panic: ufsdirhash_dirtrunc: blocks in use

1 view

Skip to first unread message

syzbot

unread,

Apr 20, 2024, 9:24:32 AMApr 20

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 7202b8032419 libntp: clean up MKREPRO_TIMESTAMP handling
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=108f55f7180000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=d7a7e6f7fbcf3c25ce20
compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/e71ae3db1f61/disk-7202b803.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/504ba52382b5/netbsd-7202b803.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d7a7e6...@syzkaller.appspotmail.com

[ 601.9686252] panic: ufsdirhash_dirtrunc: blocks in use
[ 601.9686252] cpu1: Begin traceback...
[ 601.9886088] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
[ 602.0286076] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1084
[ 602.0786061] ufsdirhash_dirtrunc() at netbsd:ufsdirhash_dirtrunc+0x2f7 sys/ufs/ufs/ufs_dirhash.c:834
[ 602.1286059] ufs_dircompact.constprop.0() at netbsd:ufs_dircompact.constprop.0+0xb33
[ 602.1586125] ufs_mkdir() at netbsd:ufs_mkdir+0xad5 sys/ufs/ufs/ufs_vnops.c:1352
[ 602.1986066] VOP_MKDIR() at netbsd:VOP_MKDIR+0x12c sys/kern/vnode_if.c:1338
[ 602.2286071] do_sys_mkdirat() at netbsd:do_sys_mkdirat+0x377 sys/kern/vfs_syscalls.c:4754
[ 602.2686091] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 602.2686091] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 602.3086117] syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
[ 602.3086117] syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 602.3086117] syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
[ 602.3186064] --- syscall (number 136 via SYS_syscall) ---
[ 602.3286091] netbsd:syscall+0x246:
[ 602.3286091] cpu1: End traceback...
[ 602.3386070] fatal breakpoint trap in supervisor mode
[ 602.3386070] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x282 cr2 0x7dd3f4865000 ilevel 0 rsp 0xffffaf826584d5b0
[ 602.3486073] curlwp 0xffffaf80126d9780 pid 10326.1890 lowest kstack 0xffffaf82658462c0
Stopped in pid 10326.1890 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1084
ufsdirhash_dirtrunc() at netbsd:ufsdirhash_dirtrunc+0x2f7 sys/ufs/ufs/ufs_dirhash.c:834
ufs_dircompact.constprop.0() at netbsd:ufs_dircompact.constprop.0+0xb33
ufs_mkdir() at netbsd:ufs_mkdir+0xad5 sys/ufs/ufs/ufs_vnops.c:1352
VOP_MKDIR() at netbsd:VOP_MKDIR+0x12c sys/kern/vnode_if.c:1338
do_sys_mkdirat() at netbsd:do_sys_mkdirat+0x377 sys/kern/vfs_syscalls.c:4754
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
--- syscall (number 136 via SYS_syscall) ---
netbsd:syscall+0x246:
Panic string: ufsdirhash_dirtrunc: blocks in use
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
2906 2906 2 0 0 ffffaf8014c1fa00 syz-executor.0
3663 > 3663 7 0 40000 ffffaf801343e340 syz-executor.4
10326> 1890 7 1 0 ffffaf80126d9780 syz-executor.3
10326 10326 2 1 10040000 ffffaf8014c1f180 syz-executor.3
7250 7250 3 0 180 ffffaf8012ce7600 syz-executor.5 pipe_rd
15937 15937 2 0 40140 ffffaf801454d040 syz-executor.4
6213 6213 3 0 180 ffffaf8013446040 syz-executor.1 pipe_rd
7218 7218 2 0 0 ffffaf8012d26b80 syz-executor.2
3569 3569 2 0 0 ffffaf8014c15980 syz-executor.0
3794 3794 2 1 140 ffffaf8013f788c0 syz-executor.3
766 766 3 0 180 ffffaf8012c27280 syz-executor.4 parked
886 886 3 0 180 ffffaf8013ef2700 syz-executor.5 parked
774 774 3 0 180 ffffaf801474c1c0 syz-executor.0 parked
14583 14583 3 0 180 ffffaf8013db0600 syz-executor.3 parked
16699 16699 3 0 180 ffffaf8014263600 syz-executor.3 parked
13754 13754 3 1 180 ffffaf8012d26740 syz-executor.2 parked
14472 14472 3 1 180 ffffaf80146aa9c0 syz-executor.2 parked
15957 14308 3 1 11100000 ffffaf80146aa580 syz-executor.2 vfork
15957 15957 3 0 11000000 ffffaf8012d0b280 syz-executor.2 ktrsync
13719 13719 3 0 180 ffffaf8014458700 syz-executor.3 parked
15041 15041 3 1 180 ffffaf8014446280 syz-executor.5 parked
12233 12233 3 0 180 ffffaf80148e3340 syz-executor.5 parked
11860 11860 3 0 180 ffffaf80143f6ac0 syz-executor.0 parked
11332 11332 3 0 180 ffffaf8012d79040 syz-executor.1 parked
10975 10975 3 0 180 ffffaf80141439c0 syz-executor.5 parked
14657 14813 3 0 1100000 ffffaf80140b8540 syz-executor.1 vfork
14657 14657 3 0 11000000 ffffaf8013431b80 syz-executor.1 ktrsync
14282 14282 3 0 180 ffffaf8014376640 syz-executor.2 parked
9606 9606 3 0 180 ffffaf8014bd1900 syz-executor.4 parked
11931 14891 3 0 1100000 ffffaf8014be0500 syz-executor.2 vfork
11931 11931 3 0 11000000 ffffaf801488a280 syz-executor.2 ktrsync
13137 13137 3 1 180 ffffaf80144b1300 syz-executor.4 parked
13520 13520 3 0 180 ffffaf8013431740 syz-executor.5 parked
11669 11669 3 0 180 ffffaf8014376a80 syz-executor.2 parked
14000 14000 3 0 180 ffffaf8012c27b00 syz-executor.1 parked
11053 11053 3 0 180 ffffaf8014b3e480 syz-executor.5 parked
9882 9882 3 0 180 ffffaf8013f5f340 syz-executor.4 parked
12504 12504 3 1 180 ffffaf8012a20740 syz-executor.1 parked
12008 12008 3 1 180 ffffaf80146aa140 syz-executor.1 parked
9980 10122 3 1 11100000 ffffaf8012a72480 syz-executor.1 vfork
9980 9980 3 0 11000000 ffffaf8012c18240 syz-executor.1 ktrsync
9697 9697 3 0 180 ffffaf801345b0c0 syz-executor.5 parked
10064 10064 3 0 180 ffffaf8012cbf100 syz-executor.0 parked
8839 8839 3 1 180 ffffaf8012d798c0 syz-executor.2 parked
9305 9305 3 1 180 ffffaf801489b2c0 syz-executor.5 parked
8076 8076 3 0 180 ffffaf80133559c0 syz-executor.3 parked
8098 8098 3 1 180 ffffaf8014763640 syz-executor.3 parked
9046 9046 3 0 180 ffffaf80133b0240 syz-executor.0 parked
8010 8010 3 1 180 ffffaf8013dd9a80 syz-executor.3 parked
8552 8552 3 0 180 ffffaf8012c968c0 syz-executor.3 parked
5771 5771 3 0 180 ffffaf801464e0c0 syz-executor.1 parked
6250 6250 3 0 180 ffffaf80133ca6c0 syz-executor.1 parked
8889 8889 3 0 180 ffffaf80140b8980 syz-executor.4 parked
8029 8029 3 0 180 ffffaf80146e85c0 syz-executor.4 parked
5993 5993 3 1 180 ffffaf8012cff680 syz-executor.5 parked
5363 5363 3 0 180 ffffaf801343e780 syz-executor.5 parked
5938 5938 3 0 180 ffffaf801341f2c0 syz-executor.4 parked
4349 4349 3 0 180 ffffaf8012c82780 syz-executor.2 parked
4481 4338 3 0 11100000 ffffaf8012dc20c0 syz-executor.2 vfork
4481 4481 3 0 11000000 ffffaf8012be91c0 syz-executor.2 ktrsync
4224 4224 3 0 180 ffffaf80133ca280 syz-executor.0 parked
4066 4240 3 0 1100000 ffffaf80145654c0 syz-executor.0 vfork
4066 4066 3 0 11000000 ffffaf8012a9b080 syz-executor.0 ktrsync
3999 3999 3 1 180 ffffaf801454d8c0 syz-executor.3 parked
5554 5554 3 0 180 ffffaf8012ccc140 syz-executor.5 parked
4385 3882 3 1 1100000 ffffaf80140b8100 syz-executor.3 vfork
4385 4385 3 0 11000000 ffffaf80134514c0 syz-executor.3 ktrsync
3990 3832 3 1 1100000 ffffaf8012cf4200 syz-executor.5 vfork
3990 3990 3 0 11000000 ffffaf8012cffac0 syz-executor.5 ktrsync
6473 6473 3 0 180 ffffaf8012a54bc0 syz-executor.1 parked
3573 3573 3 0 180 ffffaf8012ac9500 syz-executor.1 parked
4443 4443 3 0 180 ffffaf80144e8780 syz-executor.2 parked
2957 2957 3 0 180 ffffaf8012b7e100 syz-executor.4 parked
2961 2806 3 0 1100000 ffffaf8013355140 syz-executor.4 vfork
2961 2961 3 0 11000000 ffffaf8014098940 syz-executor.4 ktrsync
3149 3149 3 1 180 ffffaf8014143140 syz-executor.0 parked
4011 2289 3 1 1100000 ffffaf8012d79480 syz-executor.0 vfork
4011 4011 3 0 11000000 ffffaf8014376200 syz-executor.0 ktrsync
2298 2298 3 1 180 ffffaf80133795c0 syz-executor.4 parked
2405 2405 3 1 180 ffffaf80126d7b80 syz-executor.4 parked
2195 2195 3 0 180 ffffaf8013f78040 syz-executor.2 parked
4785 2190 3 0 1100000 ffffaf8012d17b40 syz-executor.2 vfork
4785 4785 3 0 11000000 ffffaf8012c18680 syz-executor.2 ktrsync
2924 2924 3 0 180 ffffaf8013db0a40 syz-executor.3 parked
4021 4021 3 1 180 ffffaf8014098500 syz-executor.2 parked
1268 1268 3 0 180 ffffaf8012a54780 syz-executor.5 parked
2742 2742 3 0 180 ffffaf8012c05640 syz-executor.1 parked
1176 1176 3 1 180 ffffaf80134468c0 syz-executor.4 parked
3542 3542 3 0 180 ffffaf80141975c0 syz-executor.1 parked
3540 3540 3 0 180 ffffaf8012c05a80 syz-executor.1 parked
3026 3026 3 0 180 ffffaf8012c05200 syz-executor.4 parked
3636 3636 3 0 180 ffffaf8012c96040 syz-executor.0 parked
510 510 3 1 180 ffffaf8012cd5a00 syz-executor.3 parked
2904 2904 3 1 180 ffffaf8012bc05c0 syz-executor.1 parked
399 399 3 1 180 ffffaf801346f140 syz-executor.2 parked
1590 1590 3 0 180 ffffaf8012cbf980 syz-executor.2 parked
1230 6613 3 0 180 ffffaf8012c492c0 syz-fuzzer wait
1230 2279 3 1 180 ffffaf801346f580 syz-fuzzer wait
1230 941 3 0 0 ffffaf8013ef22c0 syz-fuzzer ktrsync
1230 1199 3 0 180 ffffaf8013e4bb00 syz-fuzzer wait
1230 1114 3 1 180 ffffaf8013e4b6c0 syz-fuzzer wait
1230 1241 2 0 0 ffffaf8013e05240 syz-fuzzer
1230 990 3 0 180 ffffaf8013dd9640 syz-fuzzer parked
1230 829 3 0 180 ffffaf8012ac9940 syz-fuzzer parked
1230 1120 3 1 180 ffffaf8013db01c0 syz-fuzzer wait
1230 1243 3 1 180 ffffaf8012c67b80 syz-fuzzer parked
1230 1223 3 1 180 ffffaf8012c67740 syz-fuzzer parked
1230 1244 3 1 180 ffffaf80133a2a80 syz-fuzzer parked
1230 1229 3 1 180 ffffaf80126d9bc0 syz-fuzzer wait
1230 1233 3 0 0 ffffaf80126d9340 syz-fuzzer ktrsync
1230 1230 3 1 180 ffffaf8012a9b900 syz-fuzzer parked
1235 1235 3 0 180 ffffaf8013379a00 sshd select
1260 1260 3 0 180 ffffaf80126d7740 getty nanoslp
1216 1216 3 0 180 ffffaf801346f9c0 getty nanoslp
1224 1224 3 0 180 ffffaf80134995c0 getty nanoslp
1184 1184 3 0 180 ffffaf8013499180 getty ttyraw
952 952 3 0 180 ffffaf80133a2640 sshd select
1023 1023 3 1 180 ffffaf8012d17700 powerd kqueue
700 700 3 1 180 ffffaf801341fb40 syslogd kqueue
746 746 3 0 180 ffffaf80129bf280 dhcpcd poll
745 745 3 1 180 ffffaf8012c18ac0 dhcpcd poll
742 742 3 1 180 ffffaf8012c276c0 dhcpcd poll
599 599 3 1 180 ffffaf8012c82bc0 dhcpcd poll
292 292 3 0 180 ffffaf8012d8d900 dhcpcd poll
485 485 3 0 180 ffffaf8012d8d4c0 dhcpcd poll
291 291 3 1 180 ffffaf8012d8d080 dhcpcd poll
1 1 3 0 180 ffffaf8012873180 init wait
0 14417 5 1 200 ffffaf801488a6c0 (zombie)
0 1447 3 1 200 ffffaf80143f6680 ktrace ktrwait
0 2870 2 1 200 ffffaf8012ac90c0 ktrace
0 2012 3 0 200 ffffaf80148bcb80 ktrace ktrwait
0 13819 3 0 200 ffffaf80147e5240 ktrace ktrwait
0 4579 3 0 200 ffffaf8014763200 ktrace ktrwait
0 5448 3 0 200 ffffaf80133b0680 ktrace ktrwait
0 3406 3 0 200 ffffaf8014446b00 ktrace ktrwait
0 2461 3 1 200 ffffaf8012d26300 ktrace ktrwait
0 2437 3 1 200 ffffaf80143f6240 ktrace ktrwait
0 2194 3 1 200 ffffaf8013446480 ktrace ktrwait
0 1836 3 0 200 ffffaf8012c49b40 ktrace ktrwait
0 4137 3 1 200 ffffaf8012d0bb00 ktrace ktrwait
0 673 3 1 200 ffffaf80129bf6c0 physiod physiod
0 196 3 1 200 ffffaf80129c1700 pooldrain pooldrain
0 195 3 0 200 ffffaf80129c12c0 ioflush syncer
0 194 3 0 200 ffffaf80129bfb00 pgdaemon pgdaemon
0 167 3 0 200 ffffaf8012976ac0 usb7 usbevt
0 172 3 1 200 ffffaf8012976680 usb6 usbevt
0 170 3 0 200 ffffaf8012976240 usb5 usbevt
0 168 3 1 200 ffffaf801291ea80 usb4 usbevt
0 166 3 0 200 ffffaf801291e640 usb3 usbevt
0 165 3 0 200 ffffaf801291e200 usb2 usbevt
0 31 3 0 200 ffffaf80128caa40 usb1 usbevt
0 63 3 1 200 ffffaf80128ca600 usb0 usbevt
0 126 3 1 200 ffffaf80128ca1c0 usbtask-dr usbtsk
0 125 3 1 200 ffffaf8012873a00 usbtask-hc usbtsk
0 124 3 0 200 ffffaf8010d66b00 swwreboot swwreboot
0 123 3 0 200 ffffaf80128735c0 npfgc0 npfgcw
0 122 3 1 200 ffffaf80128699c0 rt_free rt_free
0 121 3 0 200 ffffaf8012869580 unpgc unpgc
0 120 3 0 200 ffffaf8012869140 key_timehandler key_timehandler
0 119 3 1 200 ffffaf8012707980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffaf8012707540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffaf8012707100 nd6_timer nd6_timer
0 116 3 1 200 ffffaf80126fe940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffaf80126fe500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffaf80126fe0c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffaf80126f1900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffaf80126f14c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffaf80126f1080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffaf80126da040 rt_timer rt_timer
0 109 3 0 200 ffffaf80126da8c0 vmem_rehash vmem_rehash
0 100 3 0 200 ffffaf80126d7300 entbutler entropy
0 99 3 0 200 ffffaf80120bcb40 viomb balloon
0 98 3 1 200 ffffaf80120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffaf80120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffaf8010d666c0 scsibus0 sccomp
0 29 3 0 200 ffffaf8010d66280 pms0 pmsreset
0 28 3 1 200 ffffaf8010cacac0 xcall/1 xcall
0 27 1 1 200 ffffaf8010cac680 softser/1
0 26 1 1 200 ffffaf8010cac240 softclk/1
0 25 1 1 200 ffffaf8010ca8a80 softbio/1
0 24 1 1 200 ffffaf8010ca8640 softnet/1
0 23 1 1 201 ffffaf8010ca8200 idle/1
0 22 3 0 200 ffffaf800fb55a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffaf800fb55600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffaf800fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffaf800fb54a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffaf800fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffaf800fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffaf800fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffffaf800fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffaf800fb4d140 pmfevent pmfevent
0 13 3 0 200 ffffaf800fb4a980 sopendfree sopendfr
0 12 3 0 200 ffffaf800fb4a540 ifwdog ifwdog
0 11 3 0 200 ffffaf800fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffaf800fb3b940 nfssilly nfssilly
0 9 3 0 200 ffffaf800fb3b500 pooldisp pooldisp
0 8 3 1 200 ffffaf800fb3b0c0 modunload mod_unld
0 7 3 0 200 ffffaf800fb32900 xcall/0 xcall
0 6 1 0 200 ffffaf800fb324c0 softser/0
0 5 1 0 200 ffffaf800fb32080 softclk/0
0 4 1 0 200 ffffaf800fb308c0 softbio/0
0 3 1 0 200 ffffaf800fb30480 softnet/0
0 2 1 0 201 ffffaf800fb30040 idle/0
0 0 3 0 200 ffffffff83349640 swapper uvm
[Locks tracked through LWPs]

****** LWP 2906.2906 (syz-executor.0) @ 0xffffaf8014c1fa00, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffaf8014982d00
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8014c1fa00 last held: 0xffffaf8014c1fa00
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:amap_copy+0x4dc
owner/count : 0xffffaf8014c1fa00 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3663.3663 (syz-executor.4) @ 0xffffaf801343e340, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x112 sys/uvm/uvm_amap.c:270)
lock address : ffffaf8014ec5b80
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x112
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf801343e340 last held: 0xffffaf801343e340
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:uvm_fault_upper_enter+0x366
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffaf80133c3580
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf801343e340 last held: 0xffffaf801343e340
last locked* : netbsd:pmap_enter_ma+0x386
unlocked : netbsd:pmap_enter_ma+0xe14
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0x9f sys/arch/x86/x86/pmap.c:2873)
lock address : ffffaf80133c3588
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x9f
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf801343e340 last held: 000000000000000000
last locked : netbsd:pmap_enter_ma+0x13d4
unlocked* : netbsd:pmap_enter_ma+0x14e2
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 10326.1890 (syz-executor.3) @ 0xffffaf80126d9780, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffaf8014eeaf40
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80126d9780 last held: 0xffffaf80126d9780
last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffffaf80126d9780 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffaf8014f88ec0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80126d9780 last held: 0xffffaf80126d9780
last locked* : netbsd:genfs_lock+0x160
unlocked : 0
owner/count : 0xffffaf80126d9780 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:ufsdirhash_build+0x8d1 sys/ufs/ufs/ufs_dirhash.c:196)
lock address : ffffaf80147827a0
type : sleep/adaptive
initialized : netbsd:ufsdirhash_build+0x8d1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80126d9780 last held: 0xffffaf80126d9780
last locked* : netbsd:ufsdirhash_dirtrunc+0x6a
unlocked : netbsd:ufsdirhash_lookup+0xa95
owner field : 0xffffaf80126d9780 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 7250.7250 (syz-executor.5) @ 0xffffaf8012ce7600, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x40 sys/kern/subr_kcov.c:461)
lock address : ffffaf8014ed54c0
type : sleep/adaptive
initialized : netbsd:kcov_open+0x40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012ce7600 last held: 0xffffaf8012ce7600
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_obj_init+0x9a sys/uvm/uvm_object.c:70)
lock address : ffffaf8014cf8a00
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0x9a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012ce7600 last held: 0xffffaf8012ce7600
last locked* : netbsd:uvm_fault_internal+0x1e72
unlocked : netbsd:uvm_fault_lower_enter+0x579
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 6213.6213 (syz-executor.1) @ 0xffffaf8013446040, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:filedesc_ctor+0x37 sys/kern/kern_descrip.c:1355)
lock address : ffffaf80141572c0
type : sleep/adaptive
initialized : netbsd:filedesc_ctor+0x37
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8013446040 last held: 0xffffaf8013446040
last locked* : netbsd:fd_alloc+0xa3
unlocked : netbsd:fd_alloc+0x6d2
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 7218.7218 (syz-executor.2) @ 0xffffaf8012d26b80, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x365 sys/kern/kern_fork.c:366)
lock address : ffffaf8013f19bd0
type : sleep/adaptive
initialized : netbsd:fork1+0x365
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffaf8012d26b80 last held: 0xffffaf8012d26b80
last locked* : netbsd:exit1+0x2f2
unlocked : netbsd:execve_runproc+0x2211
owner/count : 0xffffaf8012d26b80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_km_bootstrap+0x13e sys/uvm/uvm_km.c:294)
lock address : netbsd:kernel_map_store+0x18
type : sleep/adaptive
initialized : netbsd:uvm_km_bootstrap+0x13e
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012d26b80 last held: 000000000000000000
last locked : netbsd:uvm_map_pageable+0xb1f
unlocked* : netbsd:uvm_map_pageable+0xb40
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3569.3569 (syz-executor.0) @ 0xffffaf8014c15980, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffaf8014d60340
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8014c15980 last held: 0xffffaf8014c15980
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:uvm_fault_upper_enter+0x366
owner/count : 0xffffaf8014c15980 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 13754.13754 (syz-executor.2) @ 0xffffaf8012d26740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf8012d26740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 12504.12504 (syz-executor.1) @ 0xffffaf8012a20740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf8012a20740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffaf8012c18ac0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf8012c18ac0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffaf8012c276c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf8012c276c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffaf8012d8d4c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf8012d8d4c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffaf8012d8d080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf8012d8d080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffaf8010cac240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf8010cac240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffaf800fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf800fb4a100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83349640, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff83349640 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffaf80126d9780 last held: 0xffffaf80126d9780
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffaf8000017180 0041 00000000 0x0 0x0
0xffffaf8000017200 0041 00000000 0x0 0x0
0xffffaf8000017280 0041 00000000 0x0 0x0
0xffffaf8000017300 0041 00000000 0x0 0x0
0xffffaf8000017380 0041 00000000 0x0 0x0
0xffffaf8000017400 0041 00000000 0x0 0x0
0xffffaf8000017480 0041 00000000 0x0 0x0
0xffffaf8000017500 0041 00000000 0x0 0x0
0xffffaf8000017580 0041 00000000 0x0 0x0
0xffffaf8000017600 0041 00000000 0x0 0x0
0xffffaf8000017680 0041 00000000 0x0 0x0
0xffffaf8000017700 0041 00000000 0x0 0x0
0xffffaf8000017780 0041 00000000 0x0 0x0
0xffffaf8000017800 0041 00000000 0x0 0x0
0xffffaf8000017880 0041 00000000 0x0 0x0
0xffffaf8000017900 0041 00000000 0x0 0x0
0xffffaf8000017980 0041 00000000 0x0 0x0
0xffffaf8000017a00 0041 00000000 0x0 0x0
0xffffaf8000017a80 0041 00000000 0x0 0x0
0xffffaf8000017b00 0041 00000000 0x0 0x0
0xffffaf8000017b80 0041 00000000 0x0 0x0
0xffffaf8000017c00 0041 00000000 0x0 0x0
0xffffaf8000017c80 0041 00000000 0x0 0x0
0xffffaf8000017d00 0041 00000000 0x0 0x0
0xffffaf8000017d80 0041 00000000 0x0 0x0
0xffffaf8000017e00 0041 00000000 0x0 0x0
0xffffaf8000017e80 0041 00000000 0x0 0x0
0xffffaf8000017f00 0041 00000000 0x0 0x0
0xffffaf8000017f80 0041 00000000 0x0 0x0
0xffffaf8000018000 0041 00000000 0x0 0x0
0xffffaf8000018080 0041 00000000 0x0 0x0
0xffffaf8000018100 0041 00000000 0x0 0x0
0xffffaf8000018180 0041 00000000 0x0 0x0
0xffffaf8000018200 0041 00000000 0x0 0x0
0xffffaf8000018280 0041 00000000 0x0 0x0
0xffffaf8000018300 0041 00000000 0x0 0x0
0xffffaf8000018380 0041 00000000 0x0 0x0
0xffffaf8000018400 0041 00000000 0x0 0x0
0xffffaf8000018480 0041 00000000 0x0 0x0
0xffffaf8000018500 0041 00000000 0x0 0x0
0xffffaf8000018580 0041 00000000 0x0 0x0
0xffffaf8000018600 0041 00000000 0x0 0x0
0xffffaf8000018680 0041 00000000 0x0 0x0
0xffffaf8000018700 0041 00000000 0x0 0x0
0xffffaf8000018780 0041 00000000 0x0 0x0
0xffffaf8000018800 0041 00000000 0x0 0x0
0xffffaf8000018880 0041 00000000 0x0 0x0
0xffffaf8000018900 0041 00000000 0x0 0x0
0xffffaf8000018980 0041 00000000 0x0 0x0
0xffffaf8000018a00 0041 00000000 0x0 0x0
0xffffaf8000018a80 0041 00000000 0x0 0x0
0xffffaf8000018b00 0041 00000000 0x0 0x0
0xffffaf8000018b80 0041 00000000 0x0 0x0
0xffffaf8000018c00 0041 00000000 0x0 0x0
0xffffaf8000018c80 0041 00000000 0x0 0x0
0xffffaf8000018d00 0041 00000000 0x0 0x0
0xffffaf8000018d80 0041 00000000 0x0 0x0
0xffffaf8000018e00 0041 00000000 0x0 0x0
0xffffaf8000018e80 0041 00000000 0x0 0x0
0xffffaf8000018f00 0041 00000000 0x0 0x0
0xffffaf8000018f80 0041 00000000 0x0 0x0
0xffffaf8000019000 0041 00000000 0x0 0x0
0xffffaf8000019080 0041 00000000 0x0 0x0
0xffffaf8000019100 0041 00000000 0x0 0x0
0xffffaf8000019180 0041 00000000 0x0 0x0
0xffffaf8000019200 0041 00000000 0x0 0x0
0xffffaf8000019280 0041 00000000 0x0 0x0
0xffffaf8000019300 0041 00000000 0x0 0x0
0xffffaf8000019380 0041 00000000 0x0 0x0
0xffffaf8000019400 0041 00000000 0x0 0x0
0xffffaf8000019480 0041 00000000 0x0 0x0
0xffffaf8000019500 0041 00000000 0x0 0x0
0xffffaf8000019580 0041 00000000 0x0 0x0
0xffffaf8000019600 0041 00000000 0x0 0x0
0xffffaf8000019680 0041 00000000 0x0 0x0
0xffffaf8000019700 0041 00000000 0x0 0x0
0xffffaf8000019780 0041 00000000 0x0 0x0
0xffffaf8000019800 0041 00000000 0x0 0x0
0xffffaf8000019880 0041 00000000 0x0 0x0
0xffffaf8000019900 0041 00000000 0x0 0x0
0xffffaf8000019980 0041 00000000 0x0 0x0
0xffffaf8000019a00 0041 00000000 0x0 0x0
0xffffaf8000019a80 0041 00000000 0x0 0x0
0xffffaf8000019b00 0041 00000000 0x0 0x0
0xffffaf8000019b80 0041 00000000 0x0 0x0
0xffffaf8000019c00 0041 00000000 0x0 0x0
0xffffaf8000019c80 0041 00000000 0x0 0x0
0xffffaf8000019d00 0041 00000000 0x0 0x0
0xffffaf8000019d80 0041 00000000 0x0 0x0
0xffffaf8000019e00 0041 00000000 0x0 0x0
0xffffaf8000019e80 0041 00000000 0x0 0x0
0xffffaf8000019f00 0041 00000000 0x0 0x0
0xffffaf8000019f80 0041 00000000 0x0 0x0
0xffffaf800001a000 0041 00000000 0x0 0x0
0xffffaf800001a080 0041 00000000 0x0 0x0
0xffffaf800001a100 0041 00000000 0x0 0x0
0xffffaf800001a180 0041 00000000 0x0 0x0
0xffffaf800001a200 0041 00000000 0x0 0x0
0xffffaf800001a280 0041 00000000 0x0 0x0
0xffffaf800001a300 0041 00000000 0x0 0x0
0xffffaf800001a380 0041 00000000 0x0 0x0
0xffffaf800001a400 0041 00000000 0x0 0x0
0xffffaf800001a480 0041 00000000 0x0 0x0
0xffffaf800001a500 0041 00000000 0x0 0x0
0xffffaf800001a580 0041 00000000 0x0 0x0
0xffffaf800001a600 0041 00000000 0x0 0x0
0xffffaf800001a680 0041 00000000 0x0 0x0
0xffffaf800001a700 0041 00000000 0x0 0x0
0xffffaf800001a780 0041 00000000 0x0 0x0
0xffffaf800001a800 0041 00000000 0x0 0x0
0xffffaf800001a880 0041 00000000 0x0 0x0
0xffffaf800001a900 0041 00000000 0x0 0x0
0xffffaf800001a980 0041 00000000 0x0 0x0
0xffffaf800001aa00 0041 00000000 0x0 0x0
0xffffaf800001aa80 0041 00000000 0x0 0x0
0xffffaf800001ab00 0041 00000000 0x0 0x0
0xffffaf800001ab80 0041 00000000 0x0 0x0
0xffffaf800001ac00 0041 00000000 0x0 0x0
0xffffaf800001ac80 0041 00000000 0x0 0x0
0xffffaf800001ad00 0041 00000000 0x0 0x0
0xffffaf800001ad80 0041 00000000 0x0 0x0
0xffffaf800001ae00 0041 00000000 0x0 0x0
0xffffaf800001ae80 0041 00000000 0x0 0x0
0xffffaf800001af00 0041 00000000 0x0 0x0
0xffffaf800001af80 0041 00000000 0x0 0x0
0xffffaf800001b000 0041 00000000 0x0 0x0
0xffffaf800001b080 0041 00000000 0x0 0x0
0xffffaf800001b100 0041 00000000 0x0 0x0
0xffffaf800001b180 0041 00000000 0x0 0x0
0xffffaf800001b200 0041 00000000 0x0 0x0
0xffffaf800001b280 0041 00000000 0x0 0x0
0xffffaf800001b300 0041 00000000 0x0 0x0
0xffffaf800001b380 0041 00000000 0x0 0x0
0xffffaf800001b400 0041 00000000 0x0 0x0
0xffffaf800001b480 0041 00000000 0x0 0x0
0xffffaf800001b500 0041 00000000 0x0 0x0
0xffffaf800001b580 0041 00000000 0x0 0x0
0xffffaf800001b600 0041 00000000 0x0 0x0
0xffffaf800001b680 0041 00000000 0x0 0x0
0xffffaf800001b700 0041 00000000 0x0 0x0
0xffffaf800001b780 0041 00000000 0x0 0x0
0xffffaf800001b800 0041 00000000 0x0 0x0
0xffffaf800001b880 0041 00000000 0x0 0x0
0xffffaf800001b900 0041 00000000 0x0 0x0
0xffffaf800001b980 0041 00000000 0x0 0x0
0xffffaf800001ba00 0041 00000000 0x0 0x0
0xffffaf800001ba80 0041 00000000 0x0 0x0
0xffffaf800001bb00 0041 00000000 0x0 0x0
0xffffaf800001bb80 0001 00000000 0x0 0x0
0xffffaf800001bc00 0001 00000000 0x0 0x0
0xffffaf800001bc80 0001 00000000 0x0 0x0
0xffffaf800001bd00 0001 00000000 0x0 0x0
0xffffaf800001bd80 0001 00000000 0x0 0x0
0xffffaf800001be00 0001 00000000 0x0 0x0
0xffffaf800001be80 0001 00000000 0x0 0x0
0xffffaf800001bf00 0001 00000000 0x0 0x0
0xffffaf800001bf80 0001 00000000 0x0 0x0
0xffffaf800001c000 0001 00000000 0x0 0x0
0xffffaf800001c080 0001 00000000 0x0 0x0
0xffffaf800001c100 0001 00000000 0x0 0x0
0xffffaf800001c180 0001 00000000 0x0 0x0
0xffffaf800001c200 0001 00000000 0x0 0x0
0xffffaf800001c280 0001 00000000 0x0 0x0
0xffffaf800001c300 0001 00000000 0x0 0x0
0xffffaf800001c380 0001 00000000 0x0 0x0
0xffffaf800001c400 0001 00000000 0x0 0x0
0xffffaf800001c480 0001 00000000 0x0 0x0
0xffffaf800001c500 0001 00000000 0x0 0x0
0xffffaf800001c580 0001 00000000 0x0 0x0
0xffffaf800001c600 0001 00000000 0x0 0x0
0xffffaf800001c680 0001 00000000 0x0 0x0
0xffffaf800001c700 0001 00000000 0x0 0x0
0xffffaf800001c780 0001 00000000 0x0 0x0
0xffffaf800001c800 0001 00000000 0x0 0x0
0xffffaf800001c880 0001 00000000 0x0 0x0
0xffffaf800001c900 0001 00000000 0x0 0x0
0xffffaf800001c980 0001 00000000 0x0 0x0
0xffffaf800001ca00 0001 00000000 0x0 0x0
0xffffaf800001ca80 0001 00000000 0x0 0x0
0xffffaf800001cb00 0001 00000000 0x0 0x0
0xffffaf800001cb80 0001 00000000 0x0 0x0
0xffffaf800001cc00 0001 00000000 0x0 0x0
0xffffaf800001cc80 0001 00000000 0x0 0x0
0xffffaf800001cd00 0001 00000000 0x0 0x0
0xffffaf800001cd80 0001 00000000 0x0 0x0
0xffffaf800001ce00 0001 00000000 0x0 0x0
0xffffaf800001ce80 0001 00000000 0x0 0x0
0xffffaf800001cf00 0001 00000000 0x0 0x0
0xffffaf800001cf80 0001 00000000 0x0 0x0
0xffffaf800001d000 0001 00000000 0x0 0x0
0xffffaf800001d080 0001 00000000 0x0 0x0
0xffffaf800001d100 0001 00000000 0x0 0x0
0xffffaf800001d180 0001 00000000 0x0 0x0
0xffffaf800001d200 0001 00000000 0x0 0x0
0xffffaf800001d280 0001 00000000 0x0 0x0
0xffffaf800001d300 0001 00000000 0x0 0x0
0xffffaf800001d380 0001 00000000 0x0 0x0
0xffffaf800001d400 0001 00000000 0x0 0x0
0xffffaf800001d480 0001 00000000 0x0 0x0
0xffffaf800001d500 0001 00000000 0x0 0x0
0xffffaf800001d580 0001 00000000 0x0 0x0
0xffffaf800001d600 0001 00000000 0x0 0x0
0xffffaf800001d680 0001 00000000 0x0 0x0
0xffffaf800001d700 0001 00000000 0x0 0x0
0xffffaf800001d780 0001 00000000 0x0 0x0
0xffffaf800001d800 0001 00000000 0x0 0x0
0xffffaf800001d880 0001 00000000 0x0 0x0
0xffffaf800001d900 0001 00000000 0x0 0x0
0xffffaf800001d980 0001 00000000 0x0 0x0
0xffffaf800001da00 0001 00000000 0x0 0x0
0xffffaf800001da80 0001 00000000 0x0 0x0
0xffffaf800001db00 0001 00000000 0x0 0x0
0xffffaf800001db80 0001 00000000 0x0 0x0
0xffffaf800001dc00 0001 00000000 0x0 0x0
0xffffaf800001dc80 0001 00000000 0x0 0x0
0xffffaf800001dd00 0001 00000000 0x0 0x0
0xffffaf800001dd80 0001 00000000 0x0 0x0
0xffffaf800001de00 0001 00000000 0x0 0x0
0xffffaf800001de80 0001 00000000 0x0 0x0
0xffffaf800001df00 0001 00000000 0x0 0x0
0xffffaf800001df80 0001 00000000 0x0 0x0
0xffffaf800001e000 0001 00000000 0x0 0x0
0xffffaf800001e080 0001 00000000 0x0 0x0
0xffffaf800001e100 0001 00000000 0x0 0x0
0xffffaf800001e180 0001 00000000 0x0 0x0
0xffffaf800001e200 0001 00000000 0x0 0x0
0xffffaf800001e280 0001 00000000 0x0 0x0
0xffffaf800001e300 0001 00000000 0x0 0x0
0xffffaf800001e380 0001 00000000 0x0 0x0
0xffffaf800001e400 0001 00000000 0x0 0x0
0xffffaf800001e480 0001 00000000 0x0 0x0
0xffffaf800001e500 0001 00000000 0x0 0x0
0xffffaf800001e580 0001 00000000 0x0 0x0
0xffffaf800001e600 0001 00000000 0x0 0x0
0xffffaf800001e680 0001 00000000 0x0 0x0
0xffffaf800001e700 0001 00000000 0x0 0x0
0xffffaf800001e780 0001 00000000 0x0 0x0
0xffffaf800001e800 0001 00000000 0x0 0x0
0xffffaf800001e880 0001 00000000 0x0 0x0
0xffffaf800001e900 0001 00000000 0x0 0x0
0xffffaf800001e980 0001 00000000 0x0 0x0
0xffffaf800001ea00 0001 00000000 0x0 0x0
0xffffaf800001ea80 0001 00000000 0x0 0x0
0xffffaf800001eb00 0001 00000000 0x0 0x0
0xffffaf800001eb80 0001 00000000 0x0 0x0
0xffffaf800001ec00 0001 00000000 0x0 0x0
0xffffaf800001ec80 0001 00000000 0x0 0x0
0xffffaf800001ed00 0001 00000000 0x0 0x0
0xffffaf800001ed80 0001 00000000 0x0 0x0
0xffffaf800001ee00 0001 00000000 0x0 0x0
0xffffaf800001ee80 0001 00000000 0x0 0x0
0xffffaf800001ef00 0001 00000000 0x0 0x0
0xffffaf800001ef80 0001 00000000 0x0 0x0
0xffffaf800001f000 0001 00000000 0x0 0x0
0xffffaf800001f080 0001 00000000 0x0 0x0
0xffffaf800001f100 0001 00000000 0x0 0x0
0xffffaf800001f180 0001 00000000 0x0 0x0
0xffffaf800001f200 0001 00000000 0x0 0x0
0xffffaf800001f280 0001 00000000 0x0 0x0
0xffffaf800001f300 0001 00000000 0x0 0x0
0xffffaf800001f380 0001 00000000 0x0 0x0
0xffffaf800001f400 0001 00000000 0x0 0x0
0xffffaf800001f480 0001 00000000 0x0 0x0
0xffffaf800001f500 0001 00000000 0x0 0x0
0xffffaf800001f580 0001 00000000 0x0 0x0
0xffffaf800001f600 0001 00000000 0x0 0x0
0xffffaf800001f680 0001 00000000 0x0 0x0
0xffffaf800001f700 0001 00000000 0x0 0x0
0xffffaf800001f780 0001 00000000 0x0 0x0
0xffffaf800001f800 0001 00000000 0x0 0x0
0xffffaf800001f880 0001 00000000 0x0 0x0
0xffffaf800001f900 0001 00000000 0x0 0x0
0xffffaf800001f980 0001 00000000 0x0 0x0
0xffffaf800001fa00 0001 00000000 0x0 0x0
0xffffaf800001fa80 0001 00000000 0x0 0x0
0xffffaf800001fb00 0001 00000000 0x0 0x0
0xffffaf800001fb80 0001 00000000 0x0 0x0
0xffffaf800001fc00 0001 00000000 0x0 0x0
0xffffaf800001fc80 0001 00000000 0x0 0x0
0xffffaf800001fd00 0001 00000000 0x0 0x0
0xffffaf800001fd80 0001 00000000 0x0 0x0
0xffffaf800001fe00 0001 00000000 0x0 0x0
0xffffaf800001fe80 0001 00000000 0x0 0x0
0xffffaf800001ff00 0001 00000000 0x0 0x0
0xffffaf800001ff80 0001 00000000 0x0 0x0
0xffffaf8000020000 0001 00000000 0x0 0x0
0xffffaf8000020080 0001 00000000 0x0 0x0
0xffffaf8000020100 0001 00000000 0x0 0x0
0xffffaf8000020180 0001 00000000 0x0 0x0
0xffffaf8000020200 0001 00000000 0x0 0x0
0xffffaf8000020280 0001 00000000 0x0 0x0
0xffffaf8000020300 0001 00000000 0x0 0x0
0xffffaf8000020380 0001 00000000 0x0 0x0
0xffffaf8000020400 0001 00000000 0x0 0x0
0xffffaf8000020480 0001 00000000 0x0 0x0
0xffffaf8000020500 0001 00000000 0x0 0x0
0xffffaf8000020580 0001 00000000 0x0 0x0
0xffffaf8000020600 0001 00000000 0x0 0x0
0xffffaf8000020680 0001 00000000 0x0 0x0
0xffffaf8000020700 0001 00000000 0x0 0x0
0xffffaf8000020780 0001 00000000 0x0 0x0
0xffffaf8000020800 0001 00000000 0x0 0x0
0xffffaf8000020880 0001 00000000 0x0 0x0
0xffffaf8000020900 0001 00000000 0x0 0x0
0xffffaf8000020980 0001 00000000 0x0 0x0
0xffffaf8000020a00 0001 00000000 0x0 0x0
0xffffaf8000020a80 0001 00000000 0x0 0x0
0xffffaf8000020b00 0001 00000000 0x0 0x0
0xffffaf8000020b80 0001 00000000 0x0 0x0
0xffffaf8000020c00 0001 00000000 0x0 0x0
0xffffaf8000020c80 0001 00000000 0x0 0x0
0xffffaf8000020d00 0001 00000000 0x0 0x0
0xffffaf8000020d80 0001 00000000 0x0 0x0
0xffffaf8000020e00 0001 00000000 0x0 0x0
0xffffaf8000020e80 0001 00000000 0x0 0x0
0xffffaf8000020f00 0001 00000000 0x0 0x0
0xffffaf8000020f80 0001 00000000 0x0 0x0
0xffffaf8000021000 0001 00000000 0x0 0x0
0xffffaf8000021080 0001 00000000 0x0 0x0
0xffffaf8000021100 0001 00000000 0x0 0x0
0xffffaf8000021180 0001 00000000 0x0 0x0
0xffffaf8000021200 0001 00000000 0x0 0x0
0xffffaf8000021280 0001 00000000 0x0 0x0
0xffffaf8000021300 0001 00000000 0x0 0x0
0xffffaf8000021380 0001 00000000 0x0 0x0
0xffffaf8000021400 0001 00000000 0x0 0x0
0xffffaf8000021480 0001 00000000 0x0 0x0
0xffffaf8000021500 0001 00000000 0x0 0x0
0xffffaf8000021580 0001 00000000 0x0 0x0
0xffffaf8000021600 0001 00000000 0x0 0x0
0xffffaf8000021680 0001 00000000 0x0 0x0
0xffffaf8000021700 0001 00000000 0x0 0x0
0xffffaf8000021780 0001 00000000 0x0 0x0
0xffffaf8000021800 0001 00000000 0x0 0x0
0xffffaf8000021880 0001 00000000 0x0 0x0
0xffffaf8000021900 0001 00000000 0x0 0x0
0xffffaf8000021980 0001 00000000 0x0 0x0
0xffffaf8000021a00 0001 00000000 0x0 0x0
0xffffaf8000021a80 0001 00000000 0x0 0x0
0xffffaf8000021b00 0001 00000000 0x0 0x0
0xffffaf8000021b80 0001 00000000 0x0 0x0
0xffffaf8000021c00 0001 00000000 0x0 0x0
0xffffaf8000021c80 0001 00000000 0x0 0x0
0xffffaf8000021d00 0001 00000000 0x0 0x0
0xffffaf8000021d80 0001 00000000 0x0 0x0
0xffffaf8000021e00 0001 00000000 0x0 0x0
0xffffaf8000021e80 0001 00000000 0x0 0x0
0xffffaf8000021f00 0001 00000000 0x0 0x0
0xffffaf8000021f80 0001 00000000 0x0 0x0
0xffffaf8000022000 0001 00000000 0x0 0x0
0xffffaf8000022080 0001 00000000 0x0 0x0
0xffffaf8000022100 0001 00000000 0x0 0x0
0xffffaf8000022180 0001 00000000 0x0 0x0
0xffffaf8000022200 0001 00000000 0x0 0x0
0xffffaf8000022280 0001 00000000 0x0 0x0
0xffffaf8000022300 0001 00000000 0x0 0x0
0xffffaf8000022380 0001 00000000 0x0 0x0
0xffffaf8000022400 0001 00000000 0x0 0x0
0xffffaf8000022480 0001 00000000 0x0 0x0
0xffffaf8000022500 0001 00000000 0x0 0x0
0xffffaf8000022580 0001 00000000 0x0 0x0
0xffffaf8000022600 0001 00000000 0x0 0x0
0xffffaf8000022680 0001 00000000 0x0 0x0
0xffffaf8000022700 0001 00000000 0x0 0x0
0xffffaf8000022780 0001 00000000 0x0 0x0
0xffffaf8000022800 0001 00000000 0x0 0x0
0xffffaf8000022880 0001 00000000 0x0 0x0
0xffffaf8000022900 0001 00000000 0x0 0x0
0xffffaf8000022980 0001 00000000 0x0 0x0
0xffffaf8000022a00 0001 00000000 0x0 0x0
0xffffaf8000022a80 0001 00000000 0x0 0x0
0xffffaf8000022b00 0001 00000000 0x0 0x0
0xffffaf8000022b80 0001 00000000 0x0 0x0
0xffffaf8000022c00 0001 00000000 0x0 0x0
0xffffaf8000022c80 0001 00000000 0x0 0x0
0xffffaf8000022d00 0001 00000000 0x0 0x0
0xffffaf8000022d80 0001 00000000 0x0 0x0
0xffffaf8000022e00 0001 00000000 0x0 0x0
0xffffaf8000022e80 0001 00000000 0x0 0x0
0xffffaf8000022f00 0001 00000000 0x0 0x0
0xffffaf8000022f80 0001 00000000 0x0 0x0
0xffffaf8000023000 0001 00000000 0x0 0x0
0xffffaf8000023080 0001 00000000 0x0 0x0
0xffffaf8000023100 0001 00000000 0x0 0x0
0xffffaf8000023180 0001 00000000 0x0 0x0
0xffffaf8000023200 0001 00000000 0x0 0x0
0xffffaf8000023280 0001 00000000 0x0 0x0
0xffffaf8000023300 0001 00000000 0x0 0x0
0xffffaf8000023380 0001 00000000 0x0 0x0
0xffffaf8000023400 0001 00000000 0x0 0x0
0xffffaf8000023480 0001 00000000 0x0 0x0
0xffffaf8000023500 0001 00000000 0x0 0x0
0xffffaf8000023580 0001 00000000 0x0 0x0
0xffffaf8000023600 0001 00000000 0x0 0x0
0xffffaf8000023680 0001 00000000 0x0 0x0
0xffffaf8000023700 0001 00000000 0x0 0x0
0xffffaf8000023780 0001 00000000 0x0 0x0
0xffffaf8000023800 0001 00000000 0x0 0x0
0xffffaf8000023880 0001 00000000 0x0 0x0
0xffffaf8000023900 0001 00000000 0x0 0x0
0xffffaf8000023980 0001 00000000 0x0 0x0
0xffffaf8000023a00 0001 00000000 0x0 0x0
0xffffaf8000023a80 0001 00000000 0x0 0x0
0xffffaf8000023b00 0001 00000000 0x0 0x0
0xffffaf8000023b80 0001 00000000 0x0 0x0
0xffffaf8000023c00 0001 00000000 0x0 0x0
0xffffaf8000023c80 0001 00000000 0x0 0x0
0xffffaf8000023d00 0001 00000000 0x0 0x0
0xffffaf8000023d80 0001 00000000 0x0 0x0
0xffffaf8000023e00 0001 00000000 0x0 0x0
0xffffaf8000023e80 0001 00000000 0x0 0x0
0xffffaf8000023f00 0001 00000000 0x0 0x0
0xffffaf8000023f80 0001 00000000 0x0 0x0
0xffffaf8000024000 0001 00000000 0x0 0x0
0xffffaf8000024080 0001 00000000 0x0 0x0
0xffffaf8000024100 0001 00000000 0x0 0x0
0xffffaf8000024180 0001 00000000 0x0 0x0
0xffffaf8000024200 0001 00000000 0x0 0x0
0xffffaf8000024280 0001 00000000 0x0 0x0
0xffffaf8000024300 0001 00000000 0x0 0x0
0xffffaf8000024380 0001 00000000 0x0 0x0
0xffffaf8000024400 0001 00000000 0x0 0x0
0xffffaf8000024480 0001 00000000 0x0 0x0
0xffffaf8000024500 0001 00000000 0x0 0x0
0xffffaf8000024580 0001 00000000 0x0 0x0
0xffffaf8000024600 0001 00000000 0x0 0x0
0xffffaf8000024680 0001 00000000 0x0 0x0
0xffffaf8000024700 0001 00000000 0x0 0x0
0xffffaf8000024780 0001 00000000 0x0 0x0
0xffffaf8000024800 0001 00000000 0x0 0x0
0xffffaf8000024880 0001 00000000 0x0 0x0
0xffffaf8000024900 0001 00000000 0x0 0x0
0xffffaf8000024980 0001 00000000 0x0 0x0
0xffffaf8000024a00 0001 00000000 0x0 0x0
0xffffaf8000024a80 0001 00000000 0x0 0x0
0xffffaf8000024b00 0001 00000000 0x0 0x0
0xffffaf8000024b80 0001 00000000 0x0 0x0
0xffffaf8000024c00 0001 00000000 0x0 0x0
0xffffaf8000024c80 0001 00000000 0x0 0x0
0xffffaf8000024d00 0001 00000000 0x0 0x0
0xffffaf8000024d80 0001 00000000 0x0 0x0
0xffffaf8000024e00 0001 00000000 0x0 0x0
0xffffaf8000024e80 0001 00000000 0x0 0x0
0xffffaf8000024f00 0001 00000000 0x0 0x0
0xffffaf8000024f80 0001 00000000 0x0 0x0
0xffffaf8000025000 0001 00000000 0x0 0x0
0xffffaf8000025080 0001 00000000 0x0 0x0
0xffffaf8000025100 0001 00000000 0x0 0x0
0xffffaf8000025180 0001 00000000 0x0 0x0
0xffffaf8000025200 0001 00000000 0x0 0x0
0xffffaf8000025280 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

May 4, 2024, 3:48:34 AMMay 4

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 9c1705ca7b98 add an environment variable to override the n..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17914f54980000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=d7a7e6f7fbcf3c25ce20
compiler: g++ (Debian 12.2.0-14) 12.2.0

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=161b4440980000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=136b131f180000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fc3e807dac66/disk-9c1705ca.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/f8481c320352/netbsd-9c1705ca.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d7a7e6...@syzkaller.appspotmail.com

[ 58.4262509] panic: ufsdirhash_dirtrunc: blocks in use
[ 58.4397840] cpu0: Begin traceback...
[ 58.4562458] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
[ 58.5162478] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1084
[ 58.5862443] ufsdirhash_dirtrunc() at netbsd:ufsdirhash_dirtrunc+0x2f7 sys/ufs/ufs/ufs_dirhash.c:834
[ 58.6462429] ufs_dircompact.constprop.0() at netbsd:ufs_dircompact.constprop.0+0xb33
[ 58.6962485] ufs_gro_rename() at netbsd:ufs_gro_rename+0x1818 sys/ufs/ufs/ufs_rename.c:395
[ 58.7462451] genfs_sane_rename() at netbsd:genfs_sane_rename+0xcb9 sys/miscfs/genfs/genfs_rename.c:373
[ 58.7962746] ufs_sane_rename() at netbsd:ufs_sane_rename+0xd1 sys/ufs/ufs/ufs_rename.c:97
[ 58.8462451] genfs_insane_rename() at netbsd:genfs_insane_rename+0x285 sys/miscfs/genfs/genfs_rename.c:221
[ 58.8862451] VOP_RENAME() at netbsd:VOP_RENAME+0x192 sys/kern/vnode_if.c:1301
[ 58.9362503] do_sys_renameat() at netbsd:do_sys_renameat+0x1649 sys/kern/vfs_syscalls.c:4640
[ 58.9862438] sys_rename() at netbsd:sys_rename+0x4f sys/kern/vfs_syscalls.c:4302
[ 59.0362510] sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 59.0362510] sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90
[ 59.0862448] syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
[ 59.0862448] syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 59.0862448] syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
[ 59.0962451] --- syscall (number 128 via SYS_syscall) ---
[ 59.1162452] netbsd:syscall+0x246:
[ 59.1162452] cpu0: End traceback...
[ 59.1162452] fatal breakpoint trap in supervisor mode
[ 59.1269893] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x282 cr2 0x71bd4f03ed30 ilevel 0 rsp 0xffffa202485c7210
[ 59.1398169] curlwp 0xffffa20013dc0640 pid 991.991 lowest kstack 0xffffa202485c02c0
Stopped in pid 991.991 (syz-executor3129) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1084
ufsdirhash_dirtrunc() at netbsd:ufsdirhash_dirtrunc+0x2f7 sys/ufs/ufs/ufs_dirhash.c:834
ufs_dircompact.constprop.0() at netbsd:ufs_dircompact.constprop.0+0xb33

ufs_gro_rename() at netbsd:ufs_gro_rename+0x1818 sys/ufs/ufs/ufs_rename.c:395
genfs_sane_rename() at netbsd:genfs_sane_rename+0xcb9 sys/miscfs/genfs/genfs_rename.c:373
ufs_sane_rename() at netbsd:ufs_sane_rename+0xd1 sys/ufs/ufs/ufs_rename.c:97
genfs_insane_rename() at netbsd:genfs_insane_rename+0x285 sys/miscfs/genfs/genfs_rename.c:221
VOP_RENAME() at netbsd:VOP_RENAME+0x192 sys/kern/vnode_if.c:1301
do_sys_renameat() at netbsd:do_sys_renameat+0x1649 sys/kern/vfs_syscalls.c:4640
sys_rename() at netbsd:sys_rename+0x4f sys/kern/vfs_syscalls.c:4302
sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137

--- syscall (number 128 via SYS_syscall) ---

netbsd:syscall+0x246:
Panic string: ufsdirhash_dirtrunc: blocks in use
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

942 942 3 0 0 ffffa20013df4240 syz-executor3129 rwlock
1073 1073 3 0 0 ffffa20013dc0a80 syz-executor3129 rwlock
991 > 991 7 0 0 ffffa20013dc0640 syz-executor3129
1242 1242 3 1 0 ffffa20013dc0200 syz-executor3129 rwlock
1386 1386 3 0 0 ffffa20013da8a40 syz-executor3129 mutex
815 815 2 0 140 ffffa20013da8600 syz-executor3129
1241 1241 2 1 140 ffffa20013da81c0 syz-executor3129
1376 1376 2 0 140 ffffa20013430b80 syz-executor3129
930 930 3 0 0 ffffa20013430300 syz-executor3129 rwlock
1082 1082 2 0 140 ffffa20012cc9140 syz-executor3129
829 829 2 1 140 ffffa200133afac0 syz-executor3129
1131 1131 2 0 140 ffffa200133af680 syz-executor3129
449 449 3 0 180 ffffa20012b7c540 syz-executor3129 nanoslp
1235 1235 3 0 180 ffffa20012b9a580 sshd select
1225 1225 3 1 180 ffffa200134905c0 getty nanoslp
1229 1229 3 1 180 ffffa200126d7b80 getty nanoslp
1226 1226 3 1 180 ffffa200129bf280 getty nanoslp
1223 1223 3 0 180 ffffa20012a21b80 getty ttyraw
1116 1116 3 0 180 ffffa200133af240 sshd select
813 813 3 0 180 ffffa20012d53780 powerd kqueue
800 800 3 0 180 ffffa20013430740 syslogd kqueue
605 605 3 0 180 ffffa20012c256c0 dhcpcd poll
744 744 3 0 180 ffffa20012cba100 dhcpcd poll
748 748 3 0 180 ffffa20012c80bc0 dhcpcd poll
603 603 3 1 180 ffffa20012c80780 dhcpcd poll
487 487 3 0 180 ffffa20012da40c0 dhcpcd poll
292 292 3 0 180 ffffa20012d8a900 dhcpcd poll
485 485 3 0 180 ffffa20012d8a4c0 dhcpcd poll
1 1 3 0 180 ffffa2001286f180 init wait
0 673 3 0 200 ffffa200129bf6c0 physiod physiod
0 196 3 0 200 ffffa200129c1700 pooldrain pooldrain
0 195 3 1 200 ffffa200129c12c0 ioflush syncer
0 194 3 1 200 ffffa200129bfb00 pgdaemon pgdaemon
0 167 3 0 200 ffffa20012976ac0 usb7 usbevt
0 172 3 0 200 ffffa20012976680 usb6 usbevt
0 170 3 0 200 ffffa20012976240 usb5 usbevt
0 168 3 0 200 ffffa2001291ea80 usb4 usbevt
0 166 3 0 200 ffffa2001291e640 usb3 usbevt
0 165 3 0 200 ffffa2001291e200 usb2 usbevt
0 31 3 0 200 ffffa200128caa40 usb1 usbevt
0 63 3 0 200 ffffa200128ca600 usb0 usbevt
0 126 3 1 200 ffffa200128ca1c0 usbtask-dr usbtsk
0 125 3 1 200 ffffa2001286fa00 usbtask-hc usbtsk
0 124 3 0 200 ffffa20010d66b00 swwreboot swwreboot
0 123 3 0 200 ffffa2001286f5c0 npfgc0 npfgcw
0 122 3 1 200 ffffa200128669c0 rt_free rt_free
0 121 3 1 200 ffffa20012866580 unpgc unpgc
0 120 2 0 200 ffffa20012866140 key_timehandler
0 119 3 1 200 ffffa20012703980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffa20012703540 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffffa20012703100 nd6_timer
0 116 3 1 200 ffffa200126fb940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffa200126fb500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffa200126fb0c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffa200126ed900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffa200126ed4c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffa200126ed080 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffffa200126db040 rt_timer
0 109 3 0 200 ffffa200126db8c0 vmem_rehash vmem_rehash
0 100 3 0 200 ffffa200126d7300 entbutler entropy
0 99 3 1 200 ffffa200120bcb40 viomb balloon
0 98 3 1 200 ffffa200120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffa200120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffa20010d666c0 scsibus0 sccomp
0 29 3 0 200 ffffa20010d66280 pms0 pmsreset
0 28 3 1 200 ffffa20010cacac0 xcall/1 xcall
0 27 1 1 200 ffffa20010cac680 softser/1
0 26 1 1 200 ffffa20010cac240 softclk/1
0 25 1 1 200 ffffa20010ca8a80 softbio/1
0 24 1 1 200 ffffa20010ca8640 softnet/1
0 23 1 1 201 ffffa20010ca8200 idle/1
0 22 3 0 200 ffffa2000fb55a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffa2000fb55600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffa2000fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffa2000fb54a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffa2000fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffa2000fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffa2000fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffffa2000fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffa2000fb4d140 pmfevent pmfevent
0 13 3 0 200 ffffa2000fb4a980 sopendfree sopendfr
0 12 3 0 200 ffffa2000fb4a540 ifwdog ifwdog
0 11 3 0 200 ffffa2000fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffa2000fb3b940 nfssilly nfssilly
0 9 3 0 200 ffffa2000fb3b500 pooldisp pooldisp
0 8 3 1 200 ffffa2000fb3b0c0 modunload mod_unld
0 7 3 0 200 ffffa2000fb32900 xcall/0 xcall
0 6 1 0 200 ffffa2000fb324c0 softser/0
0 5 1 0 200 ffffa2000fb32080 softclk/0
0 4 1 0 200 ffffa2000fb308c0 softbio/0
0 3 1 0 200 ffffa2000fb30480 softnet/0
0 2 1 0 201 ffffa2000fb30040 idle/0
0 > 0 7 1 240 ffffffff8334ea00 swapper
[Locks tracked through LWPs]

****** LWP 942.942 (syz-executor3129) @ 0xffffa20013df4240, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)

lock address : ffffa20013d649c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 4

relevant cpu : 0 last held: 1

relevant lwp : 0xffffa20013df4240 last held: 0xffffa20013dc0640

last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)

lock address : ffffa20013d649c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 4

relevant cpu : 0 last held: 1

relevant lwp : 0xffffa20013dc0a80 last held: 0xffffa20013dc0640

last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a

owner/count : 0xffffa20013dc0640 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 4 waiting writers: 0xffffa20013df4240 0xffffa20013dc0a80 0xffffa20013dc0200 0xffffa20013430300

****** LWP 991.991 (syz-executor3129) @ 0xffffa20013dc0640, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vfs_mountalloc+0x8e sys/kern/vfs_mount.c:161)
lock address : ffffa20010d4ae80
type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0x8e

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 1
relevant lwp : 0xffffa20013dc0640 last held: 0xffffa20013dc0640
last locked* : netbsd:genfs_renamelock_enter+0x23
unlocked : netbsd:do_sys_renameat+0x1685
owner field : 0xffffa20013dc0640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffa20013da8a40

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)

lock address : ffffa20013d649c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 4

relevant cpu : 0 last held: 1

relevant lwp : 0xffffa20013dc0640 last held: 0xffffa20013dc0640

last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a

owner/count : 0xffffa20013dc0640 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 4 waiting writers: 0xffffa20013df4240 0xffffa20013dc0a80 0xffffa20013dc0200 0xffffa20013430300

* Lock 2 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)
lock address : ffffa20013d947c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1

relevant lwp : 0xffffa20013dc0640 last held: 0xffffa20013dc0640

last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a

owner/count : 0xffffa20013dc0640 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 3 (initialized at netbsd:ufsdirhash_build+0x8d1 sys/ufs/ufs/ufs_dirhash.c:196)
lock address : ffffa200129c6a80

type : sleep/adaptive
initialized : netbsd:ufsdirhash_build+0x8d1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffa20013dc0640 last held: 0xffffa20013dc0640

last locked* : netbsd:ufsdirhash_dirtrunc+0x6a
unlocked : netbsd:ufsdirhash_lookup+0xa95

owner field : 0xffffa20013dc0640 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1242.1242 (syz-executor3129) @ 0xffffa20013dc0200, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)

lock address : ffffa20013d649c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 4

relevant cpu : 1 last held: 1

relevant lwp : 0xffffa20013dc0200 last held: 0xffffa20013dc0640

last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vfs_mountalloc+0x8e sys/kern/vfs_mount.c:161)
lock address : ffffa20010d4ae80
type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0x8e

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 1
relevant lwp : 0xffffa20013da8a40 last held: 0xffffa20013dc0640
last locked* : netbsd:genfs_renamelock_enter+0x23
unlocked : netbsd:do_sys_renameat+0x1685
owner field : 0xffffa20013dc0640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffa20013da8a40

****** LWP 930.930 (syz-executor3129) @ 0xffffa20013430300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1438)

lock address : ffffa20013d649c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 4

relevant cpu : 0 last held: 1

relevant lwp : 0xffffa20013430300 last held: 0xffffa20013dc0640

last locked* : netbsd:genfs_lock+0x160
unlocked : netbsd:genfs_unlock+0x2a

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa20012cba100 last held: 000000000000000000