syzbot


panic: spec_close: spurious pgrp ref (2)

Status: auto-obsoleted due to no activity on 2023/09/21 14:52
Reported-by: syzbot+fb137c4052afdc45bab9@syzkaller.appspotmail.com
First crash: 453d, last: 306d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
netbsd panic: spec_close: spurious pgrp ref (3) 5 128d 202d 0/3 auto-obsoleted due to no activity on 2024/03/17 22:56
netbsd panic: spec_close: spurious pgrp ref 6 602d 703d 0/3 auto-obsoleted due to no activity on 2022/11/29 21:01

Sample crash report:
[ 2339.0842373] panic: spec_close: spurious pgrp ref
[ 2339.0977921] cpu0: Begin traceback...
[ 2339.1142235] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
[ 2339.1742217] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
[ 2339.2242239] spec_close() at netbsd:spec_close+0x9ec sys/miscfs/specfs/spec_vnops.c:1803
[ 2339.2742245] VOP_CLOSE() at netbsd:VOP_CLOSE+0xfc sys/kern/vnode_if.c:605
[ 2339.3042213] vn_close() at netbsd:vn_close+0x52 sys/kern/vfs_vnops.c:491
[ 2339.3442220] closef() at netbsd:closef+0x1d7 sys/kern/kern_descrip.c:865
[ 2339.3742209] fd_free() at netbsd:fd_free+0x534 sys/kern/kern_descrip.c:1597
[ 2339.4142236] exit1() at netbsd:exit1+0x306 sys/kern/kern_exit.c:301
[ 2339.4542205] sigexit() at netbsd:sigexit+0x63b sys/kern/kern_sig.c:2317
[ 2339.5042223] postsig() at netbsd:postsig+0x69e sys/kern/kern_sig.c:2168
[ 2339.5442221] lwp_userret() at netbsd:lwp_userret+0x435 sys/kern/kern_lwp.c:1646
[ 2339.5842268] mi_userret() at netbsd:mi_userret+0x3e2 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
[ 2339.5842268] mi_userret() at netbsd:mi_userret+0x3e2 KPREEMPT_DISABLE sys/sys/lwp.h:543 [inline]
[ 2339.5842268] mi_userret() at netbsd:mi_userret+0x3e2 sys/sys/userret.h:97
[ 2339.6342214] syscall() at netbsd:syscall+0x323 sys/arch/x86/x86/syscall.c:92
[ 2339.6542272] --- syscall (number 3) ---
[ 2339.6642383] netbsd:syscall+0x323:
[ 2339.6766414] cpu0: End traceback...
[ 2339.6766414] fatal breakpoint trap in supervisor mode
[ 2339.6849618] trap type 1 code 0 rip 0xffffffff8023241d cs 0x8 rflags 0x286 cr2 0xc0002741c8 ilevel 0 rsp 0xffffd80248257430
[ 2339.6990032] curlwp 0xffffd80012a12b80 pid 1225.1225 lowest kstack 0xffffd802482502c0
Stopped in pid 1225.1225 (getty) at     netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
spec_close() at netbsd:spec_close+0x9ec sys/miscfs/specfs/spec_vnops.c:1803
VOP_CLOSE() at netbsd:VOP_CLOSE+0xfc sys/kern/vnode_if.c:605
vn_close() at netbsd:vn_close+0x52 sys/kern/vfs_vnops.c:491
closef() at netbsd:closef+0x1d7 sys/kern/kern_descrip.c:865
fd_free() at netbsd:fd_free+0x534 sys/kern/kern_descrip.c:1597
exit1() at netbsd:exit1+0x306 sys/kern/kern_exit.c:301
sigexit() at netbsd:sigexit+0x63b sys/kern/kern_sig.c:2317
postsig() at netbsd:postsig+0x69e sys/kern/kern_sig.c:2168
lwp_userret() at netbsd:lwp_userret+0x435 sys/kern/kern_lwp.c:1646
mi_userret() at netbsd:mi_userret+0x3e2 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
mi_userret() at netbsd:mi_userret+0x3e2 KPREEMPT_DISABLE sys/sys/lwp.h:543 [inline]
mi_userret() at netbsd:mi_userret+0x3e2 sys/sys/userret.h:97
syscall() at netbsd:syscall+0x323 sys/arch/x86/x86/syscall.c:92
--- syscall (number 3) ---
netbsd:syscall+0x323:
Panic string: spec_close: spurious pgrp ref
PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
29838 29838 3   1       180   ffffd80013e316c0               halt nanoslp
3873  5890 3   0   1100000   ffffd80014592240     syz-executor.1 tstile
3873  3873 2   0  11000040   ffffd80012cc5940     syz-executor.1
7047  10938 3   0   1100000   ffffd800148be9c0     syz-executor.1 tstile
7047  7047 2   0  11000040   ffffd800149c6ac0     syz-executor.1
22932 22932 3   1   1000000   ffffd800140519c0     syz-executor.1 tstile
23203 23203 3   1   1000000   ffffd8001343e340     syz-executor.1 tstile
6298  6298 3   1   1000000   ffffd800149c9b00     syz-executor.1 tstile
27644 28548 2   0   1000040   ffffd800143f8140     syz-executor.1
27644 28047 3   1   1100000   ffffd800148be580     syz-executor.1 tstile
5075  5076 3   1   1100000   ffffd80012ce95c0     syz-executor.1 tstile
5075  5075 2   0  11000040   ffffd80012a6e040     syz-executor.1
18061 4712 3   1   1100000   ffffd80012b7a100     syz-executor.1 tstile
18061 18061 2   0  11000040   ffffd80014053180     syz-executor.1
7389  7389 2   0   1000100   ffffd80014956a40     syz-executor.4
23281 18334 3   0   1100000   ffffd8001481e900     syz-executor.1 tstile
23281 24123 3   0   1100000   ffffd80012bf8a40     syz-executor.1 tstile
23281 23281 2   0  11000040   ffffd80014592680     syz-executor.1
22500 23636 3   1   1100000   ffffd80014046980     syz-executor.1 tstile
22500 22500 2   0  11000040   ffffd800143ad540     syz-executor.1
28218 20113 3   0   1100000   ffffd8001423e740     syz-executor.1 tstile
28218 28218 2   0  11000040   ffffd80013358980     syz-executor.1
18934 18934 2   0   1000040   ffffd80012ca6480     syz-executor.2
14491 19095 3   1   1100000   ffffd80012c13640     syz-executor.1 tstile
14491 14491 2   1  11000040   ffffd8001462a300     syz-executor.1
18835 19176 3   0   1100000   ffffd80014676bc0     syz-executor.1 tstile
18835 18835 2   0  11000040   ffffd800126ea340     syz-executor.1
23117 23117 2   0   1000140   ffffd80014409180     syz-executor.4
19490 22576 3   0   1100000   ffffd8001345e500     syz-executor.1 tstile
19490 19490 2   0  11000040   ffffd80012b999c0     syz-executor.1
18332 18863 3   0   1100000   ffffd80012d19ac0     syz-executor.1 tstile
18332 18332 2   0  11000040   ffffd80013378140     syz-executor.1
18218 18851 3   0   1100000   ffffd80012ad10c0     syz-executor.1 tstile
18218 18218 2   0  11000040   ffffd800133d66c0     syz-executor.1
18068 16541 3   1   1100000   ffffd800143f89c0     syz-executor.1 tstile
18068 18068 2   0  11000040   ffffd80014409a00     syz-executor.1
14733 14733 2   0   1000100   ffffd80014352500     syz-executor.2
20687 18896 3   1   1100000   ffffd80013f68900     syz-executor.2 vfork
20687 20687 2   1  11000040   ffffd800142a5480     syz-executor.2
9794  9794 2   0   1000100   ffffd800142252c0     syz-executor.5
14924 11082 2   0   1000040   ffffd80014225b40     syz-executor.5
14924 16032 3   0  11100000   ffffd800134a15c0     syz-executor.5 vfork
16071 16071 2   0   1000100   ffffd80013468100     syz-executor.5
9892  15392 3   0   1100000   ffffd80012c94780     syz-executor.5 vfork
9892  9892 2   1  11000040   ffffd80012c28ac0     syz-executor.5
10112 10112 2   0   1000100   ffffd80012cc5500     syz-executor.4
15286 15286 2   0   1000100   ffffd8001339ea40     syz-executor.3
15037 10113 3   0  11100000   ffffd80013ff3500     syz-executor.3 vfork
15037 15037 2   1  11000040   ffffd8001448d200     syz-executor.3
9699  9699 2   0   1000100   ffffd80012bf8600     syz-executor.5
9872  10286 3   1  11100000   ffffd80012c7a300     syz-executor.5 vfork
9872  9872 2   1  11000040   ffffd80012cde580     syz-executor.5
10581 10581 2   0   1000100   ffffd800133c0ac0     syz-executor.3
10193 15314 3   1  11100000   ffffd800133c0240     syz-executor.3 vfork
10193 10193 2   0  11000040   ffffd80012a6e480     syz-executor.3
9509  9509 2   0   1000100   ffffd800134544c0     syz-executor.3
9365  9611 2   0   1000040   ffffd80013358100     syz-executor.3
9365  15032 3   0  11100000   ffffd800142a5040     syz-executor.3 vfork
4091  9889 3   0   1100000   ffffd8001423e300     syz-executor.1 tstile
4091  4091 2   0  11000040   ffffd80012d28280     syz-executor.1
2808  2628 3   1   1100000   ffffd80012ca68c0     syz-executor.1 tstile
2808  3672 3   0   1100000   ffffd8001429dbc0     syz-executor.1 tstile
2808  2808 2   0  11000040   ffffd80013ee3300     syz-executor.1
2706  2547 3   0   1100000   ffffd80012d83040     syz-executor.1 tstile
2706  2554 3   0   1100000   ffffd8001429d780     syz-executor.1 tstile
2706  2706 2   0  11000040   ffffd8001429d340     syz-executor.1
2454  7679 3   0   1100000   ffffd80014225700     syz-executor.1 tstile
2454  2454 2   0  11000040   ffffd80013f0dbc0     syz-executor.1
2149  2605 3   0   1100000   ffffd80013e0dac0     syz-executor.1 tstile
2149  2149 2   1  11000040   ffffd800133925c0     syz-executor.1
1946  7344 3   1   1100000   ffffd80012a12300     syz-executor.1 tstile
1946  3016 3   1   1100000   ffffd80012d0ea80     syz-executor.1 tstile
1946  1946 2   0  11000040   ffffd80012d0e200     syz-executor.1
7382  7382 2   0   1000100   ffffd80012c94340     syz-executor.4
1790  1773 3   0   1100000   ffffd800134488c0     syz-executor.1 tstile
1790  1790 2   0  11000040   ffffd80012dcc500     syz-executor.1
7238  7238 2   0   1000100   ffffd800140c6a80     syz-executor.4
6973  6973 2   0   1000100   ffffd80012dcc940     syz-executor.4
5707  1899 3   1   1100000   ffffd80014051580     syz-executor.1 tstile
5707  2238 2   1   1000040   ffffd80013474580     syz-executor.1
2135  5456 3   0   1100000   ffffd800134a1a00     syz-executor.1 tstile
2135  2135 2   1  11000040   ffffd80012d19680     syz-executor.1
1376  1376 2   0   1000100   ffffd80012c28240     syz-executor.2
1371  1119 3   0   1100000   ffffd800134749c0     syz-executor.2 vfork
1371  5981 2   0   1000040   ffffd80013f2b8c0     syz-executor.2
828   5580 3   1   1100000   ffffd80012c13a80     syz-executor.1 tstile
828    577 3   1   1100040   ffffd8001345e940     syz-executor.1 tstile
828    828 2   0  11000040   ffffd80013ee3740     syz-executor.1
1465  1465 2   0   1000100   ffffd80012d332c0     syz-executor.2
1333  5819 2   0   1000040   ffffd80012d19240     syz-executor.2
1333  5942 3   0   1100000   ffffd80013e5ab40     syz-executor.2 vfork
5866  5866 2   0   1000100   ffffd80014046100     syz-executor.2
1236  1671 2   0   1000140   ffffd80012cc50c0         syz-fuzzer
1236  1205 3   1       180   ffffd80013e5a2c0         syz-fuzzer parked
1236  1382 2   0       100   ffffd80013e31b00         syz-fuzzer
1236  1384 3   1       180   ffffd80013e31280         syz-fuzzer parked
1236  1246 3   1       1c0   ffffd80013e0d680         syz-fuzzer wait
1236  1240 3   1       180   ffffd80013dc9200         syz-fuzzer wait
1236  1241 3   0       180   ffffd80013cff600         syz-fuzzer parked
1236   830 3   1         0   ffffd80013cff1c0         syz-fuzzer tstile
1236   941 3   0       180   ffffd80013430b80         syz-fuzzer parked
1236   449 3   1       180   ffffd80013430740         syz-fuzzer parked
1236   942 3   1       180   ffffd80013430300         syz-fuzzer parked
1236  1235 3   1       180   ffffd80012a12740         syz-fuzzer parked
1236  1081 3   1         0   ffffd800126eabc0         syz-fuzzer tstile
1236  1236 3   0       180   ffffd80012ad1940         syz-fuzzer parked
1239  1239 2   0       100   ffffd80012ad1500               sshd
1248  1248 2   0   1000100   ffffd800126eb480              getty
1225 >1225 7   0   1000140   ffffd80012a12b80              getty
1105  1105 2   0   1000100   ffffd800133b3a80               sshd
700    700 2   0       100   ffffd800133d6280            syslogd
559    559 2   0   1000100   ffffd80012c386c0             dhcpcd
747    747 2   0   1000100   ffffd80012cd3540             dhcpcd
745    745 2   0   1000100   ffffd80012c7ab80             dhcpcd
487    487 2   0   1000100   ffffd80012dcc0c0             dhcpcd
292    292 2   0   1000100   ffffd80012db0900             dhcpcd
485    485 3   1       180   ffffd80012db04c0             dhcpcd poll
1        1 2   0       100   ffffd80012877180               init
0     5351 3   1       200   ffffd80012cb7080             ktrace ktrwait
0     5782 3   0       200   ffffd8001339e600             ktrace ktrwait
0     1004 3   0       200   ffffd800129a16c0            physiod physiod
0      196 3   0       200   ffffd800129a3700          pooldrain pooldrain
0    > 195 7   1       240   ffffd800129a32c0            ioflush
0      194 3   1       200   ffffd800129a1b00           pgdaemon pgdaemon
0      169 3   0       200   ffffd80012961ac0               usb7 usbevt
0      172 3   0       200   ffffd80012961680               usb6 usbevt
0      170 3   1       200   ffffd80012961240               usb5 usbevt
0      168 3   0       200   ffffd80012915a80               usb4 usbevt
0      166 3   1       200   ffffd80012915640               usb3 usbevt
0      165 3   1       200   ffffd80012915200               usb2 usbevt
0       31 3   0       240   ffffd800128d9a40               usb1 tstile
0       63 3   0       200   ffffd800128d9600               usb0 usbevt
0      126 3   1       200   ffffd800128d91c0         usbtask-dr usbtsk
0      125 3   1       200   ffffd80012877a00         usbtask-hc usbtsk
0      124 3   0       200   ffffd80010d76b00          swwreboot swwreboot
0      123 3   1       200   ffffd800128775c0             npfgc0 npfgcw
0      122 3   1       200   ffffd8001286a9c0            rt_free rt_free
0      121 3   1       200   ffffd8001286a580              unpgc unpgc
0      120 2   0       200   ffffd8001286a140    key_timehandler
0      119 3   1       200   ffffd8001271b980    icmp6_wqinput/1 icmp6_wqinput
0      118 3   0       200   ffffd8001271b540    icmp6_wqinput/0 icmp6_wqinput
0      117 3   0       200   ffffd8001271b100          nd6_timer nd6_timer
0      116 3   1       200   ffffd80012713940    carp6_wqinput/1 carp6_wqinput
0      115 3   0       200   ffffd80012713500    carp6_wqinput/0 carp6_wqinput
0      114 3   1       200   ffffd800127130c0     carp_wqinput/1 carp_wqinput
0      113 3   0       200   ffffd80012703900     carp_wqinput/0 carp_wqinput
0      112 3   1       200   ffffd800127034c0     icmp_wqinput/1 icmp_wqinput
0      111 3   0       200   ffffd80012703080     icmp_wqinput/0 icmp_wqinput
0      110 2   0       200   ffffd800126eb8c0           rt_timer
0      109 3   0       200   ffffd800126e7b80        vmem_rehash vmem_rehash
0      100 3   1       200   ffffd800126e7300          entbutler entropy
0       99 3   0       200   ffffd800120bcb40              viomb balloon
0       98 3   1       200   ffffd800120bc700      vioif0_txrx/1 vioif0_txrx
0       97 3   0       200   ffffd800120bc2c0      vioif0_txrx/0 vioif0_txrx
0       30 3   0       200   ffffd80010d766c0           scsibus0 sccomp
0       29 3   0       200   ffffd80010d76280               pms0 pmsreset
0       28 3   1       200   ffffd80010cbcac0            xcall/1 xcall
0       27 1   1       200   ffffd80010cbc680          softser/1
0       26 1   1       200   ffffd80010cbc240          softclk/1
0       25 1   1       200   ffffd80010cb9a80          softbio/1
0       24 1   1       200   ffffd80010cb9640          softnet/1
0       23 1   1       201   ffffd80010cb9200             idle/1
0       22 3   1       200   ffffd8000fb56a40           lnxsyswq lnxsyswq
0       21 3   1       200   ffffd8000fb56600           lnxubdwq lnxubdwq
0       20 3   1       200   ffffd8000fb561c0           lnxpwrwq lnxpwrwq
0       19 3   1       200   ffffd8000fb55a00           lnxlngwq lnxlngwq
0       18 3   1       200   ffffd8000fb555c0           lnxhipwq lnxhipwq
0       17 3   1       200   ffffd8000fb55180           lnxrcugc lnxrcugc
0       16 3   0       200   ffffd8000fb4e9c0             sysmon smtaskq
0       15 3   0       200   ffffd8000fb4e580         pmfsuspend pmfsuspend
0       14 3   0       200   ffffd8000fb4e140           pmfevent pmfevent
0       13 3   0       200   ffffd8000fb49980         sopendfree sopendfr
0       12 2   0       200   ffffd8000fb49540             ifwdog
0       11 3   0       200   ffffd8000fb49100            iflnkst iflnkst
0       10 3   0       200   ffffd8000fb3c940           nfssilly nfssilly
0        9 3   0       200   ffffd8000fb3c500             vdrain vdrain
0        8 3   1       200   ffffd8000fb3c0c0          modunload mod_unld
0        7 3   0       200   ffffd8000fb33900            xcall/0 xcall
0        6 1   0       200   ffffd8000fb334c0          softser/0
0        5 1   0       200   ffffd8000fb33080          softclk/0
0        4 1   0       200   ffffd8000fb318c0          softbio/0
0        3 1   0       200   ffffd8000fb31480          softnet/0
0        2 1   0       201   ffffd8000fb31040             idle/0
0        0 3   1       240   ffffffff8334b900            swapper tstile
[Locks tracked through LWPs]

****** LWP 3873.5890 (syz-executor.1) @ 0xffffd80014592240, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80014592240 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 7047.10938 (syz-executor.1) @ 0xffffd800148be9c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800148be9c0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 27644.28047 (syz-executor.1) @ 0xffffd800148be580, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd800148be580 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 5075.5076 (syz-executor.1) @ 0xffffd80012ce95c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012ce95c0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 18061.4712 (syz-executor.1) @ 0xffffd80012b7a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012b7a100 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 23281.18334 (syz-executor.1) @ 0xffffd8001481e900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001481e900 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 23281.24123 (syz-executor.1) @ 0xffffd80012bf8a40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012bf8a40 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 22500.23636 (syz-executor.1) @ 0xffffd80014046980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80014046980 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 28218.20113 (syz-executor.1) @ 0xffffd8001423e740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001423e740 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 18934.18934 (syz-executor.2) @ 0xffffd80012ca6480, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x392 sys/kern/kern_fork.c:366)
lock address : ffffd8001346cad0
type         : sleep/adaptive
initialized  : netbsd:fork1+0x392
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012ca6480 last held: 0xffffd80012ca6480
last locked* : netbsd:exit1+0x2f2
unlocked     : netbsd:execve_runproc+0x22c1
owner/count  : 0xffffd80012ca6480 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 14491.19095 (syz-executor.1) @ 0xffffd80012c13640, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012c13640 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 18835.19176 (syz-executor.1) @ 0xffffd80014676bc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80014676bc0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 19490.22576 (syz-executor.1) @ 0xffffd8001345e500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001345e500 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 18332.18863 (syz-executor.1) @ 0xffffd80012d19ac0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012d19ac0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 18218.18851 (syz-executor.1) @ 0xffffd80012ad10c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012ad10c0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 18068.16541 (syz-executor.1) @ 0xffffd800143f89c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd800143f89c0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 9365.9611 (syz-executor.3) @ 0xffffd80013358100, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:config_init+0x54 sys/kern/subr_autoconf.c:366)
lock address : netbsd:config_misc_lock
type         : sleep/adaptive
initialized  : netbsd:config_init+0x54
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffd80013358100 last held: 000000000000000000
last locked  : netbsd:device_lookup_acquire+0x2c
unlocked*    : netbsd:device_lookup_acquire+0x1cb
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 4091.9889 (syz-executor.1) @ 0xffffd8001423e300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001423e300 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2808.2628 (syz-executor.1) @ 0xffffd80012ca68c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012ca68c0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2808.3672 (syz-executor.1) @ 0xffffd8001429dbc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001429dbc0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2706.2547 (syz-executor.1) @ 0xffffd80012d83040, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012d83040 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2706.2554 (syz-executor.1) @ 0xffffd8001429d780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001429d780 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2454.7679 (syz-executor.1) @ 0xffffd80014225700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80014225700 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2149.2605 (syz-executor.1) @ 0xffffd80013e0dac0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80013e0dac0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 1946.7344 (syz-executor.1) @ 0xffffd80012a12300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012a12300 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 1946.3016 (syz-executor.1) @ 0xffffd80012d0ea80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012d0ea80 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 1790.1773 (syz-executor.1) @ 0xffffd800134488c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800134488c0 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 5707.1899 (syz-executor.1) @ 0xffffd80014051580, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80014051580 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 2135.5456 (syz-executor.1) @ 0xffffd800134a1a00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800134a1a00 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 828.5580 (syz-executor.1) @ 0xffffd80012c13a80, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283)
lock address : ffffd800126a76f0
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0x129
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  1
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffd80012c13a80 last held: 0xffffd80012c13a80
last locked* : netbsd:vhci_usb_detach+0x115
unlocked     : netbsd:vhci_fd_read+0x475
owner field  : 0xffffd80012c13a80 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffd800128d9a40

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012c13a80 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 828.577 (syz-executor.1) @ 0xffffd8001345e940, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd8001345e940 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

****** LWP 1236.1382 (syz-fuzzer) @ 0xffffd80013e31b00, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:filedesc_ctor+0x37 sys/kern/kern_descrip.c:1355)
lock address : ffffd80013398240
type         : sleep/adaptive
initialized  : netbsd:filedesc_ctor+0x37
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80013e31b00 last held: 0xffffd80013e31b00
last locked* : netbsd:kevent1+0x1e7d
unlocked     : netbsd:fd_close+0x33c
owner field  : 0xffffd80013e31b00 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffd800126eabc0

*** Locks wanted:

* Lock 0 (initialized at netbsd:kevent1+0x2e4 knote_alloc sys/kern/kern_event.c:149 [inline])
* Lock 0 (initialized at netbsd:kevent1+0x2e4 kqueue_register sys/kern/kern_event.c:1904 [inline])
* Lock 0 (initialized at netbsd:kevent1+0x2e4 sys/kern/kern_event.c:1852)
lock address : ffffd800143c4d90
type         : sleep/adaptive
initialized  : netbsd:kevent1+0x2e4
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  1
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffd80013e31b00 last held: 000000000000000000
last locked  : netbsd:kevent1+0x2645
unlocked*    : netbsd:kevent1+0x265b
owner field  : 0xffffd80013e31b00 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 1236.830 (syz-fuzzer) @ 0xffffd80013cff1c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:pool_init+0xa66 sys/kern/subr_pool.c:981)
lock address : netbsd:turnstile_pool+0xb0
type         : sleep/adaptive
initialized  : netbsd:pool_init+0xa66
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffd80013cff1c0 last held: 0xffffd80013cff1c0
last locked* : netbsd:pool_put+0x77
unlocked     : netbsd:pool_put+0x18d
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1239.1239 (sshd) @ 0xffffd80012ad1500, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffffd80012a85c00
type         : sleep/adaptive
initialized  : netbsd:amap_ctor+0x39
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012ad1500 last held: 0xffffd80012ad1500
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked     : netbsd:uvm_fault_upper_enter+0x366
owner/count  : 0xffffd80012ad1500 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffd8001339b180
type         : sleep/adaptive
initialized  : netbsd:pmap_ctor+0x93
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  1
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012ad1500 last held: 000000000000000000
last locked  : netbsd:pmap_extract+0xde
unlocked*    : netbsd:pmap_extract+0x345
owner field  : 0xffffd80012ad1500 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 1248.1248 (getty) @ 0xffffd800126eb480, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x392 sys/kern/kern_fork.c:366)
lock address : ffffd8001348ae90
type         : sleep/adaptive
initialized  : netbsd:fork1+0x392
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800126eb480 last held: 0xffffd800126eb480
last locked* : netbsd:exit1+0x2f2
unlocked     : netbsd:execve_runproc+0x22c1
owner/count  : 0xffffd800126eb480 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:amap_ctor+0x112 sys/uvm/uvm_amap.c:270)
lock address : ffffd80013cc4040
type         : sleep/adaptive
initialized  : netbsd:amap_ctor+0x112
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800126eb480 last held: 0xffffd800126eb480
last locked* : netbsd:amap_unref+0x35
unlocked     : netbsd:amap_swap_off+0x75d
owner/count  : 0xffffd800126eb480 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1225.1225 (getty) @ 0xffffd80012a12b80, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x392 sys/kern/kern_fork.c:366)
lock address : ffffd80012a2a390
type         : sleep/adaptive
initialized  : netbsd:fork1+0x392
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012a12b80 last held: 0xffffd80012a12b80
last locked* : netbsd:exit1+0x2f2
unlocked     : netbsd:execve_runproc+0x22c1
owner/count  : 0xffffd80012a12b80 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)
lock address : ffffd80013ce1280
type         : sleep/adaptive
initialized  : netbsd:vcache_alloc+0x3e
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012a12b80 last held: 0xffffd80012a12b80
last locked* : netbsd:genfs_lock+0x15d
unlocked     : netbsd:genfs_unlock+0x2a
owner/count  : 0xffffd80012a12b80 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type         : sleep/adaptive
initialized  : netbsd:procinit+0x5c
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012a12b80 last held: 0xffffd80012a12b80
last locked* : netbsd:spec_close+0x144
unlocked     : netbsd:exit1+0x1302
owner field  : 0xffffd80012a12b80 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 5 waiting writers: 0xffffffff8334b900 0xffffd80013cff1c0 0xffffd800140519c0 0xffffd8001343e340 0xffffd800149c9b00

*** Locks wanted: none

****** LWP 747.747 (dhcpcd) @ 0xffffd80012cd3540, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012cd3540 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffd80012c7ab80, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012c7ab80 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffd80012db0900, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012db0900 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffd80012db04c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd80012db04c0 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.31 (usb1) @ 0xffffd800128d9a40, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280)
lock address : ffffd800126a74c8
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0xe1
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                 29
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800128d9a40 last held: 0xffffd800128d9a40
last locked* : netbsd:usbd_transfer+0x23e
unlocked     : netbsd:usb_transfer_complete+0x4e7
owner field  : 0xffffd800128d9a40 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 29 waiting writers: 0xffffd80012c13a80 0xffffd8001345e940 0xffffd800134a1a00 0xffffd80014051580 0xffffd800134488c0 0xffffd80012a12300 0xffffd80012d0ea80 0xffffd80013e0dac0 0xffffd80014225700 0xffffd80012d83040 0xffffd8001429d780 0xffffd80012ca68c0 0xffffd8001429dbc0 0xffffd8001423e300 0xffffd800143f89c0 0xffffd80012ad10c0 0xffffd80012d19ac0 0xffffd8001345e500 0xffffd80014676bc0 0xffffd80012c13640 0xffffd8001423e740 0xffffd80014046980 0xffffd8001481e900 0xffffd80012bf8a40 0xffffd80012b7a100 0xffffd80012ce95c0 0xffffd800148be580 0xffffd800148be9c0 0xffffd80014592240

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283)
lock address : ffffd800126a76f0
type         : sleep/adaptive
initialized  : netbsd:vhci_attach+0x129
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  1
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffd800128d9a40 last held: 0xffffd80012c13a80
last locked* : netbsd:vhci_usb_detach+0x115
unlocked     : netbsd:vhci_fd_read+0x475
owner field  : 0xffffd80012c13a80 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffd800128d9a40

****** LWP 0.16 (sysmon) @ 0xffffd8000fb4e9c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8000fb4e9c0 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffd8000fb49100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8000fb49100 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffd8000fb33080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8000fb33080 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8334b900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffffff8334b900 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type         : spin
initialized  : netbsd:kprintf_init+0x61
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012a12b80 last held: 0xffffd80012a12b80
last locked* : netbsd:kprintf_lock+0x33
unlocked     : netbsd:kprintf_unlock+0x53
owner field  : 0x0000000000000800 wait/spin:                0/1

              PAGE FLAG   PQ            UOBJECT              UANON
0xffffd80000017180 0041 00000000                0x0                0x0
0xffffd80000017200 0041 00000000                0x0                0x0
0xffffd80000017280 0041 00000000                0x0                0x0
0xffffd80000017300 0041 00000000                0x0                0x0
0xffffd80000017380 0041 00000000                0x0                0x0
0xffffd80000017400 0041 00000000                0x0                0x0
0xffffd80000017480 0041 00000000                0x0                0x0
0xffffd80000017500 0041 00000000                0x0                0x0
0xffffd80000017580 0041 00000000                0x0                0x0
0xffffd80000017600 0041 00000000                0x0                0x0
0xffffd80000017680 0041 00000000                0x0                0x0
0xffffd80000017700 0041 00000000                0x0                0x0
0xffffd80000017780 0041 00000000                0x0                0x0
0xffffd80000017800 0041 00000000                0x0                0x0
0xffffd80000017880 0041 00000000                0x0                0x0
0xffffd80000017900 0041 00000000                0x0                0x0
0xffffd80000017980 0041 00000000                0x0                0x0
0xffffd80000017a00 0041 00000000                0x0                0x0
0xffffd80000017a80 0041 00000000                0x0                0x0
0xffffd80000017b00 0041 00000000                0x0                0x0
0xffffd80000017b80 0041 00000000                0x0                0x0
0xffffd80000017c00 0041 00000000                0x0                0x0
0xffffd80000017c80 0041 00000000                0x0                0x0
0xffffd80000017d00 0041 00000000                0x0                0x0
0xffffd80000017d80 0041 00000000                0x0                0x0
0xffffd80000017e00 0041 00000000                0x0                0x0
0xffffd80000017e80 0041 00000000                0x0                0x0
0xffffd80000017f00 0041 00000000                0x0                0x0
0xffffd80000017f80 0041 00000000                0x0                0x0
0xffffd80000018000 0041 00000000                0x0                0x0
0xffffd80000018080 0041 00000000                0x0                0x0
0xffffd80000018100 0041 00000000                0x0                0x0
0xffffd80000018180 0041 00000000                0x0                0x0
0xffffd80000018200 0041 00000000                0x0                0x0
0xffffd80000018280 0041 00000000                0x0                0x0
0xffffd80000018300 0041 00000000                0x0                0x0
0xffffd80000018380 0041 00000000                0x0                0x0
0xffffd80000018400 0041 00000000                0x0                0x0
0xffffd80000018480 0041 00000000                0x0                0x0
0xffffd80000018500 0041 00000000                0x0                0x0
0xffffd80000018580 0041 00000000                0x0                0x0
0xffffd80000018600 0041 00000000                0x0                0x0
0xffffd80000018680 0041 00000000                0x0                0x0
0xffffd80000018700 0041 00000000                0x0                0x0
0xffffd80000018780 0041 00000000                0x0                0x0
0xffffd80000018800 0041 00000000                0x0                0x0
0xffffd80000018880 0041 00000000                0x0                0x0
0xffffd80000018900 0041 00000000                0x0                0x0
0xffffd80000018980 0041 00000000                0x0                0x0
0xffffd80000018a00 0041 00000000                0x0                0x0
0xffffd80000018a80 0041 00000000                0x0                0x0
0xffffd80000018b00 0041 00000000                0x0                0x0
0xffffd80000018b80 0041 00000000                0x0                0x0
0xffffd80000018c00 0041 00000000                0x0                0x0
0xffffd80000018c80 0041 00000000                0x0                0x0
0xffffd80000018d00 0041 00000000                0x0                0x0
0xffffd80000018d80 0041 00000000                0x0                0x0
0xffffd80000018e00 0041 00000000                0x0                0x0
0xffffd80000018e80 0041 00000000                0x0                0x0
0xffffd80000018f00 0041 00000000                0x0                0x0
0xffffd80000018f80 0041 00000000                0x0                0x0
0xffffd80000019000 0041 00000000                0x0                0x0
0xffffd80000019080 0041 00000000                0x0                0x0
0xffffd80000019100 0041 00000000                0x0                0x0
0xffffd80000019180 0041 00000000                0x0                0x0
0xffffd80000019200 0041 00000000                0x0                0x0
0xffffd80000019280 0041 00000000                0x0                0x0
0xffffd80000019300 0041 00000000                0x0                0x0
0xffffd80000019380 0041 00000000                0x0                0x0
0xffffd80000019400 0041 00000000                0x0                0x0
0xffffd80000019480 0041 00000000                0x0                0x0
0xffffd80000019500 0041 00000000                0x0                0x0
0xffffd80000019580 0041 00000000                0x0                0x0
0xffffd80000019600 0041 00000000                0x0                0x0
0xffffd80000019680 0041 00000000                0x0                0x0
0xffffd80000019700 0041 00000000                0x0                0x0
0xffffd80000019780 0041 00000000                0x0                0x0
0xffffd80000019800 0041 00000000                0x0                0x0
0xffffd80000019880 0041 00000000                0x0                0x0
0xffffd80000019900 0041 00000000                0x0                0x0
0xffffd80000019980 0041 00000000                0x0                0x0
0xffffd80000019a00 0041 00000000                0x0                0x0
0xffffd80000019a80 0041 00000000                0x0                0x0
0xffffd80000019b00 0041 00000000                0x0                0x0
0xffffd80000019b80 0041 00000000                0x0                0x0
0xffffd80000019c00 0041 00000000                0x0                0x0
0xffffd80000019c80 0041 00000000                0x0                0x0
0xffffd80000019d00 0041 00000000                0x0                0x0
0xffffd80000019d80 0041 00000000                0x0                0x0
0xffffd80000019e00 0041 00000000                0x0                0x0
0xffffd80000019e80 0041 00000000                0x0                0x0
0xffffd80000019f00 0041 00000000                0x0                0x0
0xffffd80000019f80 0041 00000000                0x0                0x0
0xffffd8000001a000 0041 00000000                0x0                0x0
0xffffd8000001a080 0041 00000000                0x0                0x0
0xffffd8000001a100 0041 00000000                0x0                0x0
0xffffd8000001a180 0041 00000000                0x0                0x0
0xffffd8000001a200 0041 00000000                0x0                0x0
0xffffd8000001a280 0041 00000000                0x0                0x0
0xffffd8000001a300 0041 00000000                0x0                0x0
0xffffd8000001a380 0041 00000000                0x0                0x0
0xffffd8000001a400 0041 00000000                0x0                0x0
0xffffd8000001a480 0041 00000000                0x0                0x0
0xffffd8000001a500 0041 00000000                0x0                0x0
0xffffd8000001a580 0041 00000000                0x0                0x0
0xffffd8000001a600 0041 00000000                0x0                0x0
0xffffd8000001a680 0041 00000000                0x0                0x0
0xffffd8000001a700 0041 00000000                0x0                0x0
0xffffd8000001a780 0041 00000000                0x0                0x0
0xffffd8000001a800 0041 00000000                0x0                0x0
0xffffd8000001a880 0041 00000000                0x0                0x0
0xffffd8000001a900 0041 00000000                0x0                0x0
0xffffd8000001a980 0041 00000000                0x0                0x0
0xffffd8000001aa00 0041 00000000                0x0                0x0
0xffffd8000001aa80 0041 00000000                0x0                0x0
0xffffd8000001ab00 0041 00000000                0x0                0x0
0xffffd8000001ab80 0041 00000000                0x0                0x0
0xffffd8000001ac00 0041 00000000                0x0                0x0
0xffffd8000001ac80 0041 00000000                0x0                0x0
0xffffd8000001ad00 0041 00000000                0x0                0x0
0xffffd8000001ad80 0041 00000000                0x0                0x0
0xffffd8000001ae00 0041 00000000                0x0                0x0
0xffffd8000001ae80 0041 00000000                0x0                0x0
0xffffd8000001af00 0041 00000000                0x0                0x0
0xffffd8000001af80 0041 00000000                0x0                0x0
0xffffd8000001b000 0041 00000000                0x0                0x0
0xffffd8000001b080 0041 00000000                0x0                0x0
0xffffd8000001b100 0041 00000000                0x0                0x0
0xffffd8000001b180 0041 00000000                0x0                0x0
0xffffd8000001b200 0041 00000000                0x0                0x0

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/23 14:52 netbsd 21b18fa1a8ce 79782afc .config console log report [disk image] [netbsd.gdb] ci2-netbsd panic: spec_close: spurious pgrp ref
2023/05/24 13:32 netbsd 42d3fefefe6a 4bce1a3e .config console log report [disk image] [netbsd.gdb] ci2-netbsd panic: spec_close: spurious pgrp ref
2023/04/17 12:09 netbsd 5d7f68298a26 c6ec7083 .config console log report [disk image] [netbsd.gdb] ci2-netbsd-kubsan panic: spec_close: spurious pgrp ref
2023/03/07 17:28 netbsd 4bb1beb1fdea d7ea8bc4 .config console log report ci2-netbsd-kubsan panic: spec_close: spurious pgrp ref
2023/01/27 22:38 netbsd b8e6dcd5d44a 9dfcf09c .config console log report ci2-netbsd panic: spec_close: spurious pgrp ref
* Struck through repros no longer work on HEAD.