panic: kernel diagnostic assertion "lwpcnt >= NUM" failed: file "/syzkaller/m

0 vue

Accéder directement au premier message non lu

syzbot

non lue,

11 mai 2024, 15:52:2511 mai

à syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: ed4d3e75084d PR 58235: add support for SIOCGIFDATA and SIO..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=158bbf04980000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=f2bd0aa1a508ea614822
compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/5346ef9bc42e/disk-ed4d3e75.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/88ab8d1c9513/netbsd-ed4d3e75.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f2bd0a...@syzkaller.appspotmail.com

./file0 N7 �� ./file0 ./file0 ./file0 اH6)i EAZG��z�!of�q��;v�أ ��urL� � �Uگ@ #� �P� �/�Y7�� S� `,4 �� %)�nN:�(�� ?��9�. '�cL�$<V�kA�\2 � �� q�� 2�ÃB�E'��S�DB �h� yو� ��2 ��:�{[1�~��c8�_� %)4E�󸁀�Ǳ� P^ ./file0 �� L �� ./file0 N+ �� ./file0 ./file0 ./file0 اH6)i EAZG��z�!of�q��;v�أ ��urL� � �Uگ@ #� �P� �/�Y7�� S� `,4 �� %)�nN:�(�� ?��9�. '�cL�$<V�kA�\2 � �� q�� 2�ÃB�E'��S�DB �h� yو� ��2 ��:�{[1�~��c8�_� %)4E�󸁀�Ǳ� P^ ./file0 �� L �� ./file0 N3 �� ./file0 ./file0 ./file0 اH6)i EAZG��z�!of�q��;v�أ ��urL� � �Uگ@ #� �P� �/�Y7�� S� `,4 �� %)�nN:�(�� ?��9�. '�cL�$<V�kA�\2 � �� q�� 2�ÃB�E'��S�DB �h� yو� ��2 ��:�{[1�~��c8�_� %)4E�󸁀�Ǳ� P^ ./file0 �� L �� [ 3 45.9561231] panic: kernel diagnostic as sertion "lwpcnt >= 0" failed: file "/ syzkaller/m anagers/ci2-netbsd/kernel/sys/kern/kern_uidinfo.c", line 258 uid=60928 diff=-1 lwpcnt=-1
[ 345.9760781] cpu1: Begin traceback...
[ 346.0060984] vpanic() at netbsd:vpanic+0x282
[ 346.0561199] _sub_D_65535_0() at n etbsd:_sub_D_65535_0+-0x6b9c
[ 346.1061443] chglwpcnt() at n etbsd:chglwpcnt+0x8a
[ 346.1661741] lwp_free() at netbsd:lwp_free+0x69e
[ 346.2162011] lwp_wait() at n etbsd:lwp_wait+0x2fa
[ 346.2662238] exit_lwps() at n etbs d:exit_lwps+0x1d3
[ 346.3162533] exit1() at netbsd:exit1+0x188
[ 34 6.3762820] sys_exit() at n et b sd :sys_exit+0x92
[ 346.4263057] syscall() at n etbsd:s yscall +0x246
[ 346.4463156] --- sys call (number 1) ---
[ 346.4663252 ] netbsd:syscall+0x246:
[ 346.4763421] cpu1: End traceback...
[ 34 6.4763421] fatal breakpoi nt trap in supervisor mode
[ 346.4863 498] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0 ilevel 0 rsp 0xffff9c8248a7d990
[ 346.4963973] curlwp 0xffff9c80129c1b40 pi d 3905.5 848 lowest kstack 0xffff9c8248a762c 0
Stopped in pid 3905.5848 (syz-executor.5) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x6b9c
chglwpcnt() at netbsd:chglwpcnt+0x8a sys/kern/kern_uidinfo.c:258
lwp_free() at netbsd:lwp_free+0x69e sys/kern/kern_lwp.c:1267
lwp_wait() at netbsd:lwp_wait+0x2fa sys/kern/kern_lwp.c:707
exit_lwps() at netbsd:exit_lwps+0x1d3 sys/kern/kern_exit.c:651
exit1() at netbsd:exit1+0x188 ksiginfo_queue_init sys/sys/signalvar.h:240 [inline]
exit1() at netbsd:exit1+0x188 sys/kern/kern_exit.c:232
sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:181
syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
--- syscall (number 1) ---
netbsd:syscall+0x246:
Panic string: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/kern_uidinfo.c", line 258 uid=60928 diff=-1 lwpcnt=-1
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
4423 4200 3 1 180 ffff9c8014898080 syz-executor.1 parked
4423 6336 2 1 40 ffff9c80149665c0 syz-executor.1
4423 4818 3 1 180 ffff9c8014966180 syz-executor.1 parked
4423 4423 2 1 10000000 ffff9c8012a2f300 syz-executor.1
6208 > 6208 7 0 0 ffff9c80126d7b80 syz-executor.0
3838 6470 3 1 180 ffff9c8012d2a740 syz-executor.2 parked
3838 3838 2 1 10000000 ffff9c8012d5c780 syz-executor.2
3905 > 5848 7 1 0 ffff9c80129c1b40 syz-executor.5
3905 3905 5 1 10100000 ffff9c8012ab5080 syz-executor.5
4315 4315 2 1 0 ffff9c8013481140 syz-executor.3
3832 4560 3 0 180 ffff9c801453d280 syz-executor.4 ttyout
3832 6015 2 1 0 ffff9c801492e9c0 syz-executor.4
3832 3832 2 0 10040000 ffff9c8012cf6640 syz-executor.4
3718 3718 2 1 40140 ffff9c8012b87100 syz-executor.2
5681 5681 2 1 140 ffff9c8013f5ebc0 syz-executor.5
3316 3316 2 0 140 ffff9c8014898900 syz-executor.4
2854 2854 3 0 180 ffff9c8012cb60c0 syz-executor.3 parked
2813 2813 2 1 140 ffff9c80147dbbc0 syz-executor.1
4971 3225 4 0 1000180 ffff9c8012cc6980 $&, parked
4971 5204 4 0 1000000 ffff9c8012cc6540 syz-executor.3
4971 3043 4 0 1000000 ffff9c8012d2ab80 syz-executor.3
4971 4971 4 1 11000000 ffff9c8013421700 syz-executor.3
3175 3175 2 0 140 ffff9c8012ba2580 syz-executor.3
5161 5161 3 0 180 ffff9c8012dc6940 syz-executor.0 parked
5327 2809 3 0 1100000 ffff9c801413b140 syz-executor.0 vfork
5327 5327 3 0 11000000 ffff9c8012c6e300 syz-executor.0 lwpwait
3119 3119 3 1 180 ffff9c8012990ac0 syz-executor.0 parked
5557 5557 3 1 180 ffff9c8012c08a80 syz-executor.1 parked
2799 3671 3 1 1100000 ffff9c8013448480 syz-executor.1 vfork
2799 2799 3 0 11000000 ffff9c8013448040 syz-executor.1 lwpwait
2448 2448 3 0 180 ffff9c8012bd25c0 syz-executor.1 parked
4795 4795 3 1 180 ffff9c8012bd2180 syz-executor.4 parked
2467 2467 3 1 180 ffff9c80133559c0 syz-executor.4 parked
5048 5048 3 0 180 ffff9c8012bef600 syz-executor.5 parked
2199 2199 3 1 180 ffff9c8012cb6500 syz-executor.2 parked
1930 1930 3 0 180 ffff9c8013435b80 syz-executor.3 parked
1779 1779 3 1 180 ffff9c8012cec1c0 syz-executor.4 parked
1525 1525 3 0 180 ffff9c8012dc6500 syz-executor.0 parked
2137 4017 3 0 1100000 ffff9c80133b2ac0 syz-executor.0 vfork
2137 2137 3 0 11000000 ffff9c8012c08640 syz-executor.0 lwpwait
1508 1508 3 1 180 ffff9c8013355140 syz-executor.2 parked
1426 1426 3 1 180 ffff9c8013fd7080 syz-executor.5 parked
1274 1274 3 1 180 ffff9c8012c86bc0 syz-executor.3 parked
3117 3307 3 1 1100000 ffff9c8012a78040 syz-executor.3 vfork
3117 3117 3 0 11000000 ffff9c8012cd8180 syz-executor.3 lwpwait
2138 2138 3 0 180 ffff9c8012a2fb80 syz-executor.0 parked
1172 1172 3 1 180 ffff9c80141bca00 syz-executor.2 parked
1160 1160 3 0 180 ffff9c8012c9d040 syz-executor.3 parked
3327 1163 3 0 1100000 ffff9c80133a8200 syz-executor.3 vfork
3327 3327 3 0 11000000 ffff9c8012cec600 syz-executor.3 lwpwait
1491 1491 3 1 180 ffff9c801407d940 syz-executor.5 parked
2743 2743 3 1 180 ffff9c8012d0e6c0 syz-executor.1 parked
398 398 3 0 180 ffff9c8012d7c040 syz-executor.3 parked
387 387 3 0 180 ffff9c8013355580 syz-executor.2 parked
331 331 3 1 180 ffff9c8013fb9480 syz-executor.3 parked
1239 1502 3 0 180 ffff9c8012cac4c0 syz-fuzzer parked
1239 1501 3 1 180 ffff9c8013435740 syz-fuzzer wait
1239 1076 3 1 180 ffff9c8013eee2c0 syz-fuzzer wait
1239 1206 3 1 180 ffff9c8013e7eb00 syz-fuzzer wait
1239 1382 3 1 180 ffff9c8013e7e6c0 syz-fuzzer parked
1239 1237 3 0 180 ffff9c8013e7e280 syz-fuzzer parked
1239 1082 3 1 180 ffff9c8012b87540 syz-fuzzer wait
1239 929 3 1 180 ffff9c8013dbca40 syz-fuzzer wait
1239 1241 3 1 180 ffff9c8013dbc1c0 syz-fuzzer kqueue
1239 1242 3 0 180 ffff9c8012c6eb80 syz-fuzzer parked
1239 449 3 0 180 ffff9c8013421b40 syz-fuzzer parked
1239 943 3 1 180 ffff9c80133cbb00 syz-fuzzer wait
1239 1081 3 1 180 ffff9c8012a2f740 syz-fuzzer parked
1239 1238 3 0 180 ffff9c80126db480 syz-fuzzer parked
1239 1239 3 1 180 ffff9c8012ad8500 syz-fuzzer parked
1244 1244 3 0 180 ffff9c8012a78480 sshd select
1084 1084 3 0 180 ffff9c801343f340 getty nanoslp
1225 1225 3 0 180 ffff9c80126d7740 getty nanoslp
1106 1106 3 0 180 ffff9c80134905c0 getty nanoslp
1223 1223 3 0 180 ffff9c80126d9340 getty ttyraw
1107 1107 3 0 180 ffff9c80133a8a80 sshd select
958 958 3 1 180 ffff9c8012d19700 powerd kqueue
811 811 3 1 180 ffff9c801343fbc0 syslogd kqueue
606 606 3 0 180 ffff9c8012c4bb40 dhcpcd poll
744 744 3 0 180 ffff9c8012cb6940 dhcpcd poll
748 748 3 0 180 ffff9c8012c2c280 dhcpcd poll
603 603 3 0 180 ffff9c8012c86340 dhcpcd poll
487 487 3 0 180 ffff9c8012d8e900 dhcpcd poll
292 292 3 0 180 ffff9c8012d8e4c0 dhcpcd poll
485 485 3 1 180 ffff9c8012d8e080 dhcpcd poll
1 1 3 1 180 ffff9c80128679c0 init wait
0 5038 3 1 200 ffff9c8012ba29c0 ktrace ktrwait
0 4531 3 0 200 ffff9c801490c500 ktrace ktrwait
0 5841 3 0 200 ffff9c8013396a40 ktrace ktrwait
0 3933 3 1 200 ffff9c8012a788c0 ktrace ktrwait
0 2794 3 1 200 ffff9c8013eeeb40 ktrace ktrwait
0 1331 3 1 200 ffff9c8012d0e280 ktrace ktrwait
0 674 3 0 200 ffff9c80129c0280 physiod physiod
0 196 3 0 200 ffff9c80129c12c0 pooldrain pooldrain
0 195 3 0 200 ffff9c80129c0b00 ioflush syncer
0 194 3 1 200 ffff9c80129c06c0 pgdaemon pgdaemon
0 167 3 1 200 ffff9c8012990680 usb7 usbevt
0 172 3 1 200 ffff9c8012990240 usb6 usbevt
0 170 3 0 200 ffff9c801293ba80 usb5 usbevt
0 168 3 1 200 ffff9c801293b640 usb4 usbevt
0 166 3 0 200 ffff9c801293b200 usb3 usbevt
0 165 3 1 200 ffff9c80128d1a40 usb2 usbevt
0 31 3 0 200 ffff9c80128d1600 usb1 usbevt
0 63 3 0 200 ffff9c80128d11c0 usb0 usbevt
0 126 3 1 200 ffff9c801287fa00 usbtask-dr usbtsk
0 125 3 1 200 ffff9c801287f5c0 usbtask-hc usbtsk
0 124 3 0 200 ffff9c8010d66b00 swwreboot swwreboot
0 123 3 1 200 ffff9c801287f180 npfgc0 npfgcw
0 122 3 1 200 ffff9c8012867580 rt_free rt_free
0 121 3 0 200 ffff9c8012867140 unpgc unpgc
0 120 3 0 200 ffff9c801270a980 key_timehandler key_timehandler
0 119 3 1 200 ffff9c801270a540 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff9c801270a100 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff9c80126fd940 nd6_timer nd6_timer
0 116 3 1 200 ffff9c80126fd500 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff9c80126fd0c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff9c80126ed900 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff9c80126ed4c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff9c80126ed080 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff9c80126db8c0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff9c80126d9780 rt_timer rt_timer
0 109 3 0 200 ffff9c80126db040 vmem_rehash vmem_rehash
0 100 3 0 200 ffff9c80126d7300 entbutler entropy
0 99 3 0 200 ffff9c80120bcb40 viomb balloon
0 98 3 1 200 ffff9c80120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff9c80120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff9c8010d666c0 scsibus0 sccomp
0 29 3 0 200 ffff9c8010d66280 pms0 pmsreset
0 28 3 1 200 ffff9c8010cacac0 xcall/1 xcall
0 27 1 1 200 ffff9c8010cac680 softser/1
0 26 1 1 200 ffff9c8010cac240 softclk/1
0 25 1 1 200 ffff9c8010ca8a80 softbio/1
0 24 1 1 200 ffff9c8010ca8640 softnet/1
0 23 1 1 201 ffff9c8010ca8200 idle/1
0 22 3 0 200 ffff9c800fb55a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff9c800fb55600 lnxubdwq lnxubdwq
0 20 3 0 200 ffff9c800fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffff9c800fb54a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffff9c800fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffff9c800fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff9c800fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffff9c800fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff9c800fb4d140 pmfevent pmfevent
0 13 3 0 200 ffff9c800fb4a980 sopendfree sopendfr
0 12 3 0 200 ffff9c800fb4a540 ifwdog ifwdog
0 11 3 0 200 ffff9c800fb4a100 iflnkst iflnkst
0 10 3 0 200 ffff9c800fb3b940 nfssilly nfssilly
0 9 3 0 200 ffff9c800fb3b500 pooldisp pooldisp
0 8 3 1 200 ffff9c800fb3b0c0 modunload mod_unld
0 7 3 0 200 ffff9c800fb32900 xcall/0 xcall
0 6 1 0 200 ffff9c800fb324c0 softser/0
0 5 1 0 200 ffff9c800fb32080 softclk/0
0 4 1 0 200 ffff9c800fb308c0 softbio/0
0 3 1 0 200 ffff9c800fb30480 softnet/0
0 2 1 0 201 ffff9c800fb30040 idle/0
0 0 2 1 240 ffffffff8334ec00 swapper
[Locks tracked through LWPs]

****** LWP 4423.6336 (syz-executor.1) @ 0xffff9c80149665c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffff9c80147efa00
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9c80149665c0 last held: 0xffff9c80149665c0
last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffff9c80149665c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffff9c80143b7780
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9c80149665c0 last held: 0xffff9c80149665c0
last locked* : netbsd:genfs_lock+0x160
unlocked : 0
owner/count : 0xffff9c80149665c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 6208.6208 (syz-executor.0) @ 0xffff9c80126d7b80, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x40 sys/kern/subr_kcov.c:461)
lock address : ffff9c8014690340
type : sleep/adaptive
initialized : netbsd:kcov_open+0x40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c80126d7b80 last held: 0xffff9c80126d7b80
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_obj_init+0x9a sys/uvm/uvm_object.c:70)
lock address : ffff9c80146907c0
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0x9a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c80126d7b80 last held: 0xffff9c80126d7b80
last locked* : netbsd:uvm_fault_internal+0x1e72
unlocked : netbsd:uvm_fault_lower_enter+0x579
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3905.5848 (syz-executor.5) @ 0xffff9c80129c1b40, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x1230 sys/kern/kern_fork.c:377)
lock address : ffff9c801454b100
type : sleep/adaptive
initialized : netbsd:fork1+0x1230
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9c80129c1b40 last held: 0xffff9c80129c1b40
last locked* : netbsd:lwp_wait+0x30c
unlocked : netbsd:lwp_free+0x400
owner field : 0xffff9c80129c1b40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 744.744 (dhcpcd) @ 0xffff9c8012cb6940, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c8012cb6940 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 748.748 (dhcpcd) @ 0xffff9c8012c2c280, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c8012c2c280 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffff9c8012d8e4c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c8012d8e4c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffff9c8012d8e080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9c8012d8e080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff9c800fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c800fb4a100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff9c800fb32080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c800fb32080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8334ec00, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff8334ec00 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:sleeptab_init+0x85 sys/kern/kern_sleepq.c:87)
lock address : netbsd:sleepq_locks+0x1ac0
type : spin
initialized : netbsd:sleeptab_init+0x85
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c80126d7b80 last held: 0xffff9c8012c08640
last locked* : netbsd:cv_timedwait+0x110
unlocked : netbsd:sleepq_unsleep+0xbb
owner field : 0x0000000000000700 wait/spin: 0/1

* Lock 1 (initialized at netbsd:com_attach_subr+0x12e sys/dev/ic/com.c:565)
lock address : ffff9c8010c03d20
type : spin
initialized : netbsd:com_attach_subr+0x12e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9c80126d7b80 last held: 0xffff9c8012cd8180
last locked* : netbsd:comintr+0xa3
unlocked : netbsd:comintr+0xe91
owner field : 0x0000000000000800 wait/spin: 0/1

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9c80129c1b40 last held: 0xffff9c80129c1b40
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff9c8000017180 0041 00000000 0x0 0x0
0xffff9c8000017200 0041 00000000 0x0 0x0
0xffff9c8000017280 0041 00000000 0x0 0x0
0xffff9c8000017300 0041 00000000 0x0 0x0
0xffff9c8000017380 0041 00000000 0x0 0x0
0xffff9c8000017400 0041 00000000 0x0 0x0
0xffff9c8000017480 0041 00000000 0x0 0x0
0xffff9c8000017500 0041 00000000 0x0 0x0
0xffff9c8000017580 0041 00000000 0x0 0x0
0xffff9c8000017600 0041 00000000 0x0 0x0
0xffff9c8000017680 0041 00000000 0x0 0x0
0xffff9c8000017700 0041 00000000 0x0 0x0
0xffff9c8000017780 0041 00000000 0x0 0x0
0xffff9c8000017800 0041 00000000 0x0 0x0
0xffff9c8000017880 0041 00000000 0x0 0x0
0xffff9c8000017900 0041 00000000 0x0 0x0
0xffff9c8000017980 0041 00000000 0x0 0x0
0xffff9c8000017a00 0041 00000000 0x0 0x0
0xffff9c8000017a80 0041 00000000 0x0 0x0
0xffff9c8000017b00 0041 00000000 0x0 0x0
0xffff9c8000017b80 0041 00000000 0x0 0x0
0xffff9c8000017c00 0041 00000000 0x0 0x0
0xffff9c8000017c80 0041 00000000 0x0 0x0
0xffff9c8000017d00 0041 00000000 0x0 0x0
0xffff9c8000017d80 0041 00000000 0x0 0x0
0xffff9c8000017e00 0041 00000000 0x0 0x0
0xffff9c8000017e80 0041 00000000 0x0 0x0
0xffff9c8000017f00 0041 00000000 0x0 0x0
0xffff9c8000017f80 0041 00000000 0x0 0x0
0xffff9c8000018000 0041 00000000 0x0 0x0
0xffff9c8000018080 0041 00000000 0x0 0x0
0xffff9c8000018100 0041 00000000 0x0 0x0
0xffff9c8000018180 0041 00000000 0x0 0x0
0xffff9c8000018200 0041 00000000 0x0 0x0
0xffff9c8000018280 0041 00000000 0x0 0x0
0xffff9c8000018300 0041 00000000 0x0 0x0
0xffff9c8000018380 0041 00000000 0x0 0x0
0xffff9c8000018400 0041 00000000 0x0 0x0
0xffff9c8000018480 0041 00000000 0x0 0x0
0xffff9c8000018500 0041 00000000 0x0 0x0
0xffff9c8000018580 0041 00000000 0x0 0x0
0xffff9c8000018600 0041 00000000 0x0 0x0
0xffff9c8000018680 0041 00000000 0x0 0x0
0xffff9c8000018700 0041 00000000 0x0 0x0
0xffff9c8000018780 0041 00000000 0x0 0x0
0xffff9c8000018800 0041 00000000 0x0 0x0
0xffff9c8000018880 0041 00000000 0x0 0x0
0xffff9c8000018900 0041 00000000 0x0 0x0
0xffff9c8000018980 0041 00000000 0x0 0x0
0xffff9c8000018a00 0041 00000000 0x0 0x0
0xffff9c8000018a80 0041 00000000 0x0 0x0
0xffff9c8000018b00 0041 00000000 0x0 0x0
0xffff9c8000018b80 0041 00000000 0x0 0x0
0xffff9c8000018c00 0041 00000000 0x0 0x0
0xffff9c8000018c80 0041 00000000 0x0 0x0
0xffff9c8000018d00 0041 00000000 0x0 0x0
0xffff9c8000018d80 0041 00000000 0x0 0x0
0xffff9c8000018e00 0041 00000000 0x0 0x0
0xffff9c8000018e80 0041 00000000 0x0 0x0
0xffff9c8000018f00 0041 00000000 0x0 0x0
0xffff9c8000018f80 0041 00000000 0x0 0x0
0xffff9c8000019000 0041 00000000 0x0 0x0
0xffff9c8000019080 0041 00000000 0x0 0x0
0xffff9c8000019100 0041 00000000 0x0 0x0
0xffff9c8000019180 0041 00000000 0x0 0x0
0xffff9c8000019200 0041 00000000 0x0 0x0
0xffff9c8000019280 0041 00000000 0x0 0x0
0xffff9c8000019300 0041 00000000 0x0 0x0
0xffff9c8000019380 0041 00000000 0x0 0x0
0xffff9c8000019400 0041 00000000 0x0 0x0
0xffff9c8000019480 0041 00000000 0x0 0x0
0xffff9c8000019500 0041 00000000 0x0 0x0
0xffff9c8000019580 0041 00000000 0x0 0x0
0xffff9c8000019600 0041 00000000 0x0 0x0
0xffff9c8000019680 0041 00000000 0x0 0x0
0xffff9c8000019700 0041 00000000 0x0 0x0
0xffff9c8000019780 0041 00000000 0x0 0x0
0xffff9c8000019800 0041 00000000 0x0 0x0
0xffff9c8000019880 0041 00000000 0x0 0x0
0xffff9c8000019900 0041 00000000 0x0 0x0
0xffff9c8000019980 0041 00000000 0x0 0x0
0xffff9c8000019a00 0041 00000000 0x0 0x0
0xffff9c8000019a80 0041 00000000 0x0 0x0
0xffff9c8000019b00 0041 00000000 0x0 0x0
0xffff9c8000019b80 0041 00000000 0x0 0x0
0xffff9c8000019c00 0041 00000000 0x0 0x0
0xffff9c8000019c80 0041 00000000 0x0 0x0
0xffff9c8000019d00 0041 00000000 0x0 0x0
0xffff9c8000019d80 0041 00000000 0x0 0x0
0xffff9c8000019e00 0041 00000000 0x0 0x0
0xffff9c8000019e80 0041 00000000 0x0 0x0
0xffff9c8000019f00 0041 00000000 0x0 0x0
0xffff9c8000019f80 0041 00000000 0x0 0x0
0xffff9c800001a000 0041 00000000 0x0 0x0
0xffff9c800001a080 0041 00000000 0x0 0x0
0xffff9c800001a100 0041 00000000 0x0 0x0
0xffff9c800001a180 0041 00000000 0x0 0x0
0xffff9c800001a200 0041 00000000 0x0 0x0
0xffff9c800001a280 0041 00000000 0x0 0x0
0xffff9c800001a300 0041 00000000 0x0 0x0
0xffff9c800001a380 0041 00000000 0x0 0x0
0xffff9c800001a400 0041 00000000 0x0 0x0
0xffff9c800001a480 0041 00000000 0x0 0x0
0xffff9c800001a500 0041 00000000 0x0 0x0
0xffff9c800001a580 0041 00000000 0x0 0x0
0xffff9c800001a600 0041 00000000 0x0 0x0
0xffff9c800001a680 0041 00000000 0x0 0x0
0xffff9c800001a700 0041 00000000 0x0 0x0
0xffff9c800001a780 0041 00000000 0x0 0x0
0xffff9c800001a800 0041 00000000 0x0 0x0
0xffff9c800001a880 0041 00000000 0x0 0x0
0xffff9c800001a900 0041 00000000 0x0 0x0
0xffff9c800001a980 0041 00000000 0x0 0x0
0xffff9c800001aa00 0041 00000000 0x0 0x0
0xffff9c800001aa80 0041 00000000 0x0 0x0
0xffff9c800001ab00 0041 00000000 0x0 0x0
0xffff9c800001ab80 0041 00000000 0x0 0x0
0xffff9c800001ac00 0041 00000000 0x0 0x0
0xffff9c800001ac80 0041 00000000 0x0 0x0
0xffff9c800001ad00 0041 00000000 0x0 0x0
0xffff9c800001ad80 0041 00000000 0x0 0x0
0xffff9c800001ae00 0041 00000000 0x0 0x0
0xffff9c800001ae80 0041 00000000 0x0 0x0
0xffff9c800001af00 0041 00000000 0x0 0x0
0xffff9c800001af80 0041 00000000 0x0 0x0
0xffff9c800001b000 0041 00000000 0x0 0x0
0xffff9c800001b080 0041 00000000 0x0 0x0
0xffff9c800001b100 0041 00000000 0x0 0x0
0xffff9c800001b180 0041 00000000 0x0 0x0
0xffff9c800001b200 0041 00000000 0x0 0x0
0xffff9c800001b280 0041 00000000 0x0 0x0
0xffff9c800001b300 0041 00000000 0x0 0x0
0xffff9c800001b380 0041 00000000 0x0 0x0
0xffff9c800001b400 0041 00000000 0x0 0x0
0xffff9c800001b480 0041 00000000 0x0 0x0
0xffff9c800001b500 0041 00000000 0x0 0x0
0xffff9c800001b580 0041 00000000 0x0 0x0
0xffff9c800001b600 0041 00000000 0x0 0x0
0xffff9c800001b680 0041 00000000 0x0 0x0
0xffff9c800001b700 0041 00000000 0x0 0x0
0xffff9c800001b780 0041 00000000 0x0 0x0
0xffff9c800001b800 0041 00000000 0x0 0x0
0xffff9c800001b880 0041 00000000 0x0 0x0
0xffff9c800001b900 0041 00000000 0x0 0x0
0xffff9c800001b980 0041 00000000 0x0 0x0
0xffff9c800001ba00 0041 00000000 0x0 0x0
0xffff9c800001ba80 0041 00000000 0x0 0x0
0xffff9c800001bb00 0001 00000000 0x0 0x0
0xffff9c800001bb80 0001 00000000 0x0 0x0
0xffff9c800001bc00 0001 00000000 0x0 0x0
0xffff9c800001bc80 0001 00000000 0x0 0x0
0xffff9c800001bd00 0001 00000000 0x0 0x0
0xffff9c800001bd80 0001 00000000 0x0 0x0
0xffff9c800001be00 0001 00000000 0x0 0x0
0xffff9c800001be80 0001 00000000 0x0 0x0
0xffff9c800001bf00 0001 00000000 0x0 0x0
0xffff9c800001bf80 0001 00000000 0x0 0x0
0xffff9c800001c000 0001 00000000 0x0 0x0
0xffff9c800001c080 0001 00000000 0x0 0x0
0xffff9c800001c100 0001 00000000 0x0 0x0
0xffff9c800001c180 0001 00000000 0x0 0x0
0xffff9c800001c200 0001 00000000 0x0 0x0
0xffff9c800001c280 0001 00000000 0x0 0x0
0xffff9c800001c300 0001 00000000 0x0 0x0
0xffff9c800001c380 0001 00000000 0x0 0x0
0xffff9c800001c400 0001 00000000 0x0 0x0
0xffff9c800001c480 0001 00000000 0x0 0x0
0xffff9c800001c500 0001 00000000 0x0 0x0
0xffff9c800001c580 0001 00000000 0x0 0x0
0xffff9c800001c600 0001 00000000 0x0 0x0
0xffff9c800001c680 0001 00000000 0x0 0x0
0xffff9c800001c700 0001 00000000 0x0 0x0
0xffff9c800001c780 0001 00000000 0x0 0x0
0xffff9c800001c800 0001 00000000 0x0 0x0
0xffff9c800001c880 0001 00000000 0x0 0x0
0xffff9c800001c900 0001 00000000 0x0 0x0
0xffff9c800001c980 0001 00000000 0x0 0x0
0xffff9c800001ca00 0001 00000000 0x0 0x0
0xffff9c800001ca80 0001 00000000 0x0 0x0
0xffff9c800001cb00 0001 00000000 0x0 0x0
0xffff9c800001cb80 0001 00000000 0x0 0x0
0xffff9c800001cc00 0001 00000000 0x0 0x0
0xffff9c800001cc80 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

Répondre à tous

Répondre à l'auteur

Transférer

0 nouveau message