd10000007980 0041 00000000 0x0 0x0
0xffffd10000007a00 0041 00000000 0x0 0x0
0xffffd10000007a80 0041 00000000 0x0 0x0
0xffffd10000007b00 0041 00000000 0x0 0x0
0xffffd10000007b80 0041 00000000 0x0 0x0
0xffffd10000007c00 0041 00000000 0x0 0x0
0xffffd10000007c80 0041 00000000 0x0 0x0
0xffffd10000007d00 0041 00000000 0x0 0x0
0xffffd10000007d80 0041 00000000 0x0 0x0
0xffffd10000007e00 0041 00000000 0x0 0x0
0xffffd10000007e80 0041 00000000 0x0 0x0
0xffffd10000007f00 0041 00000000 0x0 0x0
0xffffd10000007f80 0041 00000000 0x0 0x0
0xffffd10000008000 0041 00000000 0x0 0x0
0xffffd10000008080 0041 00000000 0x0 0x0
0xffffd10000008100 0041 00000000 0x0 0x0
0xffffd10000008180 0041 00000000 0x0 0x0
0xffffd10000008200 0041 00000000 0x0 0x0
0xffffd10000008280 0041 00000000 0x0 0x0
0xffffd10000008300 0041 00000000 0x0 0x0
0xffffd10000008380 0041 00000000 0x0 0x0
0xffffd10000008400 0041 00000000 0x0 0x0
0xffffd10000008480 0041 00000000 0x0 0x0
0xffffd10000008500 0041 00000000 0x0 0x0
0xffffd10000008580 0041 00000000 0x0 0x0
0xffffd10000008600 0045 00000000 0x0 0x0
0xffffd10000008680 0041 00000000 0x0 0x0
0xffffd10000008700 0041 00000000 0x0 0x0
0xffffd10000008780 0041 00000000 0x0 0x0
0xffffd10000008800 0045 00000000 0x0 0x0
0xffffd10000008880 0041 00000000 0x0 0x0
0xffffd10000008900 0041 00000000 0x0 0x0
0xffffd10000008980 0041 00000000 0x0 0x0
0xffffd10000008a00 0041 00000000 0x0 0x0
0xffffd10000008a80 0041 00000000 0x0 0x0
0xffffd10000008b00 0041 00000000 0x0 0x0
0xffffd10000008b80 0041 00000000 0x0 0x0
0xffffd10000008c00 0041 00000000 0x0 0x0
0xffffd10000008c80 0041 00000000 0x0 0x0
0xffffd10000008d00 0041 00000000 0x0 0x0
0xffffd10000008d80 0041 00000000 0x0 0x0
0xffffd10000008e00 0041 00000000 0x0 0x0
0xffffd10000008e80 0041 00000000 0x0 0x0
0xffffd10000008f00 0041 00000000 0x0 0x0
0xffffd10000008f80 0041 00000000 0x0 0x0
0xffffd10000009000 0041 00000000 0x0 0x0
0xffffd10000009080 0041 00000000 0x0 0x0
0xffffd10000009100 0041 00000000 0x0 0x0
0xffffd10000009180 0041 00000000 0x0 0x0
0xffffd10000009200 0041 00000000 0x0 0x0
0xffffd10000009280 0041 00000000 0x0 0x0
0xffffd10000009300 0041 00000000 0x0 0x0
0xffffd10000009380 0041 00000000 0x0 0x0
0xffffd10000009400 0041 00000000 0x0 0x0
0xffffd10000009480 0045 00000000 0x0 0x0
0xffffd10000009500 0041 00000000 0x0 0x0
0xffffd10000009580 0041 00000000 0x0 0x0
0xffffd10000009600 0041 00000000 0x0 0x0
0xffffd10000009680 0041 00000000 0x0 0x0
0xffffd10000009700 0041 00000000 0x0 0x0
0xffffd10000009780 0041 00000000 0x0 0x0
0xffffd10000009800 0041 00000000 0x0 0x0
0xffffd10000009880 0041 00000000 0x0 0x0
0xffffd10000009900 0041 00000000 0x0 0x0
0xffffd10000009980 0041 00000000 0x0 0x0
0xffffd10000009a00 0041 00000000 0x0 0x0
0xffffd10000009a80 0045 00000000 0x0 0x0
0xffffd10000009b00 0041 00000000 0x0 0x0
0xffffd10000009b80 0041 00000000 0x0 0x0
0xffffd10000009c00 0041 00000000 0x0 0x0
0xffffd10000009c80 0041 00000000 0x0 0x0
0xffffd10000009d00 0041 00000000 0x0 0x0
0xffffd10000009d80 0041 00000000 0x0 0x0
0xffffd10000009e00 0041 00000000 0x0 0x0
0xffffd10000009e80 0041 00000000 0x0 0x0
0xffffd10000009f00 0041 00000000 0x0 0x0
0xffffd10000009f80 0041 00000000 0x0 0x0
0xffffd1000000a000 0041 00000000 0x0 0x0
0xffffd1000000a080 0041 00000000 0x0 0x0
0xffffd1000000a100 0041 00000000 0x0 0x0
0xffffd1000000a180 0041 00000000 0x0 0x0
0xffffd1000000a200 0041 00000000 0x0 0x0
0xffffd1000000a280 0041 00000000 0x0 0x0
0xffffd1000000a300 0041 00000000 0x0 0x0
0xffffd1000000a380 0041 00000000 0x0 0x0
0xffffd1000000a400 0041 00000000 0x0 0x0
0xffffd1000000a480 0041 00000000 0x0 0x0
0xffffd1000000a500 0041 00000000 0x0 0x0
0xffffd1000000a580 0041 00000000 0x0 0x0
0xffffd1000000a600 0041 00000000 0x0 0x0
0xffffd1000000a680 0041 00000000 0x0 0x0
0xffffd1000000a700 0041 00000000 0x0 0x0
0xffffd1000000a780 0041 00000000 0x0 0x0
0xffffd1000000a800 0041 00000000 0x0 0x0
0xffffd1000000a880 0041 00000000 0x0 0x0
0xffffd1000000a900 0041 00000000 0x0 0x0
0xffffd1000000a980 0041 00000000 0x0 0x0
0xffffd1000000aa00 0041 00000000 0x0 0x0
0xffffd1000000aa80 0041 00000000 0x0 0x0
0xffffd1000000ab00 0041 00000000 0x0 0x0
0xffffd1000000ab80 0041 00000000 0x0 0x0
0xffffd1000000ac00 0041 00000000 0x0 0x0
0xffffd1000000ac80 0041 00000000 0x0 0x0
0xffffd1000000ad00 0041 00000000 0x0 0x0
0xffffd1000000ad80 0041 00000000 0x0 0x0
0xffffd1000000ae00 0041 00000000 0x0 0x0
0xffffd1000000ae80 0045 00000000 0x0 0x0
0xffffd1000000af00 0045 00000000 0x0 0x0
0xffffd1000000af80 0045 00000000 0x0 0x0
0xffffd1000000b000 0041 00000000 0x0 0x0
0xffffd1000000b080 0041 00000000 0x0 0x0
0xffffd1000000b100 0041 00000000 0x0 0x0
0xffffd1000000b180 0045 00000000 0x0 0x0
0xffffd1000000b200 0041 00000000 0x0 0x0
0xffffd1000000b280 0045 00000000 0x0 0x0
0xffffd1000000b300 0045 00000000 0x0 0x0
0xffffd1000000b380 0045 00000000 0x0 0x0
0xffffd1000000b400 0041 00000000 0x0 0x0
0xffffd1000000b480 0041 00000000 0x0 0x0
0xffffd1000000b500 0045 00000000 0x0 0x0
0xffffd1000000b580 0045 00000000 0x0 0x0
0xffffd1000000b600 0045 00000000 0x0 0x0
0xffffd1000000b680 0045 00000000 0x0 0x0
0xffffd1000000b700 0045 00000000 0x0 0x0
0xffffd1000000b780 0045 00000000 0x0 0x0
0xffffd1000000b800 0045 00000000 0x0 0x0
0xffffd1000000b880 0041 00000000 0x0 0x0
0xffffd1000000b900 0045 00000000 0x0 0x0
0xffffd1000000b980 0045 00000000 0x0 0x0
0xffffd1000000ba00 0045 00000000 0x0 0x0
0xffffd1000000ba80 0045 00000000 0x0 0x0
0xffffd1000000bb00 0045 00000000 0x0 0x0
0xffffd1000000bb80 0045 00000000 0x0 0x0
0xffffd1000000bc00 0045 00000000 0x0 0x0
0xffffd1000000bc80 0041 00000000 0x0 0x0
0xffffd1000000bd00 0045 00000000 0x0 0x0
0xffffd1000000bd80 0045 00000000 0x0 0x0
0xffffd1000000be00 0045 00000000 0x0 0x0
0xffffd1000000be80 0045 00000000 0x0 0x0
0xffffd1000000bf00 0045 00000000 0x0 0x0
0xffffd1000000bf80 0045 00000000 0x0 0x0
0xffffd1000000c000 0045 00000000 0x0 0x0
0xffffd1000000c080 0041 00000000 0x0 0x0
0xffffd1000000c100 0045 00000000 0x0 0x0
0xffffd1000000c180 0045 00000000 0x0 0x0
0xffffd1000000c200 0045 00000000 0x0 0x0
0xffffd1000000c280 0045 00000000 0x0 0x0
0xffffd1000000c300 0045 00000000 0x0 0x0
0xffffd1000000c380 0045 00000000 0x0 0x0
0xffffd1000000c400 0045 00000000 0x0 0x0
0xffffd1000000c480 0045 00000000 0x0 0x0
0xffffd1000000c500 0045 00000000 0x0 0x0
0xffffd1000000c580 0045 00000000 0x0 0x0
0xffffd1000000c600 0045 00000000 0x0 0x0
0xffffd1000000c680 0045 00000000 0x0 0x0
0xffffd1000000c700 0041 00000000 0x0 0x0
0xffffd1000000c780 0041 00000000 0x0 0x0
0xffffd1000000c800 0045 00000000 0x0 0x0
0xffffd1000000c880 0045 00000000 0x0 0x0
0xffffd1000000c900 0045 00000000 0x0 0x0
0xffffd1000000c980 0045 00000000 0x0 0x0
0xffffd1000000ca00 0045 00000000 0x0 0x0
0xffffd1000000ca80 0041 00000000 0x0 0x0
0xffffd1000000cb00 0041 00000000 0x0 0x0
0xffffd1000000cb80 0041 00000000 0x0 0x0
0xffffd1000000cc00 0045 00000000 0x0 0x0
0xffffd1000000cc80 0045 00000000 0x0 0x0
0xffffd1000000cd00 0045 00000000 0x0 0x0
0xffffd1000000cd80 0041 00000000 0x0 0x0
0xffffd1000000ce00 0045 00000000 0x0 0x0
0xffffd1000000ce80 0041 00000000 0x0 0x0
0xffffd1000000cf00 0041 00000000 0x0 0x0
0xffffd1000000cf80 0041 00000000 0x0 0x0
0xffffd1000000d000 0041 00000000 0x0 0x0
0xffffd1000000d080 0045 00000000 0x0 0x0
0xffffd1000000d100 0041 00000000 0x0 0x0
0xffffd1000000d180 0041 00000000 0x0 0x0
0xffffd1000000d200 0041 00000000 0x0 0x0
0xffffd1000000d280 0041 00000000 0x0 0x0
0xffffd1000000d300 0045 00000000 0x0 0x0
0xffffd1000000d380 0041 00000000 0x0 0x0
0xffffd1000000d400 0041 00000000 0x0 0x0
0xffffd1000000d480 0045 00000000 0x0 0x0
0xffffd1000000d500 0041 00000000 0x0 0x0
0xffffd1000000d580 0041 00000000 0x0 0x0
0xffffd1000000d600 0041 00000000 0x0 0x0
0xffffd1000000d680 0045 00000000 0x0 0x0
0xffffd1000000d700 0041 00000000 0x0 0x0
0xffffd1000000d780 0045 00000000 0x0 0x0
0xffffd1000000d800 0041 00000000 0x0 0x0
0xffffd1000000d880 0045 00000000 0x0 0x0
0xffffd1000000d900 0041 00000000 0x0 0x0
0xffffd1000000d980 0041 00000000 0x0 0x0
0xffffd1000000da00 0041 00000000 0x0 0x0
0xffffd1000000da80 0041 00000000 0x0 0x0
0xffffd1000000db00 0045 00000000 0x0 0x0
0xffffd1000000db80 0045 00000000 0x0 0x0
0xffffd1000000dc00 0041 00000000 0x0 0x0
0xffffd1000000dc80 0041 00000000 0x0 0x0
0xffffd1000000dd00 0041 00000000 0x0 0x0
0xffffd1000000dd80 0041 00000000 0x0 0x0
0xffffd1000000de00 0041 00000000 0x0 0x0
0xffffd1000000de80 0041 00000000 0x0 0x0
0xffffd1000000df00 0045 00000000 0x0 0x0
0xffffd1000000df80 0045 00000000 0x0 0x0
0xffffd1000000e000 0045 00000000 0x0 0x0
0xffffd1000000e080 0041 00000000 0x0 0x0
0xffffd1000000e100 0041 00000000 0x0 0x0
0xffffd1000000e180 0045 00000000 0x0 0x0
0xffffd1000000e200 0041 00000000 0x0 0x0
0xffffd1000000e280 0045 00000000 0x0 0x0
0xffffd1000000e300 0045 00000000 0x0 0x0
0xffffd1000000e380 0041 00000000 0x0 0x0
0xffffd1000000e400 0045 00000000 0x0 0x0
0xffffd1000000e480 0041 00000000 0x0 0x0
0xffffd1000000e500 0045 00000000 0x0 0x0
0xffffd1000000e580 0041 00000000 0x0 0x0
0xffffd1000000e600 0045 00000000 0x0 0x0
0xffffd1000000e680 0041 00000000 0x0 0x0
0xffffd1000000e700 0041 00000000 0x0 0x0
0xffffd1000000e780 0041 00000000 0x0 0x0
0xffffd1000000e800 0045 00000000 0x0 0x0
0xffffd1000000e880 0041 00000000 0x0 0x0
0xffffd1000000e900 0041 00000000 0x0 0x0
0xffffd1000000e980 0041 00000000 0x0 0x0
0xffffd1000000ea00 0041 00000000 0x0 0x0
0xffffd1000000ea80 0045 00000000 0x0 0x0
0xffffd1000000eb00 0041 00000000 0x0 0x0
0xffffd1000000eb80 0045 00000000 0x0 0x0
0xffffd1000000ec00 0041 00000000 0x0 0x0
0xffffd1000000ec80 0045 00000000 0x0 0x0
0xffffd1000000ed00 0041 00000000 0x0 0x0
0xffffd1000000ed80 0041 00000000 0x0 0x0
0xffffd1000000ee00 0041 00000000 0x0 0x0
0xffffd1000000ee80 0041 00000000 0x0 0x0
0xffffd1000000ef00 0041 00000000 0x0 0x0
0xffffd1000000ef80 0041 00000000 0x0 0x0
0xffffd1000000f000 0041 00000000 0x0 0x0
0xffffd1000000f080 0045 00000000 0x0 0x0
0xffffd1000000f100 0041 00000000 0x0 0x0
0xffffd1000000f180 0041 00000000 0x0 0x0
0xffffd1000000f200 0041 00000000 0x0 0x0
0xffffd1000000f280 0045 00000000 0x0 0x0
0xffffd1000000f300 0041 00000000 0x0 0x0
0xffffd1000000f380 0041 00000000 0x0 0x0
0xffffd1000000f400 0045 00000000 0x0 0x0
0xffffd1000000f480 0041 00000000 0x0 0x0
0xffffd1000000f500 0041 00000000 0x0 0x0
0xffffd1000000f580 0041 00000000 0x0 0x0
0xffffd1000000f600 0041 00000000 0x0 0x0
0xffffd1000000f680 0041 00000000 0x0 0x0
0xffffd1000000f700 0041 00000000 0x0 0x0
0xffffd1000000f780 0041 00000000 0x0 0x0
0xffffd1000000f800 0041 00000000 0x0 0x0
0xffffd1000000f880 0045 00000000 0x0 0x0
0xffffd1000000f900 0041 00000000 0x0 0x0
0xffffd1000000f980 0045 00000000 0x0 0x0
0xffffd1000000fa00 0041 00000000 0x0 0x0
0xffffd1000000fa80 0041 00000000 0x0 0x0
0xffffd1000000fb00 0041 00000000 0x0 0x0
0xffffd1000000fb80 0041 00000000 0x0 0x0
0xffffd1000000fc00 0045 00000000 0x0 0x0
0xffffd1000000fc80 0041 00000000 0x0 0x0
0xffffd1000000fd00 0045 00000000 0x0 0x0
0xffffd1000000fd80 0041 00000000 0x0 0x0
0xffffd1000000fe00 0041 00000000 0x0 0x0
0xffffd1000000fe80 0041 00000000 0x0 0x0
0xffffd1000000ff00 0041 00000000 0x0 0x0
0xffffd1000000ff80 0041 00000000 0x0 0x0
0xffffd10000010000 0041 00000000 0x0 0x0
0xffffd10000010080 0045 00000000 0x0 0x0
0xffffd10000010100 0041 00000000 0x0 0x0
0xffffd10000010180 0045 00000000 0x0 0x0
0xffffd10000010200 0045 00000000 0x0 0x0
0xffffd10000010280 0041 00000000 0x0 0x0
0xffffd10000010300 0041 00000000 0x0 0x0
0xffffd10000010380 0041 00000000 0x0 0x0
0xffffd10000010400 0041 00000000 0x0 0x0
0xffffd10000010480 0041 00000000 0x0 0x0
0xffffd10000010500 0045 00000000 0x0 0x0
0xffffd10000010580 0041 00000000 0x0 0x0
0xffffd10000010600 0041 00000000 0x0 0x0
0xffffd10000010680 0045 00000000 0x0 0x0
0xffffd10000010700 0041 00000000 0x0 0x0
0xffffd10000010780 0041 00000000 0x0 0x0
0xffffd10000010800 0041 00000000 0x0 0x0
0xffffd10000010880 0041 00000000 0x0 0x0
0xffffd10000010900 0041 00000000 0x0 0x0
0xffffd10000010980 0045 00000000 0x0 0x0
0xffffd10000010a00 0045 00000000 0x0 0x0
0xffffd10000010a80 0041 00000000 0x0 0x0
0xffffd10000010b00 0041 00000000 0x0 0x0
0xffffd10000010b80 0041 00000000 0x0 0x0
0xffffd10000010c00 0041 00000000 0x0 0x0
0xffffd10000010c80 0045 00000000 0x0 0x0
0xffffd10000010d00 0041 00000000 0x0 0x0
0xffffd10000010d80 0041 00000000 0x0 0x0
0xffffd10000010e00 0041 00000000 0x0 0x0
0xffffd10000010e80 0045 00000000 0x0 0x0
0xffffd10000010f00 0041 00000000 0x0 0x0
0xffffd10000010f80 0041 00000000 0x0 0x0
0xffffd10000011000 0041 00000000 0x0 0x0
0xffffd10000011080 0041 00000000 0x0 0x0
0xffffd10000011100 0041 00000000 0x0 0x0
0xffffd10000011180 0041 00000000 0x0 0x0
0xffffd10000011200 0045 00000000 0x0 0x0
0xffffd10000011280 0041 00000000 0x0 0x0
0xffffd10000011300 0041 00000000 0x0 0x0
0xffffd10000011380 0041 00000000 0x0 0x0
0xffffd10000011400 0041 00000000 0x0 0x0
0xffffd10000011480 0045 00000000 0x0 0x0
0xffffd10000011500 0045 00000000 0x0 0x0
0xffffd10000011580 0041 00000000 0x0 0x0
0xffffd10000011600 0041 00000000 0x0 0x0
0xffffd10000011680 0041 00000000 0x0 0x0
0xffffd10000011700 0045 00000000 0x0 0x0
0xffffd10000011780 0045 00000000 0x0 0x0
0xffffd10000011800 0041 00000000 0x0 0x0
0xffffd10000011880 0041 00000000 0x0 0x0
0xffffd10000011900 0041 00000000 0x0 0x0
0xffffd10000011980 0041 00000000 0x0 0x0
0xffffd10000011a00 0041 00000000 0x0 0x0
0xffffd10000011a80 0041 00000000 0x0 0x0
0xffffd10000011b00 0041 00000000 0x0 0x0
0xffffd10000011b80 0041 00000000 0x0 0x0
0xffffd10000011c00 0041 00000000 0x0 0x0
0xffffd10000011c80 0041 00000000 0x0 0x0
0xffffd10000011d00 0041 00000000 0x0 0x0
0xffffd10000011d80 0041 00000000 0x0 0x0
0xffffd10000011e00 0045 00000000 0x0 0x0
0xffffd10000011e80 0041 00000000 0x0 0x0
0xffffd10000011f00 0041 00000000 0x0 0x0
0xffffd10000011f80 0041 00000000 0x0 0x0
0xffffd10000012000 0041 00000000 0x0 0x0
0xffffd10000012080 0041 00000000 0x0 0x0
0xffffd10000012100 0045 00000000 0x0 0x0
0xffffd10000012180 0045 00000000 0x0 0x0
0xffffd10000012200 0041 00000000 0x0 0x0
0xffffd10000012280 0045 00000000 0x0 0x0
0xffffd10000012300 0041 00000000 0x0 0x0
0xffffd10000012380 0041 00000000 0x0 0x0
0xffffd10000012400 0041 00000000 0x0 0x0
0xffffd10000012480 0041 00000000 0x0 0x0
0xffffd10000012500 0041 00000000 0x0 0x0
0xffffd10000012580 0041 00000000 0x0 0x0
0xffffd10000012600 0041 00000000 0x0 0x0
0xffffd10000012680 0041 00000000 0x0 0x0
0xffffd10000012700 0041 00000000 0x0 0x0
0xffffd10000012780 0041 00000000 0x0 0x0
0xffffd10000012800 0041 00000000 0x0 0x0
0xffffd10000012880 0041 00000000 0x0 0x0
0xffffd10000012900 0041 00000000 0x0 0x0
0xffffd10000012980 0041 00000000 0x0 0x0
0xffffd10000012a00 0041 00000000 0x0 0x0
0xffffd10000012a80 0041 00000000 0x0 0x0
0xffffd10000012b00 0041 00000000 0x0 0x0
0xffffd10000012b80 0041 00000000 0x0 0x0
0xffffd10000012c00 0041 00000000 0x0 0x0
0xffffd10000012c80 0041 00000000 0x0 0x0
0xffffd10000012d00 0041 00000000 0x0 0x0
0xffffd10000012d80 0041 00000000 0x0 0x0
0xffffd10000012e00 0041 00000000 0x0 0x0
0xffffd10000012e80 0041 00000000 0x0 0x0
0xffffd10000012f00 0041 00000000 0x0 0x0
0xffffd10000012f80 0041 00000000 0x0 0x0
0xffffd10000013000 0041 00000000 0x0 0x0
0xffffd10000013080 0045 00000000 0x0 0x0
0xffffd10000013100 0001 00000000 0x0 0x0
0xffffd10000013180 0001 00000000 0x0 0x0
0xffffd10000013200 0001 00000000 0x0 0x0
0xffffd10000013280 0001 00000000 0x0 0x0
0xffffd10000013300 0001 00000000 0x0 0x0
0xffffd10000013380 0001 00000000 0x0 0x0
0xffffd10000013400 0001 00000000 0x0 0x0
0xffffd10000013480 0001 00000000 0x0 0x0
0xffffd10000013500 0001 00000000 0x0 0x0
0xffffd10000013580 0001 00000000 0x0 0x0
0xffffd10000013600 0001 00000000 0x0 0x0
0xffffd10000013680 0001 00000000 0x0 0x0
0xffffd10000013700 0001 00000000 0x0 0x0
0xffffd10000013780 0001 00000000 0x0 0x0
0xffffd10000013800 0001 00000000 0x0 0x0
0xffffd10000013880 0001 00000000 0x0 0x0
0xffffd10000013900 0001 00000000 0x0 0x0
0xffffd10000013980 0001 00000000 0x0 0x0
0xffffd10000013a00 0001 00000000 0x0 0x0
0xffffd10000013a80 0001 00000000 0x0 0x0
0xffffd10000013b00 0001 00000000 0x0 0x0
0xffffd10000013b80 0001 00000000 0x0 0x0
0xffffd10000013c00 0001 00000000 0x0 0x0
0xffffd10000013c80 0001 00000000 0x0 0x0
0xffffd10000013d00 0001 00000000 0x0 0x0
0xffffd10000013d80 0001 00000000 0x0 0x0
0xffffd10000013e00 0001 00000000 0x0 0x0
0xffffd10000013e80 0001 00000000 0x0 0x0
0xffffd10000013f00 0001 00000000 0x0 0x0
0xffffd10000013f80 0001 00000000 0x0 0x0
0xffffd10000014000 0001 00000000 0x0 0x0
0xffffd10000014080 0001 00000000 0x0 0x0
0xffffd10000014100 0001 00000000 0x0 0x0
0xffffd10000014180 0001 00000000 0x0 0x0
0xffffd10000014200 0001 00000000 0x0 0x0
0xffffd10000014280 0001 00000000 0x0 0x0
0xffffd10000014300 0001 00000000 0x0 0x0
0xffffd10000014380 0001 00000000 0x0 0x0
0xffffd10000014400 0001 00000000 0x0 0x0
0xffffd10000014480 0001 00000000 0x0 0x0
0xffffd10000014500 0001 00000000 0x0 0x0
0xffffd10000014580 0001 00000000 0x0 0x0
0xffffd10000014600 0001 00000000 0x0 0x0
0xffffd10000014680 0001 00000000 0x0 0x0
0xffffd10000014700 0001 00000000 0x0 0x0
0xffffd10000014780 0001 00000000 0x0 0x0
0xffffd10000014800 0001 00000000 0x0 0x0
0xffffd10000014880 0001 00000000 0x0 0x0
0xffffd10000014900 0001 00000000 0x0 0x0
0xffffd10000014980 0001 00000000 0x0 0x0
0xffffd10000014a00 0001 00000000 0x0 0x0
0xffffd10000014a80 0001 00000000 0x0 0x0
0xffffd10000014b00 0001 00000000 0x0 0x0
0xffffd10000014b80 0001 00000000 0x0 0x0
0xffffd10000014c00 0041 00000000 0x0 0x0
0xffffd10000014c80 0041 00000000 0x0 0x0
0xffffd10000014d00 0041 00000000 0x0 0x0
0xffffd10000014d80 0041 00000000 0x0 0x0
0xffffd10000014e00 0041 00000000 0x0 0x0
0xffffd10000014e80 0041 00000000 0x0 0x0
0xffffd10000014f00 0041 00000000 0x0 0x0
0xffffd10000014f80 0041 00000000 0x0 0x0
0xffffd10000015000 0041 00000000 0x0 0x0
0xffffd10000015080 0041 00000000 0x0 0x0
0xffffd10000015100 0041 00000000 0x0 0x0
0xffffd10000015180 0041 00000000 0x0 0x0
0xffffd10000015200 0041 00000000 0x0 0x0
0xffffd10000015280 0041 00000000 0x0 0x0
0xffffd10000015300 0041 00000000 0x0 0x0
0xffffd10000015380 0041 00000000 0x0 0x0
0xffffd10000015400 0041 00000000 0x0 0x0
0xffffd10000015480 0041 00000000 0x0 0x0
0xffffd10000015500 0041 00000000 0x0 0x0
0xffffd10000015580 0041 00000000 0x0 0x0
0xffffd10000015600 0041 00000000 0x0 0x0
0xffffd10000015680 0041 00000000 0x0 0x0
0xffffd10000015700 0041 00000000 0x0 0x0
0xffffd10000015780 0041 00000000 0x0 0x0
0xffffd10000015800 0041 00000000 0x0 0x0
0xffffd10000015880 0041 00000000 0x0 0x0
0xffffd10000015900 0041 00000000 0x0 0x0
0xffffd10000015980 0041 00000000 0x0 0x0
0xffffd10000015a00 0041 00000000 0x0 0x0
0xffffd10000015a80 0041 00000000 0x0 0x0
0xffffd10000015b00 0041 00000000 0x0 0x0
0xffffd10000015b80 0041 00000000 0x0 0x0
0xffffd10000015c00 0041 00000000 0x0 0x0
0xffffd10000015c80 0041 00000000 0x0 0x0
0xffffd10000015d00 0041 00000000 0x0 0x0
0xffffd10000015d80 0041 00000000 0x0 0x0
0xffffd10000015e00 0041 00000000 0x0 0x0
0xffffd10000015e80 0041 00000000 0x0 0x0
0xffffd10000015f00 0041 00000000 0x0 0x0
0xffffd10000015f80 0041 00000000 0x0 0x0
0xffffd10000016000 0041 00000000 0x0 0x0
0xffffd10000016080 0041 00000000 0x0 0x0
0xffffd10000016100 0001 00000000 0x0 0x0
0xffffd10000016180 0001 00000000 0x0 0x0
0xffffd10000016200 0001 00000000 0x0 0x0
0xffffd10000016280 0001 00000000 0x0 0x0
0xffffd10000016300 0001 00000000 0x0 0x0
0xffffd10000016380 0001 00000000 0x0 0x0
0xffffd10000016400 0001 00000000 0x0 0x0
0xffffd10000016480 0001 00000000 0x0 0x0
0xffffd10000016500 0001 00000000 0x0 0x0
0xffffd10000016580 0001 00000000 0x0 0x0
0xffffd10000016600 0001 00000000 0x0 0x0
0xffffd10000016680 0001 00000000 0x0 0x0
0xffffd10000016700 0001 00000000 0x0 0x0
0xffffd10000016780 0001 00000000 0x0 0x0
0xffffd10000016800 0001 00000000 0x0 0x0
0xffffd10000016880 0001 00000000 0x0 0x0
0xffffd10000016900 0001 00000000 0x0 0x0
0xffffd10000016980 0001 00000000 0x0 0x0
0xffffd10000016a00 0001 00000000 0x0 0x0
0xffffd10000016a80 0001 00000000 0x0 0x0
0xffffd10000016b00 0001 00000000 0x0 0x0
0xffffd10000016b80 0001 00000000 0x0 0x0
0xffffd10000016c00 0001 00000000 0x0 0x0
0xffffd10000016c80 0001 00000000 0x0 0x0
0xffffd10000016d00 0001 00000000 0x0 0x0
0xffffd10000016d80 0001 00000000 0x0 0x0
0xffffd10000016e00 0001 00000000 0x0 0x0
0xffffd10000016e80 0001 00000000 0x0 0x0
0xffffd10000016f00 0001 00000000 0x0 0x0
0xffffd10000016f80 0001 00000000 0x0 0x0
0xffffd10000017000 0001 00000000 0x0 0x0
0xffffd10000017080 0001 00000000 0x0 0x0
0xffffd10000017100 0001 00000000 0x0 0x0
0xffffd10000017180 0001 00000000 0x0 0x0
0xffffd10000017200 0001 00000000 0x0 0x0
0xffffd10000017280 0001 00000000 0x0 0x0
0xffffd10000017300 0001 00000000 0x0 0x0
0xffffd10000017380 0001 00000000 0x0 0x0
0xffffd10000017400 0001 00000000 0x0 0x0
0xffffd10000017480 0001 00000000 0x0 0x0
0xffffd10000017500 0001 00000000 0x0 0x0
0xffffd10000017580 0001 00000000 0x0 0x0
0xffffd10000017600 0001 00000000 0x0 0x0
0xffffd10000017680 0001 00000000 0x0 0x0
0xffffd10000017700 0001 00000000 0x0 0x0
0xffffd10000017780 0001 00000000 0x0 0x0
0xffffd10000017800 0001 00000000 0x0 0x0
0xffffd10000017880 0001 00000000 0x0 0x0
0xffffd10000017900 0001 00000000 0x0 0x0
0xffffd10000017980 0001 00000000 0x0 0x0
0xffffd10000017a00 0001 00000000 0x0 0x0
0xffffd10000017a80 0001 00000000 0x0 0x0
0xffffd10000017b00 0001 00000000 0x0 0x0
0xffffd10000017b80 0001 00000000 0x0 0x0
0xffffd10000017c00 0041 00000000 0x0 0x0
0xffffd10000017c80 0041 00000000 0x0 0x0
0xffffd10000017d00 0041 00000000 0x0 0x0
0xffffd10000017d80 0041 00000000 0x0 0x0
0xffffd10000017e00 0041 00000000 0x0 0x0
0xffffd10000017e80 0041 00000000 0x0 0x0
0xffffd10000017f00 0041 00000000 0x0 0x0
0xffffd10000017f80 0041 00000000 0x0 0x0
0xffffd10000018000 0041 00000000 0x0 0x0
0xffffd10000018080 0041 00000000 0x0 0x0
0xffffd10000018100 0041 00000000 0x0 0x0
0xffffd10000018180 0041 00000000 0x0 0x0
0xffffd10000018200 0041 00000000 0x0 0x0
0xffffd10000018280 0041 00000000 0x0 0x0
0xffffd10000018300 0041 00000000 0x0 0x0
0xffffd10000018380 0041 00000000 0x0 0x0
0xffffd10000018400 0041 00000000 0x0 0x0
0xffffd10000018480 0041 00000000 0x0 0x0
0xffffd10000018500 0041 00000000 0x0 0x0
0xffffd10000018580 0041 00000000 0x0 0x0
0xffffd10000018600 0041 00000000 0x0 0x0
0xffffd10000018680 0041 00000000 0x0 0x0
0xffffd10000018700 0041 00000000 0x0 0x0
0xffffd10000018780 0041 00000000 0x0 0x0
0xffffd10000018800 0041 00000000 0x0 0x0
0xffffd10000018880 0041 00000000 0x0 0x0
0xffffd10000018900 0041 00000000 0x0 0x0
0xffffd10000018980 0041 00000000 0x0 0x0
0xffffd10000018a00 0041 00000000 0x0 0x0
0xffffd10000018a80 0041 00000000 0x0 0x0
0xffffd10000018b00 0041 00000000 0x0 0x0
0xffffd10000018b80 0041 00000000 0x0 0x0
0xffffd10000018c00 0041 00000000 0x0 0x0
0xffffd10000018c80 0041 00000000 0x0 0x0
0xffffd10000018d00 0041 00000000 0x0 0x0
0xffffd10000018d80 0041 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Jun 27, 2023, 7:05:55 PM6/27/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 87d35fd690e9 Convert UDF file system code from the deprica..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=11c2fabd280000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=f020b34edc832623410a
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10a7e788a80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/037f34c6a094/disk-87d35fd6.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/dfcbea8aab6f/netbsd-87d35fd6.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f020b3...@syzkaller.appspotmail.com

[ 676.7386376] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/fs/union/union_vnops.c:213:11, member access within null pointer of type 'struct union_node'

[ 676.7386376] cpu0: Begin traceback...
[ 676.7686251] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:292
[ 676.8586246] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 676.9286243] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
[ 676.9886249] union_parsepath() at netbsd:union_parsepath+0x313 sys/fs/union/union_vnops.c:213
[ 677.0486253] VOP_PARSEPATH() at netbsd:VOP_PARSEPATH+0x12f sys/kern/vnode_if.c:408
[ 677.1186533] lookup_parsepath() at netbsd:lookup_parsepath+0xa0 sys/kern/vfs_lookup.c:849
[ 677.1886421] namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 lookup_fastforward sys/kern/vfs_lookup.c:1286 [inline]
[ 677.1886421] namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 namei_oneroot sys/kern/vfs_lookup.c:1539 [inline]
[ 677.1886421] namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 sys/kern/vfs_lookup.c:1906
[ 677.2486261] namei() at netbsd:namei+0x2e sys/kern/vfs_lookup.c:1942
[ 677.3186378] do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
[ 677.3186378] do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe sys/kern/vfs_syscalls.c:2699
[ 677.3786263] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 677.3786263] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 677.4486292] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 677.4486292] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 677.4486292] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 677.4586262] --- syscall (number 470 via SYS_syscall) ---
[ 677.4786418] netbsd:syscall+0x2da:
[ 677.4888208] cpu0: End traceback...
[ 677.4888208] fatal breakpoint trap in supervisor mode
[ 677.4888208] trap type 1 code 0 rip 0xffffffff80235485 cs 0x8 rflags 0x246 cr2 0xc000226e00 ilevel 0 rsp 0xffffa8024844d5c0
[ 677.5086632] curlwp 0xffff955fbfd8ba00 pid 20158.20966 lowest kstack 0xffffa802484492c0
Stopped in pid 20158.20966 (syz-executor.0) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:292
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
union_parsepath() at netbsd:union_parsepath+0x313 sys/fs/union/union_vnops.c:213
VOP_PARSEPATH() at netbsd:VOP_PARSEPATH+0x12f sys/kern/vnode_if.c:408
lookup_parsepath() at netbsd:lookup_parsepath+0xa0 sys/kern/vfs_lookup.c:849
namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 lookup_fastforward sys/kern/vfs_lookup.c:1286 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 namei_oneroot sys/kern/vfs_lookup.c:1539 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x999 sys/kern/vfs_lookup.c:1906
namei() at netbsd:namei+0x2e sys/kern/vfs_lookup.c:1942
do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x1fe sys/kern/vfs_syscalls.c:2699
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 470 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/fs/union/union_vnops.c:213:11, member access within null pointer of type 'struct union_node'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

21942 21942 2 0 0 ffff955fbff27b00 syz-execprog
19865 18500 2 0 0 ffff955fbfd3b080 syz-executor.4
19865 21420 3 1 180 ffff955fc03220c0 syz-executor.4 parked
19865 19865 2 0 10000000 ffff955fbfed9600 syz-executor.4
19856 19856 2 0 0 ffff955fbfee7680 syz-executor.3
20184 19949 2 0 100 ffff955fbf9de480 syz-executor.1
20184 20184 2 0 10000000 ffff955fbfe7ebc0 syz-executor.1
20158>20966 7 0 0 ffff955fbfd8ba00 syz-executor.0
20158 19955 3 1 180 ffff955fbf9de8c0 syz-executor.0 parked
20158 20158 2 1 10000000 ffff955fc0fb81c0 syz-executor.0
21096 21096 2 0 140 ffff955fbf9a5200 syz-executor.0
20438 20438 2 1 140 ffff955fbc156700 syz-executor.4
21165 21165 2 0 140 ffff955fbe17ba00 syz-executor.1
20295 20295 2 1 140 ffff955fbfc0e200 syz-executor.3
1233 481 2 0 100 ffff955fbfd1cb40 syz-execprog
1233 1358 3 1 1c0 ffff955fbff27280 syz-execprog wait
1233 1108 3 1 1c0 ffff955fbfd1c2c0 syz-execprog parked
1233 829 2 0 100 ffff955fbcd35900 syz-execprog
1233 1130 3 0 180 ffff955fbc807480 syz-execprog wait
1233 990 3 1 1c0 ffff955fbd678500 syz-execprog wait
1233 1244 3 1 180 ffff955fbc156b40 syz-execprog parked
1233 929 3 1 1c0 ffff955fbc807040 syz-execprog wait
1233 1239 3 1 180 ffff955fbc3bfbc0 syz-execprog parked
1233 1241 3 1 1c0 ffff955fbe17b5c0 syz-execprog pipe_rd
1233 1243 2 0 40 ffff955fbd6780c0 syz-execprog
1233 1237 3 0 180 ffff955fbd678940 syz-execprog parked
1233 > 449 7 1 100 ffff955fbc1562c0 syz-execprog
1233 1233 3 1 180 ffff955fbce14980 syz-execprog parked
1080 1080 3 0 180 ffff955fbbfcdb00 sshd select
1082 1082 3 0 180 ffff955fbce14540 getty nanoslp
1151 1151 3 1 180 ffff955fbbfcd280 getty nanoslp
1216 1216 3 0 180 ffff955fbbca5ac0 getty nanoslp
1195 1195 3 1 1c0 ffff955fbbc7f200 getty ttyraw
1110 1110 3 0 180 ffff955fbc2bc580 sshd select
1096 1096 3 0 180 ffff955fbc2bc9c0 powerd kqueue
699 699 3 0 180 ffff955fbcd35080 syslogd kqueue
559 559 3 0 180 ffff955fbce14100 dhcpcd poll
747 747 3 1 180 ffff955fbc4e1b80 dhcpcd poll
466 466 3 0 180 ffff955fbbfcd6c0 dhcpcd poll
602 602 3 0 180 ffff955fbc3bf780 dhcpcd poll
292 292 3 0 180 ffff955fbc4e1300 dhcpcd poll
485 485 3 1 180 ffff955fbc4e1740 dhcpcd poll
291 291 3 0 180 ffff955fbc3bf340 dhcpcd poll
1 1 3 0 180 ffff955fb3a63980 init wait
0 686 3 0 200 ffff955fbbc7f640 physiod physiod
0 196 3 1 200 ffff955fbbca5680 pooldrain pooldrain
0 195 2 0 240 ffff955fbbca5240 ioflush
0 194 3 0 200 ffff955fbbc7fa80 pgdaemon pgdaemon
0 170 3 1 200 ffff955fb9bbfa40 usb7 usbevt
0 169 3 0 200 ffff955fb9bbf600 usb6 usbevt
0 168 3 1 200 ffff955fb9bbf1c0 usb5 usbevt
0 167 3 0 200 ffff955fb6b5aa00 usb4 usbevt
0 166 3 0 200 ffff955fb6b5a5c0 usb3 usbevt
0 165 3 0 200 ffff955fb6b5a180 usb2 usbevt
0 31 3 0 200 ffff955fb4b159c0 usb1 usbevt
0 63 3 1 200 ffff955fb4b15580 usb0 usbevt
0 126 3 1 200 ffff955fb4b15140 usbtask-dr usbtsk
0 125 3 1 200 ffff955fb38f0740 usbtask-hc usbtsk
0 124 3 0 200 ffff955fb1ea1b00 swwreboot swwreboot
0 123 3 1 200 ffff955fb38f0b80 npfgc0 npfgcw
0 122 3 1 200 ffff955fb3a63540 rt_free rt_free
0 121 3 1 200 ffff955fb3a63100 unpgc unpgc
0 120 2 0 200 ffff955fb3a5e940 key_timehandler
0 119 3 1 200 ffff955fb3a5e500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff955fb3a5e0c0 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffff955fb3a41900 nd6_timer
0 116 3 1 200 ffff955fb3a414c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff955fb3a41080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff955fb3a248c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff955fb3a24480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff955fb3a24040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff955fb39e7bc0 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffff955fb39e7340 rt_timer
0 109 3 0 200 ffff955fb39e7780 vmem_rehash vmem_rehash
0 100 3 0 200 ffff955fb38f0300 entbutler entropy
0 99 3 0 200 ffff955fb3350b40 viomb balloon
0 98 3 1 200 ffff955fb3350700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff955fb33502c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffff955fb1ea16c0 scsibus0 sccomp
0 29 3 0 200 ffff955fb1ea1280 pms0 pmsreset
0 28 3 1 200 ffff955fb1dacac0 xcall/1 xcall
0 27 1 1 200 ffff955fb1dac680 softser/1
0 26 1 1 200 ffff955fb1dac240 softclk/1
0 25 1 1 200 ffff955fb1d87a80 softbio/1
0 24 1 1 200 ffff955fb1d87640 softnet/1
0 23 1 1 201 ffff955fb1d87200 idle/1
0 22 3 1 200 ffff9560e012da40 lnxsyswq lnxsyswq
0 21 3 1 200 ffff9560e012d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff9560e012d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff9560e0134a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff9560e01345c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff9560e0134180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff9560e01539c0 sysmon smtaskq
0 15 3 1 200 ffff9560e0153580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff9560e0153140 pmfevent pmfevent
0 13 3 1 200 ffff9560e015e980 sopendfree sopendfr
0 12 3 0 200 ffff9560e015e540 ifwdog ifwdog
0 11 3 1 200 ffff9560e015e100 iflnkst iflnkst
0 10 3 1 200 ffff9560e1193940 nfssilly nfssilly
0 9 3 1 240 ffff9560e1193500 vdrain vdrain
0 8 3 1 200 ffff9560e11930c0 modunload mod_unld
0 7 3 0 200 ffff9560e11ba900 xcall/0 xcall
0 6 1 0 200 ffff9560e11ba4c0 softser/0
0 5 1 0 200 ffff9560e11ba080 softclk/0
0 4 1 0 200 ffff9560e11e98c0 softbio/0
0 3 1 0 200 ffff9560e11e9480 softnet/0
0 2 1 0 201 ffff9560e11e9040 idle/0

0 0 2 0 240 ffffffff8674e000 swapper
[Locks tracked through LWPs]

****** LWP 20158.19955 (syz-executor.0) @ 0xffff955fbf9de8c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fstrans_init+0x20 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff955fbf9de8c0 last held: 0xffff955fbf9de8c0

last locked* : netbsd:vfs_suspend+0x27e
unlocked : netbsd:mount_domount+0xba1
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:fstrans_init+0x33 sys/kern/vfs_trans.c:137)
lock address : netbsd:fstrans_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x33
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff955fbf9de8c0 last held: 0xffff955fbf9de8c0

last locked* : netbsd:fstrans_setstate+0x1d5
unlocked : netbsd:fstrans_done+0x6e6

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 747.747 (dhcpcd) @ 0xffff955fbc4e1b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff955fbc4e1b80 last held: 000000000000000000