syzbot


panic: cpu0: found cpu1 heart stopped beating and unresponsive

Status: upstream: reported C repro on 2023/08/25 02:27
Reported-by: syzbot+715f2c18cac4d3bbfc1d@syzkaller.appspotmail.com
First crash: 188d, last: 44d

Sample crash report:
[  56.0011755] panic: cpu0: found cpu1 heart stopped beating and unresponsive
[  56.0011755] cpu0: Begin traceback...
[  56.0011755] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:292
[  56.0011755] panic() at netbsd:panic+0x49 sys/kern/subr_prf.c:1120
[  56.0011755] defibrillate() at netbsd:defibrillate+0x1fa sys/kern/kern_heartbeat.c:432
[  56.0011755] heartbeat() at netbsd:heartbeat+0x599 sys/kern/kern_heartbeat.c:654
[  56.0011755] hardclock() at netbsd:hardclock+0x1d9 sys/kern/kern_clock.c:351
[  56.0011755] Xresume_lapic_ltimer() at netbsd:Xresume_lapic_ltimer+0x1e
[  56.0011755] --- interrupt ---
[  56.0011755] rw_enter() at netbsd:rw_enter+0x6f8 sys/kern/kern_rwlock.c:359
[  56.0011755] genfs_lock() at netbsd:genfs_lock+0x220 sys/miscfs/genfs/genfs_vnops.c:397
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
[  56.0011755] union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
[  56.0011755] VOP_LOCK() at netbsd:VOP_LOCK+0x22a sys/kern/vnode_if.c:1632
[  56.0011755] vn_lock() at netbsd:vn_lock+0x2ae sys/kern/vfs_vnops.c:1388
[  56.0011755] lookup_once() at netbsd:lookup_once+0x599 sys/kern/vfs_lookup.c:1150
[  56.0011755] namei_tryemulroot() at netbsd:namei_tryemulroot+0x1fb8 namei_oneroot sys/kern/vfs_lookup.c:1546 [inline]
[  56.0011755] namei_tryemulroot() at netbsd:namei_tryemulroot+0x1fb8 sys/kern/vfs_lookup.c:1906
[  56.0011755] namei() at netbsd:namei+0x2e sys/kern/vfs_lookup.c:1942
[  56.0011755] do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x2d2 fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
[  56.0011755] do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x2d2 sys/kern/vfs_syscalls.c:2699
[  56.0011755] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[  56.0011755] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[  56.0011755] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[  56.0011755] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[  56.0011755] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[  56.0011755] --- syscall (number 57 via SYS_syscall) ---
[  56.0011755] netbsd:syscall+0x2da:
[  56.0011755] cpu0: End traceback...
[  56.0011755] fatal breakpoint trap in supervisor mode
[  56.0011755] trap type 1 code 0 rip 0xffffffff80235485 cs 0x8 rflags 0x246 cr2 0x75c06243ed30 ilevel 0x7 rsp 0xffffdc024810ae48
[  56.0011755] curlwp 0xffffbf08370f0780 pid 1344.1344 lowest kstack 0xffffdc02481072c0
Stopped in pid 1344.1344 (syz-executor3599) at  netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:292
panic() at netbsd:panic+0x49 sys/kern/subr_prf.c:1120
defibrillate() at netbsd:defibrillate+0x1fa sys/kern/kern_heartbeat.c:432
heartbeat() at netbsd:heartbeat+0x599 sys/kern/kern_heartbeat.c:654
hardclock() at netbsd:hardclock+0x1d9 sys/kern/kern_clock.c:351
Xresume_lapic_ltimer() at netbsd:Xresume_lapic_ltimer+0x1e
--- interrupt ---
rw_enter() at netbsd:rw_enter+0x6f8 sys/kern/kern_rwlock.c:359
genfs_lock() at netbsd:genfs_lock+0x220 sys/miscfs/genfs/genfs_vnops.c:397
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
union_lock() at netbsd:union_lock+0x28b union_lock1 sys/fs/union/union_vnops.c:1677 [inline]
union_lock() at netbsd:union_lock+0x28b sys/fs/union/union_vnops.c:1719
VOP_LOCK() at netbsd:VOP_LOCK+0x22a sys/kern/vnode_if.c:1632
vn_lock() at netbsd:vn_lock+0x2ae sys/kern/vfs_vnops.c:1388
lookup_once() at netbsd:lookup_once+0x599 sys/kern/vfs_lookup.c:1150
namei_tryemulroot() at netbsd:namei_tryemulroot+0x1fb8 namei_oneroot sys/kern/vfs_lookup.c:1546 [inline]
namei_tryemulroot() at netbsd:namei_tryemulroot+0x1fb8 sys/kern/vfs_lookup.c:1906
namei() at netbsd:namei+0x2e sys/kern/vfs_lookup.c:1942
do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x2d2 fd_nameiat sys/kern/vfs_syscalls.c:245 [inline]
do_sys_symlinkat() at netbsd:do_sys_symlinkat+0x2d2 sys/kern/vfs_syscalls.c:2699
sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 57 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: cpu0: found cpu1 heart stopped beating and unresponsive
PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
1244  1244 2   1         0   ffffbf083744d480   syz-executor3599
1344 >1344 7   0     40000   ffffbf08370f0780   syz-executor3599
1384  1384 2   0         0   ffffbf08383c2600   syz-executor3599
1351  1351 2   0     40000   ffffbf0836484ac0   syz-executor3599
325    325 2   1         0   ffffbf0836487200   syz-executor3599
336  > 336 7   1         0   ffffbf083744d040   syz-executor3599
929    929 2   1       140   ffffbf08370f0bc0   syz-executor3599
1243  1243 2   1       140   ffffbf0836a64180   syz-executor3599
1242  1242 2   1       140   ffffbf08374ef580   syz-executor3599
1241  1241 3   1       180   ffffbf083778c940   syz-executor3599 nanoslp
1080  1080 3   1       180   ffffbf0836a645c0   syz-executor3599 nanoslp
449    449 2   1       140   ffffbf08374ef9c0   syz-executor3599
1225  1225 3   0       180   ffffbf08383c21c0   syz-executor3599 nanoslp
1231  1231 3   0       180   ffffbf08367d3b00               sshd select
1195  1195 3   0       180   ffffbf083699d740              getty nanoslp
1196  1196 3   1       180   ffffbf08375b7680              getty nanoslp
1222  1222 3   0       180   ffffbf0838314640              getty nanoslp
1083  1083 3   0       1c0   ffffbf08383c2a40              getty ttyraw
1107  1107 3   0       180   ffffbf08375b7ac0               sshd select
1056  1056 3   1       180   ffffbf08375b7240             powerd kqueue
702    702 3   0       180   ffffbf083764c100            syslogd kqueue
746    746 3   1       180   ffffbf08374ef140             dhcpcd poll
742    742 3   0       180   ffffbf083764c980             dhcpcd poll
466    466 3   0       180   ffffbf083764c540             dhcpcd poll
598    598 3   1       180   ffffbf08367d36c0             dhcpcd poll
292    292 3   0       180   ffffbf08368f62c0             dhcpcd poll
485    485 3   0       180   ffffbf08368f6700             dhcpcd poll
291    291 3   0       180   ffffbf08370f0340             dhcpcd poll
1        1 3   0       180   ffffbf082e1de340               init wait
0      968 3   0       200   ffffbf0836487640            physiod physiod
0      196 3   1       200   ffffbf0836484680          pooldrain pooldrain
0      195 3   1       200   ffffbf0836484240            ioflush syncer
0      194 3   0       200   ffffbf0836487a80           pgdaemon pgdaemon
0      170 3   1       200   ffffbf08343b6a40               usb7 usbevt
0      169 3   0       200   ffffbf08343b6600               usb6 usbevt
0      168 3   1       200   ffffbf08343b61c0               usb5 usbevt
0      167 3   1       200   ffffbf0831359a00               usb4 usbevt
0      166 3   1       200   ffffbf08313595c0               usb3 usbevt
0      165 3   1       200   ffffbf0831359180               usb2 usbevt
0       31 3   1       200   ffffbf082e2bb9c0               usb1 usbevt
0       63 3   1       200   ffffbf082e2bb580               usb0 usbevt
0      126 3   1       200   ffffbf082e0ff740         usbtask-dr usbtsk
0      125 3   1       200   ffffbf082e0ffb80         usbtask-hc usbtsk
0      124 3   0       200   ffffbf082c695b00          swwreboot swwreboot
0      123 3   0       200   ffffbf082e2bb140             npfgc0 npfgcw
0      122 3   1       200   ffffbf082e26a980            rt_free rt_free
0      121 3   1       200   ffffbf082e26a540              unpgc unpgc
0      120 3   0       200   ffffbf082e26a100    key_timehandler key_timehandler
0      119 3   1       200   ffffbf082e255940    icmp6_wqinput/1 icmp6_wqinput
0      118 3   0       200   ffffbf082e255500    icmp6_wqinput/0 icmp6_wqinput
0      117 3   0       200   ffffbf082e2550c0          nd6_timer nd6_timer
0      116 3   1       200   ffffbf082e250900    carp6_wqinput/1 carp6_wqinput
0      115 3   0       200   ffffbf082e2504c0    carp6_wqinput/0 carp6_wqinput
0      114 3   1       200   ffffbf082e250080     carp_wqinput/1 carp_wqinput
0      113 3   0       200   ffffbf082e21b8c0     carp_wqinput/0 carp_wqinput
0      112 3   1       200   ffffbf082e21b480     icmp_wqinput/1 icmp_wqinput
0      111 3   0       200   ffffbf082e21b040     icmp_wqinput/0 icmp_wqinput
0      110 3   0       200   ffffbf082e1debc0           rt_timer rt_timer
0      109 3   1       200   ffffbf082e1de780        vmem_rehash vmem_rehash
0      100 3   0       200   ffffbf082e0ff300          entbutler entropy
0       99 3   1       200   ffffbf082db36b40              viomb balloon
0       98 3   1       200   ffffbf082db36700      vioif0_txrx/1 vioif0_txrx
0       97 3   0       200   ffffbf082db362c0      vioif0_txrx/0 vioif0_txrx
0       30 3   1       200   ffffbf082c6956c0           scsibus0 sccomp
0       29 3   0       200   ffffbf082c695280               pms0 pmsreset
0       28 3   1       200   ffffbf082c5b5ac0            xcall/1 xcall
0       27 1   1       200   ffffbf082c5b5680          softser/1
0       26 1   1       200   ffffbf082c5b5240          softclk/1
0       25 1   1       200   ffffbf082c598a80          softbio/1
0       24 1   1       200   ffffbf082c598640          softnet/1
0       23 1   1       201   ffffbf082c598200             idle/1
0       22 3   1       200   ffffbf095a929a40           lnxsyswq lnxsyswq
0       21 3   1       200   ffffbf095a929600           lnxubdwq lnxubdwq
0       20 3   1       200   ffffbf095a9291c0           lnxpwrwq lnxpwrwq
0       19 3   1       200   ffffbf095a938a00           lnxlngwq lnxlngwq
0       18 3   1       200   ffffbf095a9385c0           lnxhipwq lnxhipwq
0       17 3   1       200   ffffbf095a938180           lnxrcugc lnxrcugc
0       16 3   0       200   ffffbf095a94f9c0             sysmon smtaskq
0       15 3   1       200   ffffbf095a94f580         pmfsuspend pmfsuspend
0       14 3   0       200   ffffbf095a94f140           pmfevent pmfevent
0       13 3   1       200   ffffbf095a960980         sopendfree sopendfr
0       12 3   1       200   ffffbf095a960540             ifwdog ifwdog
0       11 3   0       200   ffffbf095a960100            iflnkst iflnkst
0       10 3   1       200   ffffbf095b991940           nfssilly nfssilly
0        9 3   1       240   ffffbf095b991500             vdrain vdrain
0        8 3   1       200   ffffbf095b9910c0          modunload mod_unld
0        7 3   0       200   ffffbf095b9b8900            xcall/0 xcall
0        6 1   0       200   ffffbf095b9b84c0          softser/0
0        5 1   0       200   ffffbf095b9b8080          softclk/0
0        4 1   0       200   ffffbf095b9e98c0          softbio/0
0        3 1   0       200   ffffbf095b9e9480          softnet/0
0        2 1   0       201   ffffbf095b9e9040             idle/0
0        0 3   0       200   ffffffff86766540            swapper uvm
[Locks tracked through LWPs]

****** LWP 1344.1344 (syz-executor3599) @ 0xffffbf08370f0780, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : ffffbf0838e12540
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0xba
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  4
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffbf08370f0780 last held: 0xffffbf083744d040
last locked* : netbsd:genfs_lock+0x220
unlocked     : netbsd:genfs_unlock+0x50
owner/count  : 0xffffbf083744d040 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

****** LWP 1384.1384 (syz-executor3599) @ 0xffffbf08383c2600, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : ffffbf0838e12540
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0xba
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  4
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffbf08383c2600 last held: 0xffffbf083744d040
last locked* : netbsd:genfs_lock+0x220
unlocked     : netbsd:genfs_unlock+0x50
owner/count  : 0xffffbf083744d040 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

****** LWP 1351.1351 (syz-executor3599) @ 0xffffbf0836484ac0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : ffffbf0838e12540
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0xba
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  4
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffbf0836484ac0 last held: 0xffffbf083744d040
last locked* : netbsd:genfs_lock+0x220
unlocked     : netbsd:genfs_unlock+0x50
owner/count  : 0xffffbf083744d040 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

****** LWP 325.325 (syz-executor3599) @ 0xffffbf0836487200, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : ffffbf0838e12540
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0xba
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  4
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbf0836487200 last held: 0xffffbf083744d040
last locked* : netbsd:genfs_lock+0x220
unlocked     : netbsd:genfs_unlock+0x50
owner/count  : 0xffffbf083744d040 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

****** LWP 336.336 (syz-executor3599) @ 0xffffbf083744d040, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : ffffbf0838e12540
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0xba
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  4
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbf083744d040 last held: 0xffffbf083744d040
last locked* : netbsd:genfs_lock+0x220
unlocked     : netbsd:genfs_unlock+0x50
owner/count  : 0xffffbf083744d040 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376)
lock address : ffffbf0838f09e80
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0xba
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  1
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffbf083744d040 last held: 000000000000000000
last locked  : netbsd:genfs_lock+0x19e
unlocked*    : netbsd:genfs_unlock+0x50
owner/count  : 000000000000000000 flags    : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1242.1242 (syz-executor3599) @ 0xffffbf08374ef580, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)
lock address : ffffbf0836ccd240
type         : sleep/adaptive
initialized  : netbsd:amap_alloc1+0x30a
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbf08374ef580 last held: 0xffffbf08374ef580
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked     : netbsd:amap_copy+0x7a4
owner/count  : 0xffffbf08374ef580 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2872)
lock address : ffffbf0836e11580
type         : sleep/adaptive
initialized  : netbsd:pmap_ctor+0x6d
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbf08374ef580 last held: 0xffffbf08374ef580
last locked* : netbsd:pmap_remove+0x9d
unlocked     : netbsd:pmap_extract+0x2c8
owner field  : 0xffffbf08374ef580 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffffbf083764c980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf083764c980 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 466.466 (dhcpcd) @ 0xffffbf083764c540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf083764c540 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffbf08368f6700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf08368f6700 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffbf08370f0340, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf08370f0340 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffbf095a960100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf095a960100 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffbf095b9b8080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf095b9b8080 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86766540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffffff86766540 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type         : spin
initialized  : netbsd:kprintf_init+0x72
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbf08370f0780 last held: 0xffffbf08370f0780
last locked* : netbsd:kprintf_lock+0x50
unlocked     : netbsd:kprintf_unlock+0x70
owner field  : 0x0000000000000800 wait/spin:                0/1

              PAGE FLAG   PQ            UOBJECT              UANON
0xffffdc0000007180 0045 00000000                0x0                0x0
0xffffdc0000007200 0045 00000000                0x0                0x0
0xffffdc0000007280 0045 00000000                0x0                0x0
0xffffdc0000007300 0045 00000000                0x0                0x0
0xffffdc0000007380 0045 00000000                0x0                0x0
0xffffdc0000007400 0045 00000000                0x0                0x0
0xffffdc0000007480 0045 00000000                0x0                0x0
0xffffdc0000007500 0045 00000000                0x0                0x0
0xffffdc0000007580 0045 00000000                0x0                0x0
0xffffdc0000007600 0045 00000000                0x0                0x0
0xffffdc0000007680 0045 00000000                0x0                0x0
0xffffdc0000007700 0041 00000000                0x0                0x0
0xffffdc0000007780 0041 00000000                0x0                0x0
0xffffdc0000007800 0041 00000000                0x0                0x0
0xffffdc0000007880 0041 00000000                0x0                0x0
0xffffdc0000007900 0045 00000000                0x0                0x0
0xffffdc0000007980 0041 00000000                0x0                0x0
0xffffdc0000007a00 0041 00000000                0x0                0x0
0xffffdc0000007a80 0041 00000000                0x0                0x0
0xffffdc0000007b00 0041 00000000                0x0                0x0
0xffffdc0000007b80 0041 00000000                0x0                0x0
0xffffdc0000007c00 0041 00000000                0x0                0x0
0xffffdc0000007c80 0041 00000000                0x0                0x0
0xffffdc0000007d00 0041 00000000                0x0                0x0
0xffffdc0000007d80 0041 00000000                0x0                0x0
0xffffdc0000007e00 0041 00000000                0x0                0x0
0xffffdc0000007e80 0041 00000000                0x0                0x0
0xffffdc0000007f00 0041 00000000                0x0                0x0
0xffffdc0000007f80 0041 00000000                0x0                0x0
0xffffdc0000008000 0041 00000000                0x0                0x0
0xffffdc0000008080 0041 00000000                0x0                0x0
0xffffdc0000008100 0041 00000000                0x0                0x0
0xffffdc0000008180 0041 00000000                0x0                0x0
0xffffdc0000008200 0041 00000000                0x0                0x0
0xffffdc0000008280 0041 00000000                0x0                0x0
0xffffdc0000008300 0041 00000000                0x0                0x0
0xffffdc0000008380 0041 00000000                0x0                0x0
0xffffdc0000008400 0041 00000000                0x0                0x0
0xffffdc0000008480 0041 00000000                0x0                0x0
0xffffdc0000008500 0041 00000000                0x0                0x0
0xffffdc0000008580 0041 00000000                0x0                0x0
0xffffdc0000008600 0045 00000000                0x0                0x0
0xffffdc0000008680 0041 00000000                0x0                0x0
0xffffdc0000008700 0041 00000000                0x0                0x0
0xffffdc0000008780 0041 00000000                0x0                0x0
0xffffdc0000008800 0041 00000000                0x0                0x0
0xffffdc0000008880 0041 00000000                0x0                0x0
0xffffdc0000008900 0041 00000000                0x0                0x0
0xffffdc0000008980 0041 00000000                0x0                0x0
0xffffdc0000008a00 0041 00000000                0x0                0x0
0xffffdc0000008a80 0041 00000000                0x0                0x0
0xffffdc0000008b00 0041 00000000                0x0                0x0
0xffffdc0000008b80 0041 00000000                0x0                0x0
0xffffdc0000008c00 0041 00000000                0x0                0x0
0xffffdc0000008c80 0041 00000000                0x0                0x0
0xffffdc0000008d00 0041 00000000                0x0                0x0
0xffffdc0000008d80 0041 00000000                0x0                0x0
0xffffdc0000008e00 0041 00000000                0x0                0x0
0xffffdc0000008e80 0041 00000000                0x0                0x0
0xffffdc0000008f00 0041 00000000                0x0                0x0
0xffffdc0000008f80 0041 00000000                0x0                0x0
0xffffdc0000009000 0041 00000000                0x0                0x0
0xffffdc0000009080 0045 00000000                0x0                0x0
0xffffdc0000009100 0045 00000000                0x0                0x0
0xffffdc0000009180 0045 00000000                0x0                0x0
0xffffdc0000009200 0041 00000000                0x0                0x0
0xffffdc0000009280 0041 00000000                0x0                0x0
0xffffdc0000009300 0041 00000000                0x0                0x0
0xffffdc0000009380 0041 00000000                0x0                0x0
0xffffdc0000009400 0041 00000000                0x0                0x0
0xffffdc0000009480 0041 00000000                0x0                0x0
0xffffdc0000009500 0041 00000000                0x0                0x0
0xffffdc0000009580 0041 00000000                0x0                0x0
0xffffdc0000009600 0041 00000000                0x0                0x0
0xffffdc0000009680 0041 00000000                0x0                0x0
0xffffdc0000009700 0041 00000000                0x0                0x0
0xffffdc0000009780 0041 00000000                0x0                0x0
0xffffdc0000009800 0041 00000000                0x0                0x0
0xffffdc0000009880 0041 00000000                0x0                0x0
0xffffdc0000009900 0041 00000000                0x0                0x0
0xffffdc0000009980 0041 00000000                0x0                0x0
0xffffdc0000009a00 0041 00000000                0x0                0x0
0xffffdc00

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/12/19 03:13 netbsd 23ee83f7c0ae 924661f4 .config console log report syz C [disk image] [netbsd.gdb] ci2-netbsd-kubsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/11/26 00:19 netbsd 23ee83f7c0ae 5b429f39 .config console log report syz C [disk image] [netbsd.gdb] ci2-netbsd-kubsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/11/13 15:01 netbsd 23ee83f7c0ae 6d6dbf8a .config console log report syz C [disk image] [netbsd.gdb] ci2-netbsd-kubsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/10/30 15:34 netbsd 23ee83f7c0ae b5729d82 .config console log report syz C [disk image] [netbsd.gdb] ci2-netbsd-kmsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2024/01/15 16:50 netbsd 23ee83f7c0ae 551587c1 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2024/01/01 18:41 netbsd 23ee83f7c0ae fb427a07 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/12/09 09:58 netbsd 23ee83f7c0ae 28b24332 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/11/16 22:56 netbsd 23ee83f7c0ae cb976f63 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/10/30 13:17 netbsd 23ee83f7c0ae b5729d82 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/08/27 16:32 netbsd 167403557cf6 7ba13a15 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kmsan panic: cpu0: found cpu1 heart stopped beating and unresponsive
2023/08/25 02:26 netbsd 916b154777c0 49be837e .config console log report [disk image] [netbsd.gdb] ci2-netbsd panic: cpu0: found cpu1 heart stopped beating and unresponsive
* Struck through repros no longer work on HEAD.