MSan: Uninitialized Memory in layer_lookup

0 views

Skip to first unread message

syzbot

unread,

May 10, 2024, 9:01:25 AMMay 10

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: d2d9aaf4f852 Remove the -xx, now we have the list of 20 pl..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17e45ba8980000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=5d77e822ea2e943c6760
compiler: Debian clang version 15.0.6

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/e4cbb0bf4455/disk-d2d9aaf4.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/bb01441ae870/netbsd-d2d9aaf4.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+5d77e8...@syzkaller.appspotmail.com

[ 130.7053826] panic: MSan: Uninitialized Variable 'tdvp' From union_lookup1()

[ 130.7154169] cpu1: Begin traceback...
[ 130.7355163] vpanic() at netbsd:vpanic+0xc9d
[ 130.7958217] panic() at netbsd:panic+0x1b3
[ 130.8360186] __msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
[ 130.8360186] __msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
[ 130.8963203] layer_lookup() at netbsd:layer_lookup+0x8d2
[ 130.9465684] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
[ 130.9968262] union_lookup1() at netbsd:union_lookup1+0x4cf sys/fs/union/union_vnops.c:279
[ 131.0571293] union_lookup() at netbsd:union_lookup+0x579 sys/fs/union/union_vnops.c:371
[ 131.1073701] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
[ 131.1576264] lookup_once() at netbsd:lookup_once+0x10ec sys/kern/vfs_lookup.c:1150
[ 131.2179228] namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc namei_oneroot sys/kern/vfs_lookup.c:1546 [inline]
[ 131.2179228] namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc sys/kern/vfs_lookup.c:1906
[ 131.2681703] namei() at netbsd:namei+0x289
[ 131.3184215] do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
[ 131.3184215] do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d sys/kern/vfs_syscalls.c:2857
[ 131.3787231] sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
[ 131.3787231] sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
[ 131.4289726] syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 131.4289726] syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
[ 131.4490739] --- syscall (number 10 via SYS_syscall) ---
[ 131.4691711] netbsd:syscall+0x576:
[ 131.4691711] cpu1: End traceback...
[ 131.4691711] fatal breakpoint trap in supervisor mode
[ 131.4792221] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x286 cr2 0x7432d3441000 ilevel 0 rsp 0xffffe480c7d20fb0
[ 131.4892637] curlwp 0xffffe48013559140 pid 1350.4169 lowest kstack 0xffffe480c7d1a2c0
Stopped in pid 1350.4169 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3
__msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
__msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
layer_lookup() at netbsd:layer_lookup+0x8d2
VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
union_lookup1() at netbsd:union_lookup1+0x4cf sys/fs/union/union_vnops.c:279
union_lookup() at netbsd:union_lookup+0x579 sys/fs/union/union_vnops.c:371
VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
lookup_once() at netbsd:lookup_once+0x10ec sys/kern/vfs_lookup.c:1150
namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc namei_oneroot sys/kern/vfs_lookup.c:1546 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc sys/kern/vfs_lookup.c:1906
namei() at netbsd:namei+0x289
do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d sys/kern/vfs_syscalls.c:2857
sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
--- syscall (number 10 via SYS_syscall) ---
netbsd:syscall+0x576:
Panic string: MSan: Uninitialized Variable 'tdvp' From union_lookup1()

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1350 > 4169 7 1 0 ffffe48013559140 syz-executor.1
1350 1350 2 1 10000000 ffffe480136fea40 syz-executor.1
324 324 2 0 0 ffffe48013a0b700 syz-executor.3
1466 1466 2 0 0 ffffe480138636c0 syz-executor.2
4409 4409 2 0 0 ffffe48013863280 syz-executor.0
1464 > 1464 7 0 0 ffffe480137c8a80 syz-executor.4
2231 2231 2 0 0 ffffe480136fe600 syz-executor.5
3125 3125 2 0 140 ffffe48013bf7340 syz-executor.1
2893 2893 3 1 180 ffffe48013aa4300 syz-executor.3 parked
2921 2921 3 1 180 ffffe4801360c180 syz-executor.3 parked
4041 3672 2 1 1000040 ffffe48013aa4b80 syz-executor.3
4041 3143 3 1 11100000 ffffe48013533980 syz-executor.3 vfork
4041 3797 3 1 11100000 ffffe48013533540 syz-executor.3 vfork
3560 3560 3 1 180 ffffe48013559580 syz-executor.1 parked
2023 2023 3 1 180 ffffe4801384bac0 syz-executor.1 parked
1847 1847 3 0 180 ffffe4801384b680 syz-executor.0 parked
1596 1596 3 0 180 ffffe48013a0b2c0 syz-executor.3 parked
1224 592 2 1 140 ffffe48013863b00 syz-fuzzer
1224 1200 3 1 180 ffffe480137c8200 syz-fuzzer parked
1224 1236 3 0 180 ffffe480136fe1c0 syz-fuzzer wait
1224 1203 3 1 180 ffffe4801360c5c0 syz-fuzzer wait
1224 1245 3 0 180 ffffe480135599c0 syz-fuzzer wait
1224 1241 3 0 180 ffffe48012d0c940 syz-fuzzer wait
1224 1120 3 0 1c0 ffffe48013533100 syz-fuzzer parked
1224 1243 3 0 180 ffffe48012d0c500 syz-fuzzer parked
1224 943 3 0 180 ffffe48012d0c0c0 syz-fuzzer parked
1224 929 3 0 180 ffffe48012c31900 syz-fuzzer parked
1224 942 3 1 180 ffffe48012c314c0 syz-fuzzer wait
1224 1231 3 1 180 ffffe48012c31080 syz-fuzzer parked
1224 1235 2 0 140 ffffe48012311b00 syz-fuzzer
1224 1224 3 1 180 ffffe480123116c0 syz-fuzzer wait
1080 1080 3 0 180 ffffe48012520b80 sshd select
1222 1222 3 1 180 ffffe48012520300 getty nanoslp
1082 1082 3 0 180 ffffe48012311280 getty nanoslp
1184 1184 3 1 180 ffffe48012275ac0 getty nanoslp
1191 1191 3 1 180 ffffe480121d7200 getty ttyraw
1102 1102 3 0 180 ffffe48012b808c0 sshd select
1088 1088 3 0 180 ffffe48012b80480 powerd kqueue
810 810 3 0 180 ffffe48012552780 syslogd kqueue
746 746 3 0 180 ffffe48012b80040 dhcpcd poll
747 747 3 1 180 ffffe4801233f2c0 dhcpcd poll
742 742 3 0 180 ffffe4801233f700 dhcpcd poll
598 598 3 0 180 ffffe48012552bc0 dhcpcd poll
292 292 3 0 180 ffffe48012552340 dhcpcd poll
485 485 3 0 180 ffffe4801233fb40 dhcpcd poll
291 291 3 0 180 ffffe48012520740 dhcpcd poll
1 1 3 0 180 ffffe48011e53100 init wait
0 3773 5 0 200 ffffe480137c8640 (zombie)
0 296 2 0 200 ffffe4801360ca00 ktrace
0 557 3 0 200 ffffe480121d7640 physiod physiod
0 196 3 0 200 ffffe48012275680 pooldrain pooldrain
0 195 3 0 200 ffffe48012275240 ioflush syncer
0 194 3 1 200 ffffe480121d7a80 pgdaemon pgdaemon
0 172 3 1 200 ffffe480121a7a40 usb7 usbevt
0 171 3 1 200 ffffe480121a7600 usb6 usbevt
0 169 3 1 200 ffffe480121a71c0 usb5 usbevt
0 168 3 0 200 ffffe4801211ba00 usb4 usbevt
0 166 3 1 200 ffffe4801211b5c0 usb3 usbevt
0 165 3 0 200 ffffe4801211b180 usb2 usbevt
0 31 3 0 200 ffffe4801206b9c0 usb1 usbevt
0 63 3 0 200 ffffe4801206b580 usb0 usbevt
0 126 3 1 200 ffffe4801206b140 usbtask-dr usbtsk
0 125 3 1 200 ffffe48011e53980 usbtask-hc usbtsk
0 124 3 0 200 ffffe480103d3b00 swwreboot swwreboot
0 123 3 0 200 ffffe48011e53540 npfgc0 npfgcw
0 122 3 1 200 ffffe48011e47940 rt_free rt_free
0 121 3 0 200 ffffe48011e47500 unpgc unpgc
0 120 3 0 200 ffffe48011e470c0 key_timehandler key_timehandler
0 119 3 1 200 ffffe48011e41900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffe48011e414c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffe48011e41080 nd6_timer nd6_timer
0 116 3 1 200 ffffe48011ccd8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffe48011ccd480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffe48011ccd040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffe48011cccbc0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffe48011ccc340 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffe48011cc9b80 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffe48011cc9740 rt_timer rt_timer
0 109 3 0 200 ffffe48011ccc780 vmem_rehash vmem_rehash
0 100 3 1 200 ffffe48011cc9300 entbutler entropy
0 99 3 0 200 ffffe480117c0b40 viomb balloon
0 98 3 1 200 ffffe480117c0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffe480117c02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffe480103d36c0 scsibus0 sccomp
0 29 3 0 200 ffffe480103d3280 pms0 pmsreset
0 28 3 1 200 ffffe480103baac0 xcall/1 xcall
0 27 1 1 200 ffffe480103ba680 softser/1
0 26 1 1 200 ffffe480103ba240 softclk/1
0 25 1 1 200 ffffe480103b7a80 softbio/1
0 24 1 1 200 ffffe480103b7640 softnet/1
0 23 1 1 201 ffffe480103b7200 idle/1
0 22 3 0 200 ffffe4800f1d2a40 lnxsyswq lnxsyswq
0 21 3 1 200 ffffe4800f1d2600 lnxubdwq lnxubdwq
0 20 3 1 200 ffffe4800f1d21c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffffe4800f1d1a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffffe4800f1d15c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffffe4800f1d1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffe4800f1ca9c0 sysmon smtaskq
0 15 3 0 200 ffffe4800f1ca580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffe4800f1ca140 pmfevent pmfevent
0 13 3 0 200 ffffe4800f1c8980 sopendfree sopendfr
0 12 3 0 200 ffffe4800f1c8540 ifwdog ifwdog
0 11 3 1 200 ffffe4800f1c8100 iflnkst iflnkst
0 10 3 0 200 ffffe4800f1be940 nfssilly nfssilly
0 9 3 0 200 ffffe4800f1be500 pooldisp pooldisp
0 8 3 0 200 ffffe4800f1be0c0 modunload mod_unld
0 7 3 0 200 ffffe4800ebc9900 xcall/0 xcall
0 6 1 0 200 ffffe4800ebc94c0 softser/0
0 > 5 7 0 200 ffffe4800ebc9080 softclk/0
0 4 1 0 200 ffffe4800ebc88c0 softbio/0
0 3 1 0 200 ffffe4800ebc8480 softnet/0
0 2 1 0 201 ffffe4800ebc8040 idle/0
0 0 3 0 200 ffffffff86a6f900 swapper uvm
[Locks tracked through LWPs]

****** LWP 1350.4169 (syz-executor.1) @ 0xffffe48013559140, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1438)
lock address : ffffe48013d60b00
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffe48013559140 last held: 0xffffe48013559140
last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55
owner/count : 0xffffe48013559140 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffe48013559140 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 324.324 (syz-executor.3) @ 0xffffe48013a0b700, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x10d sys/kern/subr_kcov.c:461)
lock address : ffffe48013d50d80
type : sleep/adaptive
initialized : netbsd:kcov_open+0x10d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe48013a0b700 last held: 0xffffe48013a0b700
last locked* : netbsd:kcov_fops_ioctl+0xa0
unlocked : 0
owner field : 0xffffe48013a0b700 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1464.1464 (syz-executor.4) @ 0xffffe480137c8a80, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x972 sys/kern/kern_fork.c:366)
lock address : ffffe48013b70b90
type : sleep/adaptive
initialized : netbsd:fork1+0x972
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe480137c8a80 last held: 0xffffe480137c8a80
last locked* : netbsd:exit1+0xac2
unlocked : netbsd:execve_runproc+0x65d0
owner/count : 0xffffe480137c8a80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_map_setup+0x2a0 sys/uvm/uvm_map.c:4786)
lock address : netbsd:kernel_map_store+0x8
type : sleep/adaptive
initialized : netbsd:uvm_map_setup+0x2a0
shared holds : 0 exclusive: 1
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe480137c8a80 last held: 0xffffe480137c8a80
last locked* : netbsd:vm_map_lock+0x57
unlocked : netbsd:uvm_unmap1+0x40d
owner/count : 0xffffe480137c8a80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:uvm_obj_init+0x88 sys/uvm/uvm_object.c:70)
lock address : ffffe48013914800
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0x88
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe480137c8a80 last held: 0xffffe480137c8a80
last locked* : netbsd:uvm_fault_unwire_locked+0x9cd
unlocked : netbsd:uvm_fault_lower_enter+0x1b49
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_bootstrap+0x20c sys/arch/x86/x86/pmap.c:1237)
lock address : netbsd:kernel_pmap_store+0x180
type : sleep/adaptive
initialized : netbsd:pmap_bootstrap+0x20c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe480137c8a80 last held: 000000000000000000
last locked : netbsd:pmap_unwire+0xe7
unlocked* : netbsd:uvm_fault_unwire_locked+0xb23
owner field : 0xffffe480137c8a80 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 747.747 (dhcpcd) @ 0xffffe4801233f2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffe4801233f2c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffe4801233f700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe4801233f700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffe4801233fb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe4801233fb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffe48012520740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe48012520740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.296 (ktrace) @ 0xffffe4801360ca00, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1438)
lock address : ffffe48013d46440
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe4801360ca00 last held: 0xffffe4801360ca00
last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55
owner/count : 0xffffe4801360ca00 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_map_setup+0x2a0 sys/uvm/uvm_map.c:4786)
lock address : netbsd:kernel_map_store+0x8
type : sleep/adaptive
initialized : netbsd:uvm_map_setup+0x2a0
shared holds : 0 exclusive: 1
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe4801360ca00 last held: 0xffffe480137c8a80
last locked* : netbsd:vm_map_lock+0x57
unlocked : netbsd:uvm_unmap1+0x40d
owner/count : 0xffffe480137c8a80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffe4800f1c8100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffe4800f1c8100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffe4800ebc9080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe4800ebc9080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86a6f900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86a6f900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x362 sys/kern/init_main.c:304)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x362
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffe48013559140 last held: 0xffffe48013559140
last locked* : netbsd:VOP_LOOKUP+0x16f
unlocked : netbsd:VOP_LOCK+0x7de
curcpu holds : 2 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0xcb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffe48013559140 last held: 0xffffe48013559140
last locked* : netbsd:vpanic+0x624
unlocked : netbsd:log+0x618
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffe48000017180 0001 00000000 0x0 0x0
0xffffe48000017200 0041 00000000 0x0 0x0
0xffffe48000017280 0041 00000000 0x0 0x0
0xffffe48000017300 0041 00000000 0x0 0x0
0xffffe48000017380 0041 00000000 0x0 0x0
0xffffe48000017400 0041 00000000 0x0 0x0
0xffffe48000017480 0041 00000000 0x0 0x0
0xffffe48000017500 0041 00000000 0x0 0x0
0xffffe48000017580 0041 00000000 0x0 0x0
0xffffe48000017600 0041 00000000 0x0 0x0
0xffffe48000017680 0041 00000000 0x0 0x0
0xffffe48000017700 0041 00000000 0x0 0x0
0xffffe48000017780 0041 00000000 0x0 0x0
0xffffe48000017800 0041 00000000 0x0 0x0
0xffffe48000017880 0041 00000000 0x0 0x0
0xffffe48000017900 0041 00000000 0x0 0x0
0xffffe48000017980 0041 00000000 0x0 0x0
0xffffe48000017a00 0041 00000000 0x0 0x0
0xffffe48000017a80 0041 00000000 0x0 0x0
0xffffe48000017b00 0041 00000000 0x0 0x0
0xffffe48000017b80 0041 00000000 0x0 0x0
0xffffe48000017c00 0041 00000000 0x0 0x0
0xffffe48000017c80 0041 00000000 0x0 0x0
0xffffe48000017d00 0041 00000000 0x0 0x0
0xffffe48000017d80 0041 00000000 0x0 0x0
0xffffe48000017e00 0041 00000000 0x0 0x0
0xffffe48000017e80 0041 00000000 0x0 0x0
0xffffe48000017f00 0041 00000000 0x0 0x0
0xffffe48000017f80 0041 00000000 0x0 0x0
0xffffe48000018000 0041 00000000 0x0 0x0
0xffffe48000018080 0041 00000000 0x0 0x0
0xffffe48000018100 0041 00000000 0x0 0x0
0xffffe48000018180 0041 00000000 0x0 0x0
0xffffe48000018200 0041 00000000 0x0 0x0
0xffffe48000018280 0041 00000000 0x0 0x0
0xffffe48000018300 0041 00000000 0x0 0x0
0xffffe48000018380 0041 00000000 0x0 0x0
0xffffe48000018400 0041 00000000 0x0 0x0
0xffffe48000018480 0041 00000000 0x0 0x0
0xffffe48000018500 0041 00000000 0x0 0x0
0xffffe48000018580 0041 00000000 0x0 0x0
0xffffe48000018600 0041 00000000 0x0 0x0
0xffffe48000018680 0041 00000000 0x0 0x0
0xffffe48000018700 0041 00000000 0x0 0x0
0xffffe48000018780 0041 00000000 0x0 0x0
0xffffe48000018800 0041 00000000 0x0 0x0
0xffffe48000018880 0041 00000000 0x0 0x0
0xffffe48000018900 0041 00000000 0x0 0x0
0xffffe48000018980 0041 00000000 0x0 0x0
0xffffe48000018a00 0041 00000000 0x0 0x0
0xffffe48000018a80 0041 00000000 0x0 0x0
0xffffe48000018b00 0041 00000000 0x0 0x0
0xffffe48000018b80 0041 00000000 0x0 0x0
0xffffe48000018c00 0041 00000000 0x0 0x0
0xffffe48000018c80 0041 00000000 0x0 0x0
0xffffe48000018d00 0041 00000000 0x0 0x0
0xffffe48000018d80 0041 00000000 0x0 0x0
0xffffe48000018e00 0041 00000000 0x0 0x0
0xffffe48000018e80 0041 00000000 0x0 0x0
0xffffe48000018f00 0041 00000000 0x0 0x0
0xffffe48000018f80 0041 00000000 0x0 0x0
0xffffe48000019000 0041 00000000 0x0 0x0
0xffffe48000019080 0041 00000000 0x0 0x0
0xffffe48000019100 0041 00000000 0x0 0x0
0xffffe48000019180 0041 00000000 0x0 0x0
0xffffe48000019200 0041 00000000 0x0 0x0
0xffffe48000019280 0041 00000000 0x0 0x0
0xffffe48000019300 0041 00000000 0x0 0x0
0xffffe48000019380 0041 00000000 0x0 0x0
0xffffe48000019400 0041 00000000 0x0 0x0
0xffffe48000019480 0041 00000000 0x0 0x0
0xffffe48000019500 0041 00000000 0x0 0x0
0xffffe48000019580 0041 00000000 0x0 0x0
0xffffe48000019600 0041 00000000 0x0 0x0
0xffffe48000019680 0041 00000000 0x0 0x0
0xffffe48000019700 0041 00000000 0x0 0x0
0xffffe48000019780 0041 00000000 0x0 0x0
0xffffe48000019800 0041 00000000 0x0 0x0
0xffffe48000019880 0041 00000000 0x0 0x0
0xffffe48000019900 0041 00000000 0x0 0x0
0xffffe48000019980 0041 00000000 0x0 0x0
0xffffe48000019a00 0041 00000000 0x0 0x0
0xffffe48000019a80 0041 00000000 0x0 0x0
0xffffe48000019b00 0041 00000000 0x0 0x0
0xffffe48000019b80 0041 00000000 0x0 0x0
0xffffe48000019c00 0041 00000000 0x0 0x0
0xffffe48000019c80 0041 00000000 0x0 0x0
0xffffe48000019d00 0041 00000000 0x0 0x0
0xffffe48000019d80 0041 00000000 0x0 0x0
0xffffe48000019e00 0041 00000000 0x0 0x0
0xffffe48000019e80 0041 00000000 0x0 0x0
0xffffe48000019f00 0041 00000000 0x0 0x0
0xffffe48000019f80 0041 00000000 0x0 0x0
0xffffe4800001a000 0041 00000000 0x0 0x0
0xffffe4800001a080 0041 00000000 0x0 0x0
0xffffe4800001a100 0041 00000000 0x0 0x0
0xffffe4800001a180 0041 00000000 0x0 0x0
0xffffe4800001a200 0041 00000000 0x0 0x0
0xffffe4800001a280 0041 00000000 0x0 0x0
0xffffe4800001a300 0041 00000000 0x0 0x0
0xffffe4800001a380 0041 00000000 0x0 0x0
0xffffe4800001a400 0041 00000000 0x0 0x0
0xffffe4800001a480 0041 00000000 0x0 0x0
0xffffe4800001a500 0041 00000000 0x0 0x0
0xffffe4800001a580 0041 00000000 0x0 0x0
0xffffe4800001a600 0041 00000000 0x0 0x0
0xffffe4800001a680 0041 00000000 0x0 0x0
0xffffe4800001a700 0041 00000000 0x0 0x0
0xffffe4800001a780 0041 00000000 0x0 0x0
0xffffe4800001a800 0041 00000000 0x0 0x0
0xffffe4800001a880 0041 00000000 0x0 0x0
0xffffe4800001a900 0041 00000000 0x0 0x0
0xffffe4800001a980 0041 00000000 0x0 0x0
0xffffe4800001aa00 0041 00000000 0x0 0x0
0xffffe4800001aa80 0041 00000000 0x0 0x0
0xffffe4800001ab00 0041 00000000 0x0 0x0
0xffffe4800001ab80 0041 00000000 0x0 0x0
0xffffe4800001ac00 0041 00000000 0x0 0x0
0xffffe4800001ac80 0041 00000000 0x0 0x0
0xffffe4800001ad00 0041 00000000 0x0 0x0
0xffffe4800001ad80 0041 00000000 0x0 0x0
0xffffe4800001ae00 0041 00000000 0x0 0x0
0xffffe4800001ae80 0041 00000000 0x0 0x0
0xffffe4800001af00 0041 00000000 0x0 0x0
0xffffe4800001af80 0041 00000000 0x0 0x0
0xffffe4800001b000 0041 00000000 0x0 0x0
0xffffe4800001b080 0041 00000000 0x0 0x0
0xffffe4800001b100 0041 00000000 0x0 0x0
0xffffe4800001b180 0041 00000000 0x0 0x0
0xffffe4800001b200 0041 00000000 0x0 0x0
0xffffe4800001b280 0041 00000000 0x0 0x0
0xffffe4800001b300 0041 00000000 0x0 0x0
0xffffe4800001b380 0041 00000000 0x0 0x0
0xffffe4800001b400 0041 00000000 0x0 0x0
0xffffe4800001b480 0041 00000000 0x0 0x0
0xffffe4800001b500 0041 00000000 0x0 0x0
0xffffe4800001b580 0041 00000000 0x0 0x0
0xffffe4800001b600 0041 00000000 0x0 0x0
0xffffe4800001b680 0041 00000000 0x0 0x0
0xffffe4800001b700 0041 00000000 0x0 0x0
0xffffe4800001b780 0041 00000000 0x0 0x0
0xffffe4800001b800 0041 00000000 0x0 0x0
0xffffe4800001b880 0041 00000000 0x0 0x0
0xffffe4800001b900 0041 00000000 0x0 0x0
0xffffe4800001b980 0041 00000000 0x0 0x0
0xffffe4800001ba00 0041 00000000 0x0 0x0
0xffffe4800001ba80 0041 00000000 0x0 0x0
0xffffe4800001bb00 0041 00000000 0x0 0x0
0xffffe4800001bb80 0041 00000000 0x0 0x0
0xffffe4800001bc00 0041 00000000 0x0 0x0
0xffffe4800001bc80 0041 00000000 0x0 0x0
0xffffe4800001bd00 0041 00000000 0x0 0x0
0xffffe4800001bd80 0041 00000000 0x0 0x0
0xffffe4800001be00 0041 00000000 0x0 0x0
0xffffe4800001be80 0041 00000000 0x0 0x0
0xffffe4800001bf00 0041 00000000 0x0 0x0
0xffffe4800001bf80 0041 00000000 0x0 0x0
0xffffe4800001c000 0041 00000000 0x0 0x0
0xffffe4800001c080 0041 00000000 0x0 0x0
0xffffe4800001c100 0041 00000000 0x0 0x0
0xffffe4800001c180 0041 00000000 0x0 0x0
0xffffe4800001c200 0041 00000000 0x0 0x0
0xffffe4800001c280 0041 00000000 0x0 0x0
0xffffe4800001c300 0041 00000000 0x0 0x0
0xffffe4800001c380 0041 00000000 0x0 0x0
0xffffe4800001c400 0041 00000000 0x0 0x0
0xffffe4800001c480 0041 00000000 0x0 0x0
0xffffe4800001c500 0041 00000000 0x0 0x0
0xffffe4800001c580 0041 00000000 0x0 0x0
0xffffe4800001c600 0041 00000000 0x0 0x0
0xffffe4800001c680 0041 00000000 0x0 0x0
0xffffe4800001c700 0041 00000000 0x0 0x0
0xffffe4800001c780 0041 00000000 0x0 0x0
0xffffe4800001c800 0041 00000000 0x0 0x0
0xffffe4800001c880 0041 00000000 0x0 0x0
0xffffe4800001c900 0041 00000000 0x0 0x0
0xffffe4800001c980 0041 00000000 0x0 0x0
0xffffe4800001ca00 0041 00000000 0x0 0x0
0xffffe4800001ca80 0041 00000000 0x0 0x0
0xffffe4800001cb00 0041 00000000 0x0 0x0
0xffffe4800001cb80 0041 00000000 0x0 0x0
0xffffe4800001cc00 0041 00000000 0x0 0x0
0xffffe4800001cc80 0041 00000000 0x0 0x0
0xffffe4800001cd00 0041 00000000 0x0 0x0
0xffffe4800001cd80 0041 00000000 0x0 0x0
0xffffe4800001ce00 0041 00000000 0x0 0x0
0xffffe4800001ce80 0041 00000000 0x0 0x0
0xffffe4800001cf00 0041 00000000 0x0 0x0
0xffffe4800001cf80 0001 00000000 0x0 0x0
0xffffe4800001d000 0001 00000000 0x0 0x0
0xffffe4800001d080 0001 00000000 0x0 0x0
0xffffe4800001d100 0001 00000000 0x0 0x0
0xffffe4800001d180 0001 00000000 0x0 0x0
0xffffe4800001d200 0001 00000000 0x0 0x0
0xffffe4800001d280 0001 00000000 0x0 0x0
0xffffe4800001d300 0001 00000000 0x0 0x0
0xffffe4800001d380 0001 00000000 0x0 0x0
0xffffe4800001d400 0001 00000000 0x0 0x0
0xffffe4800001d480 0001 00000000 0x0 0x0
0xffffe4800001d500 0001 00000000 0x0 0x0
0xffffe4800001d580 0001 00000000 0x0 0x0
0xffffe4800001d600 0001 00000000 0x0 0x0
0xffffe4800001d680 0001 00000000 0x0 0x0
0xffffe4800001d700 0001 00000000 0x0 0x0
0xffffe4800001d780 0001 00000000 0x0 0x0
0xffffe4800001d800 0001 00000000 0x0 0x0
0xffffe4800001d880 0001 00000000 0x0 0x0
0xffffe4800001d900 0001 00000000 0x0 0x0
0xffffe4800001d980 0001 00000000 0x0 0x0
0xffffe4800001da00 0001 00000000 0x0 0x0
0xffffe4800001da80 0001 00000000 0x0 0x0
0xffffe4800001db00 0001 00000000 0x0 0x0
0xffffe4800001db80 0001 00000000 0x0 0x0
0xffffe4800001dc00 0001 00000000 0x0 0x0
0xffffe4800001dc80 0001 00000000 0x0 0x0
0xffffe4800001dd00 0001 00000000 0x0 0x0
0xffffe4800001dd80 0001 00000000 0x0 0x0
0xffffe4800001de00 0001 00000000 0x0 0x0
0xffffe4800001de80 0001 00000000 0x0 0x0
0xffffe4800001df00 0001 00000000 0x0 0x0
0xffffe4800001df80 0001 00000000 0x0 0x0
0xffffe4800001e000 0001 00000000 0x0 0x0
0xffffe4800001e080 0001 00000000 0x0 0x0
0xffffe4800001e100 0001 00000000 0x0 0x0
0xffffe4800001e180 0001 00000000 0x0 0x0
0xffffe4800001e200 0001 00000000 0x0 0x0
0xffffe4800001e280 0001 00000000 0x0 0x0
0xffffe4800001e300 0001 00000000 0x0 0x0
0xffffe4800001e380 0001 00000000 0x0 0x0
0xffffe4800001e400 0001 00000000 0x0 0x0
0xffffe4800001e480 0001 00000000 0x0 0x0
0xffffe4800001e500 0001 00000000 0x0 0x0
0xffffe4800001e580 0001 00000000 0x0 0x0
0xffffe4800001e600 0001 00000000 0x0 0x0
0xffffe4800001e680 0001 00000000 0x0 0x0
0xffffe4800001e700 0001 00000000 0x0 0x0
0xffffe4800001e780 0001 00000000 0x0 0x0
0xffffe4800001e800 0001 00000000 0x0 0x0
0xffffe4800001e880 0001 00000000 0x0 0x0
0xffffe4800001e900 0001 00000000 0x0 0x0
0xffffe4800001e980 0001 00000000 0x0 0x0
0xffffe4800001ea00 0001 00000000 0x0 0x0
0xffffe4800001ea80 0001 00000000 0x0 0x0
0xffffe4800001eb00 0001 00000000 0x0 0x0
0xffffe4800001eb80 0001 00000000 0x0 0x0
0xffffe4800001ec00 0001 00000000 0x0 0x0
0xffffe4800001ec80 0001 00000000 0x0 0x0
0xffffe4800001ed00 0001 00000000 0x0 0x0
0xffffe4800001ed80 0001 00000000 0x0 0x0
0xffffe4800001ee00 0001 00000000 0x0 0x0
0xffffe4800001ee80 0001 00000000 0x0 0x0
0xffffe4800001ef00 0001 00000000 0x0 0x0
0xffffe4800001ef80 0001 00000000 0x0 0x0
0xffffe4800001f000 0001 00000000 0x0 0x0
0xffffe4800001f080 0001 00000000 0x0 0x0
0xffffe4800001f100 0001 00000000 0x0 0x0
0xffffe4800001f180 0001 00000000 0x0 0x0
0xffffe4800001f200 0001 00000000 0x0 0x0
0xffffe4800001f280 0001 00000000 0x0 0x0
0xffffe4800001f300 0001 00000000 0x0 0x0
0xffffe4800001f380 0001 00000000 0x0 0x0
0xffffe4800001f400 0001 00000000 0x0 0x0
0xffffe4800001f480 0001 00000000 0x0 0x0
0xffffe4800001f500 0001 00000000 0x0 0x0
0xffffe4800001f580 0001 00000000 0x0 0x0
0xffffe4800001f600 0001 00000000 0x0 0x0
0xffffe4800001f680 0001 00000000 0x0 0x0
0xffffe4800001f700 0001 00000000 0x0 0x0
0xffffe4800001f780 0001 00000000 0x0 0x0
0xffffe4800001f800 0001 00000000 0x0 0x0
0xffffe4800001f880 0001 00000000 0x0 0x0
0xffffe4800001f900 0001 00000000 0x0 0x0
0xffffe4800001f980 0001 00000000 0x0 0x0
0xffffe4800001fa00 0001 00000000 0x0 0x0
0xffffe4800001fa80 0001 00000000 0x0 0x0
0xffffe4800001fb00 0001 00000000 0x0 0x0
0xffffe4800001fb80 0001 00000000 0x0 0x0
0xffffe4800001fc00 0001 00000000 0x0 0x0
0xffffe4800001fc80 0001 00000000 0x0 0x0
0xffffe4800001fd00 0001 00000000 0x0 0x0
0xffffe4800001fd80 0001 00000000 0x0 0x0
0xffffe4800001fe00 0001 00000000 0x0 0x0
0xffffe4800001fe80 0001 00000000 0x0 0x0
0xffffe4800001ff00 0001 00000000 0x0 0x0
0xffffe4800001ff80 0001 00000000 0x0 0x0
0xffffe48000020000 0001 00000000 0x0 0x0
0xffffe48000020080 0001 00000000 0x0 0x0
0xffffe48000020100 0001 00000000 0x0 0x0
0xffffe48000020180 0001 00000000 0x0 0x0
0xffffe48000020200 0001 00000000 0x0 0x0
0xffffe48000020280 0001 00000000 0x0 0x0
0xffffe48000020300 0001 00000000 0x0 0x0
0xffffe48000020380 0001 00000000 0x0 0x0
0xffffe48000020400 0001 00000000 0x0 0x0
0xffffe48000020480 0001 00000000 0x0 0x0
0xffffe48000020500 0001 00000000 0x0 0x0
0xffffe48000020580 0001 00000000 0x0 0x0
0xffffe48000020600 0001 00000000 0x0 0x0
0xffffe48000020680 0001 00000000 0x0 0x0
0xffffe48000020700 0001 00000000 0x0 0x0
0xffffe48000020780 0001 00000000 0x0 0x0
0xffffe48000020800 0001 00000000 0x0 0x0
0xffffe48000020880 0001 00000000 0x0 0x0
0xffffe48000020900 0001 00000000 0x0 0x0
0xffffe48000020980 0001 00000000 0x0 0x0
0xffffe48000020a00 0001 00000000 0x0 0x0
0xffffe48000020a80 0001 00000000 0x0 0x0
0xffffe48000020b00 0001 00000000 0x0 0x0
0xffffe48000020b80 0001 00000000 0x0 0x0
0xffffe48000020c00 0001 00000000 0x0 0x0
0xffffe48000020c80 0001 00000000 0x0 0x0
0xffffe48000020d00 0001 00000000 0x0 0x0
0xffffe48000020d80 0001 00000000 0x0 0x0
0xffffe48000020e00 0001 00000000 0x0 0x0
0xffffe48000020e80 0001 00000000 0x0 0x0
0xffffe48000020f00 0001 00000000 0x0 0x0
0xffffe48000020f80 0001 00000000 0x0 0x0
0xffffe48000021000 0001 00000000 0x0 0x0
0xffffe48000021080 0001 00000000 0x0 0x0
0xffffe48000021100 0001 00000000 0x0 0x0
0xffffe48000021180 0001 00000000 0x0 0x0
0xffffe48000021200 0001 00000000 0x0 0x0
0xffffe48000021280 0001 00000000 0x0 0x0
0xffffe48000021300 0001 00000000 0x0 0x0
0xffffe48000021380 0001 00000000 0x0 0x0
0xffffe48000021400 0001 00000000 0x0 0x0
0xffffe48000021480 0001 00000000 0x0 0x0
0xffffe48000021500 0001 00000000 0x0 0x0
0xffffe48000021580 0001 00000000 0x0 0x0
0xffffe48000021600 0001 00000000 0x0 0x0
0xffffe48000021680 0001 00000000 0x0 0x0
0xffffe48000021700 0001 00000000 0x0 0x0
0xffffe48000021780 0001 00000000 0x0 0x0
0xffffe48000021800 0001 00000000 0x0 0x0
0xffffe48000021880 0001 00000000 0x0 0x0
0xffffe48000021900 0001 00000000 0x0 0x0
0xffffe48000021980 0001 00000000 0x0 0x0
0xffffe48000021a00 0001 00000000 0x0 0x0
0xffffe48000021a80 0001 00000000 0x0 0x0
0xffffe48000021b00 0001 00000000 0x0 0x0
0xffffe48000021b80 0001 00000000 0x0 0x0
0xffffe48000021c00 0001 00000000 0x0 0x0
0xffffe48000021c80 0001 00000000 0x0 0x0
0xffffe48000021d00 0001 00000000 0x0 0x0
0xffffe48000021d80 0001 00000000 0x0 0x0
0xffffe48000021e00 0001 00000000 0x0 0x0
0xffffe48000021e80 0001 00000000 0x0 0x0
0xffffe48000021f00 0001 00000000 0x0 0x0
0xffffe48000021f80 0001 00000000 0x0 0x0
0xffffe48000022000 0001 00000000 0x0 0x0
0xffffe48000022080 0001 00000000 0x0 0x0
0xffffe48000022100 0001 00000000 0x0 0x0
0xffffe48000022180 0001 00000000 0x0 0x0
0xffffe48000022200 0001 00000000 0x0 0x0
0xffffe48000022280 0001 00000000 0x0 0x0
0xffffe48000022300 0001 00000000 0x0 0x0
0xffffe48000022380 0001 00000000 0x0 0x0
0xffffe48000022400 0001 00000000 0x0 0x0
0xffffe48000022480 0001 00000000 0x0 0x0
0xffffe48000022500 0001 00000000 0x0 0x0
0xffffe48000022580 0001 00000000 0x0 0x0
0xffffe48000022600 0001 00000000 0x0 0x0
0xffffe48000022680 0001 00000000 0x0 0x0
0xffffe48000022700 0001 00000000 0x0 0x0
0xffffe48000022780 0001 00000000 0x0 0x0
0xffffe48000022800 0001 00000000 0x0 0x0
0xffffe48000022880 0001 00000000 0x0 0x0
0xffffe48000022900 0001 00000000 0x0 0x0
0xffffe48000022980 0001 00000000 0x0 0x0
0xffffe48000022a00 0001 00000000 0x0 0x0
0xffffe48000022a80 0001 00000000 0x0 0x0
0xffffe48000022b00 0001 00000000 0x0 0x0
0xffffe48000022b80 0001 00000000 0x0 0x0
0xffffe48000022c00 0001 00000000 0x0 0x0
0xffffe48000022c80 0001 00000000 0x0 0x0
0xffffe48000022d00 0001 00000000 0x0 0x0
0xffffe48000022d80 0001 00000000 0x0 0x0
0xffffe48000022e00 0001 00000000 0x0 0x0
0xffffe48000022e80 0001 00000000 0x0 0x0
0xffffe48000022f00 0001 00000000 0x0 0x0
0xffffe48000022f80 0001 00000000 0x0 0x0
0xffffe48000023000 0001 00000000 0x0 0x0
0xffffe48000023080 0001 00000000 0x0 0x0
0xffffe48000023100 0001 00000000 0x0 0x0
0xffffe48000023180 0001 00000000 0x0 0x0
0xffffe48000023200 0001 00000000 0x0 0x0
0xffffe48000023280 0001 00000000 0x0 0x0
0xffffe48000023300 0001 00000000 0x0 0x0
0xffffe48000023380 0001 00000000 0x0 0x0
0xffffe48000023400 0001 00000000 0x0 0x0
0xffffe48000023480 0001 00000000 0x0 0x0
0xffffe48000023500 0001 00000000 0x0 0x0
0xffffe48000023580 0001 00000000 0x0 0x0
0xffffe48000023600 0001 00000000 0x0 0x0
0xffffe48000023680 0001 00000000 0x0 0x0
0xffffe48000023700 0001 00000000 0x0 0x0
0xffffe48000023780 0001 00000000 0x0 0x0
0xffffe48000023800 0001 00000000 0x0 0x0
0xffffe48000023880 0001 00000000 0x0 0x0
0xffffe48000023900 0001 00000000 0x0 0x0
0xffffe48000023980 0001 00000000 0x0 0x0
0xffffe48000023a00 0001 00000000 0x0 0x0
0xffffe48000023a80 0001 00000000 0x0 0x0
0xffffe48000023b00 0001 00000000 0x0 0x0
0xffffe48000023b80 0001 00000000 0x0 0x0
0xffffe48000023c00 0001 00000000 0x0 0x0
0xffffe48000023c80 0001 00000000 0x0 0x0
0xffffe48000023d00 0001 00000000 0x0 0x0
0xffffe48000023d80 0001 00000000 0x0 0x0
0xffffe48000023e00 0001 00000000 0x0 0x0
0xffffe48000023e80 0001 00000000 0x0 0x0
0xffffe48000023f00 0001 00000000 0x0 0x0
0xffffe48000023f80 0001 00000000 0x0 0x0
0xffffe48000024000 0001 00000000 0x0 0x0
0xffffe48000024080 0001 00000000 0x0 0x0
0xffffe48000024100 0001 00000000 0x0 0x0
0xffffe48000024180 0001 00000000 0x0 0x0
0xffffe48000024200 0001 00000000 0x0 0x0
0xffffe48000024280 0001 00000000 0x0 0x0
0xffffe48000024300 0001 00000000 0x0 0x0
0xffffe48000024380 0001 00000000 0x0 0x0
0xffffe48000024400 0001 00000000 0x0 0x0
0xffffe48000024480 0001 00000000 0x0 0x0
0xffffe48000024500 0001 00000000 0x0 0x0
0xffffe48000024580 0001 00000000 0x0 0x0
0xffffe48000024600 0001 00000000 0x0 0x0
0xffffe48000024680 0001 00000000 0x0 0x0
0xffffe48000024700 0001 00000000 0x0 0x0
0xffffe48000024780 0001 00000000 0x0 0x0
0xffffe48000024800 0001 00000000 0x0 0x0
0xffffe48000024880 0001 00000000 0x0 0x0
0xffffe48000024900 0001 00000000 0x0 0x0
0xffffe48000024980 0001 00000000 0x0 0x0
0xffffe48000024a00 0001 00000000 0x0 0x0
0xffffe48000024a80 0001 00000000 0x0 0x0
0xffffe48000024b00 0001 00000000 0x0 0x0
0xffffe48000024b80 0001 00000000 0x0 0x0
0xffffe48000024c00 0001 00000000 0x0 0x0
0xffffe48000024c80 0001 00000000 0x0 0x0
0xffffe48000024d00 0001 00000000 0x0 0x0
0xffffe48000024d80 0001 00000000 0x0 0x0
0xffffe48000024e00 0001 00000000 0x0 0x0
0xffffe48000024e80 0001 00000000 0x0 0x0
0xffffe48000024f00 0001 00000000 0x0 0x0
0xffffe48000024f80 0001 00000000 0x0 0x0
0xffffe48000025000 0001 00000000 0x0 0x0
0xffffe48000025080 0001 00000000 0x0 0x0
0xffffe48000025100 0001 00000000 0x0 0x0
0xffffe48000025180 0001 00000000 0x0 0x0
0xffffe48000025200 0001 00000000 0x0 0x0
0xffffe48000025280 0001 00000000 0x0 0x0
0xffffe48000025300 0001 00000000 0x0 0x0
0xffffe48000025380 0001 00000000 0x0 0x0
0xffffe48000025400 0001 00000000 0x0 0x0
0xffffe48000025480 0001 00000000 0x0 0x0
0xffffe48000025500 0001 00000000 0x0 0x0
0xffffe48000025580 0001 00000000 0x0 0x0
0xffffe48000025600 0001 00000000 0x0 0x0
0xffffe48000025680 0001 00000000 0x0 0x0
0xffffe48000025700 0001 00000000 0x0 0x0
0xffffe48000025780 0001 00000000 0x0 0x0
0xffffe48000025800 0001 00000000 0x0 0x0
0xffffe48000025880 0001 00000000 0x0 0x0
0xffffe48000025900 0001 00000000 0x0 0x0
0xffffe48000025980 0001 00000000 0x0 0x0
0xffffe48000025a00 0001 00000000 0x0 0x0
0xffffe48000025a80 0001 00000000 0x0 0x0
0xffffe48000025b00 0001 00000000 0x0 0x0
0xffffe48000025b80 0001 00000000 0x0 0x0
0xffffe48000025c00 0001 00000000 0x0 0x0
0xffffe48000025c80 0001 00000000 0x0 0x0
0xffffe48000025d00 0001 00000000 0x0 0x0
0xffffe48000025d80 0001 00000000 0x0 0x0
0xffffe48000025e00 0001 00000000 0x0 0x0
0xffffe48000025e80 0001 00000000 0x0 0x0
0xffffe48000025f00 0001 00000000 0x0 0x0
0xffffe48000025f80 0001 00000000 0x0 0x0
0xffffe48000026000 0001 00000000 0x0 0x0
0xffffe48000026080 0001 00000000 0x0 0x0
0xffffe48000026100 0001 00000000 0x0 0x0
0xffffe48000026180 0001 00000000 0x0 0x0
0xffffe48000026200 0001 00000000 0x0 0x0
0xffffe48000026280 0001 00000000 0x0 0x0
0xffffe48000026300 0001 00000000 0x0 0x0
0xffffe48000026380 0001 00000000 0x0 0x0
0xffffe48000026400 0001 00000000 0x0 0x0
0xffffe48000026480 0001 00000000 0x0 0x0
0xffffe48000026500 0001 00000000 0x0 0x0
0xffffe48000026580 0001 00000000 0x0 0x0
0xffffe48000026600 0001 00000000 0x0 0x0
0xffffe48000026680 0001 00000000 0x0 0x0
0xffffe48000026700 0001 00000000 0x0 0x0
0xffffe48000026780 0001 00000000 0x0 0x0
0xffffe48000026800 0001 00000000 0x0 0x0
0xffffe48000026880 0001 00000000 0x0 0x0
0xffffe48000026900 0001 00000000 0x0 0x0
0xffffe48000026980 0001 00000000 0x0 0x0
0xffffe48000026a00 0001 00000000 0x0 0x0
0xffffe48000026a80 0001 00000000 0x0 0x0
0xffffe48000026b00 0001 00000000 0x0 0x0
0xffffe48000026b80 0001 00000000 0x0 0x0
0xffffe48000026c00 0001 00000000 0x0 0x0
0xffffe48000026c80 0001 00000000 0x0 0x0
0xffffe48000026d00 0001 00000000 0x0 0x0
0xffffe48000026d80 0001 00000000 0x0 0x0
0xffffe48000026e00 0001 00000000 0x0 0x0
0xffffe48000026e80 0001 00000000 0x0 0x0
0xffffe48000026f00 0001 00000000 0x0 0x0
0xffffe48000026f80 0001 00000000 0x0 0x0
0xffffe48000027000 0001 00000000 0x0 0x0
0xffffe48000027080 0001 00000000 0x0 0x0
0xffffe48000027100 0001 00000000 0x0 0x0
0xffffe48000027180 0001 00000000 0x0 0x0
0xffffe48000027200 0001 00000000 0x0 0x0
0xffffe48000027280 0001 00000000 0x0 0x0
0xffffe48000027300 0001 00000000 0x0 0x0
0xffffe48000027380 0001 00000000 0x0 0x0
0xffffe48000027400 0001 00000000 0x0 0x0
0xffffe48000027480 0001 00000000 0x0 0x0
0xffffe48000027500 0001 00000000 0x0 0x0
0xffffe48000027580 0001 00000000 0x0 0x0
0xffffe48000027600 0001 00000000 0x0 0x0
0xffffe48000027680 0001 00000000 0x0 0x0
0xffffe48000027700 0001 00000000 0x0 0x0
0xffffe48000027780 0001 00000000 0x0 0x0
0xffffe48000027800 0001 00000000 0x0 0x0
0xffffe48000027880 0001 00000000 0x0 0x0
0xffffe48000027900 0001 00000000 0x0 0x0
0xffffe48000027980 0001 00000000 0x0 0x0
0xffffe48000027a00 0001 00000000 0x0 0x0
0xffffe48000027a80 0001 00000000 0x0 0x0
0xffffe48000027b00 0001 00000000 0x0 0x0
0xffffe48000027b80 0001 00000000 0x0 0x0
0xffffe48000027c00 0001 00000000 0x0 0x0
0xffffe48000027c80 0001 00000000 0x0 0x0
0xffffe48000027d00 0001 00000000 0x0 0x0
0xffffe48000027d80 0001 00000000 0x0 0x0
0xffffe48000027e00 0001 00000000 0x0 0x0
0xffffe48000027e80 0001 00000000 0x0 0x0
0xffffe48000027f00 0001 00000000 0x0 0x0
0xffffe48000027f80 0001 00000000 0x0 0x0
0xffffe48000028000 0001 00000000 0x0 0x0
0xffffe48000028080 0001 00000000 0x0 0x0
0xffffe48000028100 0001 00000000 0x0 0x0
0xffffe48000028180 0001 00000000 0x0 0x0
0xffffe48000028200 0001 00000000 0x0 0x0
0xffffe48000028280 0001 00000000 0x0 0x0
0xffffe48000028300 0001 00000000 0x0 0x0
0xffffe48000028380 0001 00000000 0x0 0x0
0xffffe48000028400 0001 00000000 0x0 0x0
0xffffe48000028480 0001 00000000 0x0 0x0
0xffffe48000028500 0001 00000000 0x0 0x0
0xffffe48000028580 0001 00000000 0x0 0x0
0xffffe48000028600 0001 00000000 0x0 0x0
0xffffe48000028680 0001 00000000 0x0 0x0
0xffffe48000028700 0001 00000000 0x0 0x0
0xffffe48000028780 0001 00000000 0x0 0x0
0xffffe48000028800 0001 00000000 0x0 0x0
0xffffe48000028880 0001 00000000 0x0 0x0
0xffffe48000028900 0001 00000000 0x0 0x0
0xffffe48000028980 0001 00000000 0x0 0x0
0xffffe48000028a00 0001 00000000 0x0 0x0
0xffffe48000028a80 0001 00000000 0x0 0x0
0xffffe48000028b00 0001 00000000 0x0 0x0
0xffffe48000028b80 0001 00000000 0x0 0x0
0xffffe48000028c00 0001 00000000 0x0 0x0
0xffffe48000028c80 0001 00000000 0x0 0x0
0xffffe48000028d00 0001 00000000 0x0 0x0
0xffffe48000028d80 0001 00000000 0x0 0x0
0xffffe48000028e00 0001 00000000 0x0 0x0
0xffffe48000028e80 0001 00000000 0x0 0x0
0xffffe48000028f00 0001 00000000 0x0 0x0
0xffffe48000028f80 0001 00000000 0x0 0x0
0xffffe48000029000 0001 00000000 0x0 0x0
0xffffe48000029080 0001 00000000 0x0 0x0
0xffffe48000029100 0001 00000000 0x0 0x0
0xffffe48000029180 0001 00000000 0x0 0x0
0xffffe48000029200 0001 00000000 0x0 0x0
0xffffe48000029280 0001 00000000 0x0 0x0
0xffffe48000029300 0001 00000000 0x0 0x0
0xffffe48000029380 0001 00000000 0x0 0x0
0xffffe48000029400 0001 00000000 0x0 0x0
0xffffe48000029480 0001 00000000 0x0 0x0
0xffffe48000029500 0001 00000000 0x0 0x0
0xffffe48

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

May 10, 2024, 9:43:20 AMMay 10

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: d2d9aaf4f852 Remove the -xx, now we have the list of 20 pl..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=16c8c5d4980000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=5d77e822ea2e943c6760
compiler: Debian clang version 15.0.6

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1007734c980000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14266504980000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/e4cbb0bf4455/disk-d2d9aaf4.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/bb01441ae870/netbsd-d2d9aaf4.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+5d77e8...@syzkaller.appspotmail.com

[ 42.5547015] panic: MSan: Uninitialized Variable 'tdvp' From union_lookup1()

[ 42.5547015] cpu0: Begin traceback...
[ 42.5646915] vpanic() at netbsd:vpanic+0xc9d
[ 42.6147002] panic() at netbsd:panic+0x1b3
[ 42.6646943] __msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
[ 42.6646943] __msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
[ 42.7146994] layer_lookup() at netbsd:layer_lookup+0x8d2
[ 42.7646951] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
[ 42.8146971] union_lookup1() at netbsd:union_lookup1+0x4cf sys/fs/union/union_vnops.c:279
[ 42.8746963] union_lookup() at netbsd:union_lookup+0x579 sys/fs/union/union_vnops.c:371
[ 42.9246956] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
[ 42.9747016] lookup_once() at netbsd:lookup_once+0x10ec sys/kern/vfs_lookup.c:1150
[ 43.0347012] namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc namei_oneroot sys/kern/vfs_lookup.c:1546 [inline]
[ 43.0347012] namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc sys/kern/vfs_lookup.c:1906
[ 43.0846969] namei() at netbsd:namei+0x289
[ 43.1346939] do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
[ 43.1346939] do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d sys/kern/vfs_syscalls.c:2857
[ 43.1946978] syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 43.1946978] syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137
[ 43.2150724] --- syscall (number 10) ---
[ 43.2246930] netbsd:syscall+0x576:
[ 43.2246930] cpu0: End traceback...
[ 43.2378890] fatal breakpoint trap in supervisor mode
[ 43.2378890] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x286 cr2 0x7bfb6e1eaf60 ilevel 0 rsp 0xffffdc00c78fa080
[ 43.2537307] curlwp 0xffffdc0012c1d080 pid 942.942 lowest kstack 0xffffdc00c78f32c0
Stopped in pid 942.942 (syz-executor1747) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3
__msan_warning() at netbsd:__msan_warning+0x11e kmsan_report_inline sys/kern/subr_msan.c:250 [inline]
__msan_warning() at netbsd:__msan_warning+0x11e sys/kern/subr_msan.c:631
layer_lookup() at netbsd:layer_lookup+0x8d2
VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
union_lookup1() at netbsd:union_lookup1+0x4cf sys/fs/union/union_vnops.c:279
union_lookup() at netbsd:union_lookup+0x579 sys/fs/union/union_vnops.c:371
VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x248
lookup_once() at netbsd:lookup_once+0x10ec sys/kern/vfs_lookup.c:1150
namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc namei_oneroot sys/kern/vfs_lookup.c:1546 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x3cfc sys/kern/vfs_lookup.c:1906
namei() at netbsd:namei+0x289
do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
do_sys_unlinkat() at netbsd:do_sys_unlinkat+0x48d sys/kern/vfs_syscalls.c:2857

syscall() at netbsd:syscall+0x576 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x576 sys/arch/x86/x86/syscall.c:137

--- syscall (number 10) ---

netbsd:syscall+0x576:
Panic string: MSan: Uninitialized Variable 'tdvp' From union_lookup1()

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1245 1245 3 0 0 ffffdc001353d580 syz-executor1747 mutex
990 990 2 0 0 ffffdc001353d140 syz-executor1747
449 449 3 1 0 ffffdc0013508980 syz-executor1747 mutex
1239 1239 3 0 0 ffffdc0013508540 syz-executor1747 mutex
1241 1241 2 0 0 ffffdc0012ce0940 syz-executor1747
829 829 2 0 140 ffffdc0012ce0500 syz-executor1747
813 813 2 0 140 ffffdc0012ce00c0 syz-executor1747
1242 1242 2 0 140 ffffdc0012c1d900 syz-executor1747
1243 > 1243 7 1 140 ffffdc0012c1d4c0 syz-executor1747
942 > 942 7 0 0 ffffdc0012c1d080 syz-executor1747
947 947 2 0 140 ffffdc0012555780 syz-executor1747
1128 1128 3 0 180 ffffdc001233d2c0 syz-executor1747 nanoslp
1235 1235 3 0 40180 ffffdc00123106c0 sshd select
1222 1222 3 0 180 ffffdc0012bec8c0 getty nanoslp
1082 1082 3 0 180 ffffdc0012310280 getty nanoslp
1184 1184 3 1 180 ffffdc0012275ac0 getty nanoslp
1193 1193 3 1 180 ffffdc00121d7200 getty ttyraw
1102 1102 3 0 180 ffffdc0012310b00 sshd select
1088 1088 3 1 180 ffffdc0012525b80 powerd kqueue
700 700 3 1 180 ffffdc0012525300 syslogd kqueue
747 747 3 0 180 ffffdc0012bec480 dhcpcd poll
743 743 3 0 180 ffffdc0012bec040 dhcpcd poll
745 745 3 1 180 ffffdc0012555bc0 dhcpcd poll
598 598 3 0 180 ffffdc001233d700 dhcpcd poll
292 292 3 0 180 ffffdc0012555340 dhcpcd poll
485 485 3 1 180 ffffdc001233db40 dhcpcd poll
291 291 3 0 180 ffffdc0012525740 dhcpcd poll
1 1 3 0 180 ffffdc0011e53100 init wait
0 1132 2 0 240 ffffdc001353d9c0 vrele
0 673 3 0 200 ffffdc00121d7640 physiod physiod
0 196 3 0 200 ffffdc0012275680 pooldrain pooldrain
0 195 2 0 240 ffffdc0012275240 ioflush
0 194 3 1 200 ffffdc00121d7a80 pgdaemon pgdaemon
0 167 3 1 200 ffffdc00121a7a40 usb7 usbevt
0 172 3 1 200 ffffdc00121a7600 usb6 usbevt
0 170 3 1 200 ffffdc00121a71c0 usb5 usbevt
0 168 3 0 200 ffffdc001211ba00 usb4 usbevt
0 166 3 0 200 ffffdc001211b5c0 usb3 usbevt
0 165 3 0 200 ffffdc001211b180 usb2 usbevt
0 31 3 0 200 ffffdc001206b9c0 usb1 usbevt
0 63 3 0 200 ffffdc001206b580 usb0 usbevt
0 126 3 1 200 ffffdc001206b140 usbtask-dr usbtsk
0 125 3 1 200 ffffdc0011e53980 usbtask-hc usbtsk
0 124 3 0 200 ffffdc00103d3b00 swwreboot swwreboot
0 123 3 1 200 ffffdc0011e53540 npfgc0 npfgcw
0 122 3 1 200 ffffdc0011e48940 rt_free rt_free
0 121 3 1 200 ffffdc0011e48500 unpgc unpgc
0 120 2 0 200 ffffdc0011e480c0 key_timehandler
0 119 3 1 200 ffffdc0011e41900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffdc0011e414c0 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffffdc0011e41080 nd6_timer
0 116 3 1 200 ffffdc0011cccbc0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffdc0011ccc780 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffdc0011ccc340 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffdc0011ccd8c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffdc0011ccd480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffdc0011cc9b80 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffffdc0011cc9740 rt_timer
0 109 3 0 200 ffffdc0011ccd040 vmem_rehash vmem_rehash
0 100 3 0 200 ffffdc0011cc9300 entbutler entropy
0 99 3 0 200 ffffdc00117c0b40 viomb balloon
0 98 3 1 200 ffffdc00117c0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffdc00117c02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffdc00103d36c0 scsibus0 sccomp
0 29 3 0 200 ffffdc00103d3280 pms0 pmsreset
0 28 3 1 200 ffffdc00103baac0 xcall/1 xcall
0 27 1 1 200 ffffdc00103ba680 softser/1
0 26 1 1 200 ffffdc00103ba240 softclk/1
0 25 1 1 200 ffffdc00103b7a80 softbio/1
0 24 1 1 200 ffffdc00103b7640 softnet/1
0 23 1 1 201 ffffdc00103b7200 idle/1
0 22 3 1 200 ffffdc000f1d2a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffdc000f1d2600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffdc000f1d21c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffdc000f1d1a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffdc000f1d15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffdc000f1d1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffdc000f1ca9c0 sysmon smtaskq
0 15 3 0 200 ffffdc000f1ca580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffdc000f1ca140 pmfevent pmfevent
0 13 3 0 200 ffffdc000f1c8980 sopendfree sopendfr
0 12 3 0 200 ffffdc000f1c8540 ifwdog ifwdog
0 11 3 0 200 ffffdc000f1c8100 iflnkst iflnkst
0 10 3 0 200 ffffdc000f1be940 nfssilly nfssilly
0 9 3 0 200 ffffdc000f1be500 pooldisp pooldisp
0 8 3 1 200 ffffdc000f1be0c0 modunload mod_unld
0 7 3 0 200 ffffdc000ebc9900 xcall/0 xcall
0 6 1 0 200 ffffdc000ebc94c0 softser/0
0 5 1 0 200 ffffdc000ebc9080 softclk/0
0 4 1 0 200 ffffdc000ebc88c0 softbio/0
0 3 1 0 200 ffffdc000ebc8480 softnet/0
0 2 1 0 201 ffffdc000ebc8040 idle/0
0 0 2 0 240 ffffffff86a6f900 swapper
[Locks tracked through LWPs]

****** LWP 1245.1245 (syz-executor1747) @ 0xffffdc001353d580, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:fstrans_init+0x43 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 3
relevant cpu : 0 last held: 1
relevant lwp : 0xffffdc001353d580 last held: 0xffffdc0012ce0940
last locked* : netbsd:vfs_suspend+0x433
unlocked : netbsd:mount_domount+0x2038
owner field : 0xffffdc0012ce0940 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffffdc0013508540 0xffffdc001353d580 0xffffdc0013508980

****** LWP 990.990 (syz-executor1747) @ 0xffffdc001353d140, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:fstrans_init+0x6b sys/kern/vfs_trans.c:137)
lock address : netbsd:fstrans_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x6b

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdc001353d140 last held: 000000000000000000
last locked : netbsd:_fstrans_start+0xa85
unlocked* : netbsd:_fstrans_start+0x923

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 449.449 (syz-executor1747) @ 0xffffdc0013508980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:fstrans_init+0x43 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 3

relevant cpu : 1 last held: 1

relevant lwp : 0xffffdc0013508980 last held: 0xffffdc0012ce0940
last locked* : netbsd:vfs_suspend+0x433
unlocked : netbsd:mount_domount+0x2038
owner field : 0xffffdc0012ce0940 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffffdc0013508540 0xffffdc001353d580 0xffffdc0013508980

****** LWP 1239.1239 (syz-executor1747) @ 0xffffdc0013508540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:fstrans_init+0x43 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 3
relevant cpu : 0 last held: 1
relevant lwp : 0xffffdc0013508540 last held: 0xffffdc0012ce0940
last locked* : netbsd:vfs_suspend+0x433
unlocked : netbsd:mount_domount+0x2038
owner field : 0xffffdc0012ce0940 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffffdc0013508540 0xffffdc001353d580 0xffffdc0013508980

****** LWP 1241.1241 (syz-executor1747) @ 0xffffdc0012ce0940, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fstrans_init+0x43 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type : sleep/adaptive
initialized : netbsd:fstrans_init+0x43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 3
relevant cpu : 0 last held: 1
relevant lwp : 0xffffdc0012ce0940 last held: 0xffffdc0012ce0940
last locked* : netbsd:vfs_suspend+0x433
unlocked : netbsd:mount_domount+0x2038
owner field : 0xffffdc0012ce0940 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffffdc0013508540 0xffffdc001353d580 0xffffdc0013508980

*** Locks wanted: none

****** LWP 942.942 (syz-executor1747) @ 0xffffdc0012c1d080, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1438)

lock address : ffffdc001345ef80

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdc0012c1d080 last held: 0xffffdc0012c1d080

last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55

owner/count : 0xffffdc0012c1d080 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 743.743 (dhcpcd) @ 0xffffdc0012bec040, l_stat=3

relevant lwp : 0xffffdc0012bec040 last held: 000000000000000000