syzbot


ASan: Unauthorized Access in sacheck

Status: auto-obsoleted due to no activity on 2024/09/17 00:10
Reported-by: syzbot+52ee6fd0cafe0ce27141@syzkaller.appspotmail.com
First crash: 168d, last: 155d

Sample crash report:
[ 329.5960973] panic: ASan: Unauthorized Access In 0xffffffff8190775e: Addr 0xffffbb8014221981 [1 byte, read, RedZonePartial]

[ 329.6136277] cpu0: Begin traceback...
[ 329.6760314] vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288
[ 329.8660332] panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084
[ 330.0260339] kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 330.0260339] kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201
[ 330.2460405] __asan_load1() at netbsd:__asan_load1+0x72 sys/kern/subr_asan.c:1205
[ 330.4160377] sacheck() at netbsd:sacheck+0x1e sys/nfs/nfs_export.c:614
[ 330.5560386] export() at netbsd:export+0x439 hang_addrlist sys/nfs/nfs_export.c:534 [inline]
[ 330.5560386] export() at netbsd:export+0x439 sys/nfs/nfs_export.c:714
[ 330.6960346] mountd_set_exports_list() at netbsd:mountd_set_exports_list+0xa8a sys/nfs/nfs_export.c:306
[ 330.8360433] nfs_export_update_30() at netbsd:nfs_export_update_30+0xfe sys/nfs/nfs_export.c:448
[ 330.9760435] vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 sys/kern/vfs_hooks.c:138
[ 331.1160360] do_sys_mount() at netbsd:do_sys_mount+0xbf2 mount_update sys/kern/vfs_syscalls.c:391 [inline]
[ 331.1160360] do_sys_mount() at netbsd:do_sys_mount+0xbf2 sys/kern/vfs_syscalls.c:612
[ 331.2560351] sys___mount50() at netbsd:sys___mount50+0x89 sys/kern/vfs_syscalls.c:537
[ 331.3960401] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 331.3960401] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 331.5360515] syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline]
[ 331.5360515] syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 331.5360515] syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137
[ 331.5660381] --- syscall (number 410 via SYS_syscall) ---
[ 331.6060371] netbsd:syscall+0x35c:
[ 331.6060371] cpu0: End traceback...
[ 331.6160483] fatal breakpoint trap in supervisor mode
[ 331.6160483] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x411438 ilevel 0 rsp 0xffffbb82516dd660
[ 331.6317350] curlwp 0xffffbb8012de2100 pid 1418.1179 lowest kstack 0xffffbb82516d62c0
Stopped in pid 1418.1179 (syz-executor.5) at    netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288
panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084
kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201
__asan_load1() at netbsd:__asan_load1+0x72 sys/kern/subr_asan.c:1205
sacheck() at netbsd:sacheck+0x1e sys/nfs/nfs_export.c:614
export() at netbsd:export+0x439 hang_addrlist sys/nfs/nfs_export.c:534 [inline]
export() at netbsd:export+0x439 sys/nfs/nfs_export.c:714
mountd_set_exports_list() at netbsd:mountd_set_exports_list+0xa8a sys/nfs/nfs_export.c:306
nfs_export_update_30() at netbsd:nfs_export_update_30+0xfe sys/nfs/nfs_export.c:448
vfs_hooks_reexport() at netbsd:vfs_hooks_reexport+0x69 sys/kern/vfs_hooks.c:138
do_sys_mount() at netbsd:do_sys_mount+0xbf2 mount_update sys/kern/vfs_syscalls.c:391 [inline]
do_sys_mount() at netbsd:do_sys_mount+0xbf2 sys/kern/vfs_syscalls.c:612
sys___mount50() at netbsd:sys___mount50+0x89 sys/kern/vfs_syscalls.c:537
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137
--- syscall (number 410 via SYS_syscall) ---
netbsd:syscall+0x35c:
Panic string: ASan: Unauthorized Access In 0xffffffff8190775e: Addr 0xffffbb8014221981 [1 byte, read, RedZonePartial]

PID     LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
2784   2784 2   1         0   ffffbb8012a1f740     syz-executor.4
1437   1437 3   0       180   ffffbb8012a53780     syz-executor.0 pipe_rd
1418 > 1179 7   0         0   ffffbb8012de2100     syz-executor.5
1418   1505 3   0       180   ffffbb8012c236c0     syz-executor.5 parked
1418   1418 2   0  10000000   ffffbb8012c8e8c0     syz-executor.5
1601   1601 2   0         0   ffffbb8012d166c0           ifconfig
3533   3533 3   1       180   ffffbb80133ae680     syz-executor.3 wait
3017   3017 2   1         0   ffffbb8012bb4180     syz-executor.1
1433   1433 3   0       180   ffffbb80140b1580     syz-executor.2 pipe_rd
1430   1430 2   1       140   ffffbb80126d9340     syz-executor.5
2480   2480 3   0       180   ffffbb8012c23280     syz-executor.1 parked
1740   2137 3   0   1100000   ffffbb8012c55b80     syz-executor.1 vfork
1740   1740 2   1  11000040   ffffbb8012c55300     syz-executor.1
922     922 3   1       180   ffffbb8013fd7bc0     syz-executor.3 parked
760     760 3   1       180   ffffbb8012bda1c0     syz-executor.2 parked
1340   1340 3   1       180   ffffbb8013e21ac0     syz-executor.5 parked
556     556 3   1       180   ffffbb80140384c0     syz-executor.4 parked
2383   2383 3   1       180   ffffbb8012c11ac0     syz-executor.1 parked
641    2210 3   1   1100000   ffffbb8013365180     syz-executor.1 vfork
641     641 2   1  11000040   ffffbb8012d92080     syz-executor.1
505     505 3   1       180   ffffbb8012b77540     syz-executor.1 parked
949     949 3   1       180   ffffbb8012d23b40     syz-executor.0 parked
2007   2007 3   1       180   ffffbb8012a53bc0     syz-executor.5 parked
932     588 2   1         0   ffffbb801337c1c0         syz-fuzzer
932     459 3   0       180   ffffbb8012ce8a40         syz-fuzzer wait
932    1202 3   0       180   ffffbb8013df1a80         syz-fuzzer wait
932     942 3   1       180   ffffbb8012bfca80         syz-fuzzer parked
932    1235 3   1       180   ffffbb8012bfc640         syz-fuzzer wait
932    1240 3   0       180   ffffbb8013460980         syz-fuzzer parked
932    1214 3   1       180   ffffbb8013df1200         syz-fuzzer parked
932    1233 3   1       180   ffffbb8013dc91c0         syz-fuzzer parked
932    1197 3   1       180   ffffbb8013457940         syz-fuzzer parked
932     449 3   0       180   ffffbb8013457500         syz-fuzzer parked
932    1376 3   0       180   ffffbb80134570c0         syz-fuzzer wait
932    1081 3   0       180   ffffbb80129bf280         syz-fuzzer parked
932    1241 3   1       180   ffffbb8013393200         syz-fuzzer parked
932     932 3   1       180   ffffbb8012bda600         syz-fuzzer wait
1073   1073 3   1       180   ffffbb8012bfc200               sshd select
1242   1242 3   0       180   ffffbb8013450900              getty nanoslp
1082   1082 3   0       180   ffffbb8012ac4500              getty nanoslp
1195   1195 3   0       180   ffffbb8012b77100              getty nanoslp
1238   1238 3   1       180   ffffbb8012a53340              getty ttyraw
801     801 3   0       180   ffffbb801343a780               sshd select
956     956 3   0       180   ffffbb801337c600             powerd kqueue
695     695 3   0       180   ffffbb80134458c0            syslogd kqueue
565     565 3   0       180   ffffbb8012cb9500             dhcpcd poll
603     603 3   0       180   ffffbb8012cdc180             dhcpcd poll
746     746 3   0       180   ffffbb8012cb90c0             dhcpcd poll
606     606 3   0       180   ffffbb8012ca8080             dhcpcd poll
487     487 3   1       180   ffffbb8012daa940             dhcpcd poll
488     488 3   0       180   ffffbb8012daa500             dhcpcd poll
485     485 3   1       180   ffffbb8012daa0c0             dhcpcd poll
1         1 3   1       180   ffffbb8012870180               init wait
0      3165 3   0       200   ffffbb8012bdaa40             ktrace ktrwait
0      1130 3   0       200   ffffbb8013dc9a40             ktrace ktrwait
0      1325 3   1       200   ffffbb8014038080            swapiod swapiod
0      1462 5   0       200   ffffbb8014045500           (zombie)
0       639 3   0       200   ffffbb80129bf6c0            physiod physiod
0       196 3   0       200   ffffbb80129c1700          pooldrain pooldrain
0       195 2   1       240   ffffbb80129c12c0            ioflush
0       194 3   1       200   ffffbb80129bfb00           pgdaemon pgdaemon
0       167 3   0       200   ffffbb8012976ac0               usb7 usbevt
0       172 3   0       200   ffffbb8012976680               usb6 usbevt
0       170 3   0       200   ffffbb8012976240               usb5 usbevt
0       168 3   0       200   ffffbb801291ea80               usb4 usbevt
0       166 3   0       200   ffffbb801291e640               usb3 usbevt
0       165 3   0       200   ffffbb801291e200               usb2 usbevt
0        31 3   0       200   ffffbb80128caa40               usb1 usbevt
0        63 3   0       200   ffffbb80128ca600               usb0 usbevt
0       126 3   0       200   ffffbb80128ca1c0         usbtask-dr usbtsk
0       125 3   1       200   ffffbb8012870a00         usbtask-hc usbtsk
0       124 3   0       200   ffffbb8010d66b00          swwreboot swwreboot
0       123 2   1       240   ffffbb80128705c0             npfgc0
0       122 3   0       200   ffffbb80128669c0            rt_free rt_free
0       121 3   0       200   ffffbb8012866580              unpgc unpgc
0       120 2   0       200   ffffbb8012866140    key_timehandler
0       119 3   1       200   ffffbb8012703980    icmp6_wqinput/1 icmp6_wqinput
0       118 3   0       200   ffffbb8012703540    icmp6_wqinput/0 icmp6_wqinput
0       117 2   0       200   ffffbb8012703100          nd6_timer
0       116 3   1       200   ffffbb80126fc940    carp6_wqinput/1 carp6_wqinput
0       115 3   0       200   ffffbb80126fc500    carp6_wqinput/0 carp6_wqinput
0       114 3   1       200   ffffbb80126fc0c0     carp_wqinput/1 carp_wqinput
0       113 3   0       200   ffffbb80126ed900     carp_wqinput/0 carp_wqinput
0       112 3   1       200   ffffbb80126ed4c0     icmp_wqinput/1 icmp_wqinput
0       111 3   0       200   ffffbb80126ed080     icmp_wqinput/0 icmp_wqinput
0       110 2   0       200   ffffbb80126db040           rt_timer
0       109 3   0       200   ffffbb80126db8c0        vmem_rehash vmem_rehash
0       100 3   0       200   ffffbb80126d7300          entbutler entropy
0        99 3   1       200   ffffbb80120bdb40              viomb balloon
0        98 3   1       200   ffffbb80120bd700      vioif0_txrx/1 vioif0_txrx
0        97 3   0       200   ffffbb80120bd2c0      vioif0_txrx/0 vioif0_txrx
0        30 3   0       200   ffffbb8010d666c0           scsibus0 sccomp
0        29 3   0       200   ffffbb8010d66280               pms0 pmsreset
0        28 3   1       200   ffffbb8010cacac0            xcall/1 xcall
0        27 1   1       200   ffffbb8010cac680          softser/1
0        26 1   1       200   ffffbb8010cac240          softclk/1
0        25 1   1       200   ffffbb8010ca9a80          softbio/1
0        24 1   1       200   ffffbb8010ca9640          softnet/1
0        23 1   1       201   ffffbb8010ca9200             idle/1
0        22 3   0       200   ffffbb800fb55a40           lnxsyswq lnxsyswq
0        21 3   0       200   ffffbb800fb55600           lnxubdwq lnxubdwq
0        20 3   0       200   ffffbb800fb551c0           lnxpwrwq lnxpwrwq
0        19 3   1       200   ffffbb800fb54a00           lnxlngwq lnxlngwq
0        18 3   0       200   ffffbb800fb545c0           lnxhipwq lnxhipwq
0        17 3   0       200   ffffbb800fb54180           lnxrcugc lnxrcugc
0        16 3   0       200   ffffbb800fb4d9c0             sysmon smtaskq
0        15 3   0       200   ffffbb800fb4d580         pmfsuspend pmfsuspend
0        14 3   0       200   ffffbb800fb4d140           pmfevent pmfevent
0        13 3   0       200   ffffbb800fb4a980         sopendfree sopendfr
0        12 3   0       200   ffffbb800fb4a540             ifwdog ifwdog
0        11 3   1       200   ffffbb800fb4a100            iflnkst iflnkst
0        10 3   0       200   ffffbb800fb3b940           nfssilly nfssilly
0         9 3   0       200   ffffbb800fb3b500           pooldisp pooldisp
0         8 3   1       200   ffffbb800fb3b0c0          modunload mod_unld
0         7 3   0       200   ffffbb800fb32900            xcall/0 xcall
0         6 1   0       200   ffffbb800fb324c0          softser/0
0         5 1   0       200   ffffbb800fb32080          softclk/0
0         4 1   0       200   ffffbb800fb308c0          softbio/0
0         3 1   0       200   ffffbb800fb30480          softnet/0
0         2 1   0       201   ffffbb800fb30040             idle/0
0    >    0 7   1       240   ffffffff83350000            swapper
[Locks tracked through LWPs]

****** LWP 2784.2784 (syz-executor.4) @ 0xffffbb8012a1f740, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x3f sys/kern/subr_kcov.c:461)
lock address : ffffbb80142f6880
type         : sleep/adaptive
initialized  : netbsd:kcov_open+0x3f
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbb8012a1f740 last held: 0xffffbb8012a1f740
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked     : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_obj_init+0xa0 sys/uvm/uvm_object.c:70)
lock address : ffffbb8013e601c0
type         : sleep/adaptive
initialized  : netbsd:uvm_obj_init+0xa0
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  1
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbb8012a1f740 last held: 000000000000000000
last locked  : netbsd:uvm_fault_internal+0x1801
unlocked*    : netbsd:uao_get+0x388
owner/count  : 000000000000000000 flags    : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1418.1179 (syz-executor.5) @ 0xffffbb8012de2100, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fstrans_init+0x20 sys/kern/vfs_trans.c:136)
lock address : netbsd:vfs_suspend_lock
type         : sleep/adaptive
initialized  : netbsd:fstrans_init+0x20
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012de2100 last held: 0xffffbb8012de2100
last locked* : netbsd:vfs_suspend+0x1a7
unlocked     : netbsd:mount_domount+0xb91
owner field  : 0xffffbb8012de2100 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vfs_mountalloc+0xbc sys/kern/vfs_mount.c:163)
lock address : ffffbb8013e52280
type         : sleep/adaptive
initialized  : netbsd:vfs_mountalloc+0xbc
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012de2100 last held: 0xffffbb8012de2100
last locked* : netbsd:do_sys_mount+0xab9
unlocked     : netbsd:mount_domount+0x847
owner field  : 0xffffbb8012de2100 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:vfsinit+0x27f sys/kern/vfs_init.c:440)
lock address : netbsd:vfs_hooks_lock
type         : sleep/adaptive
initialized  : netbsd:vfsinit+0x27f
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012de2100 last held: 0xffffbb8012de2100
last locked* : netbsd:vfs_hooks_reexport+0x2c
unlocked     : netbsd:vfs_hooks_reexport+0xa0
owner field  : 0xffffbb8012de2100 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

* Lock 3 (initialized at netbsd:nfsserver_modcmd+0xdf sys/nfs/nfs_serv.c:125)
lock address : netbsd:netexport_lock
type         : sleep/adaptive
initialized  : netbsd:nfsserver_modcmd+0xdf
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012de2100 last held: 0xffffbb8012de2100
last locked* : netbsd:mountd_set_exports_list+0x350
unlocked     : netbsd:mountd_set_exports_list+0x4e3
owner/count  : 0xffffbb8012de2100 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1418.1505 (syz-executor.5) @ 0xffffbb8012c236c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012c236c0 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 1601.1601 (ifconfig) @ 0xffffbb8012d166c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012d166c0 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 3017.3017 (syz-executor.1) @ 0xffffbb8012bb4180, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366)
lock address : ffffbb8012c907d0
type         : sleep/adaptive
initialized  : netbsd:fork1+0x369
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffbb8012bb4180 last held: 0xffffbb8012bb4180
last locked* : netbsd:exit1+0x2e3
unlocked     : netbsd:execve_runproc+0x217f
owner/count  : 0xffffbb8012bb4180 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 603.603 (dhcpcd) @ 0xffffbb8012cdc180, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012cdc180 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 746.746 (dhcpcd) @ 0xffffbb8012cb90c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012cb90c0 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 488.488 (dhcpcd) @ 0xffffbb8012daa500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012daa500 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffbb8012daa0c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffbb8012daa0c0 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffbb8010cac240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffbb8010cac240 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffbb800fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffbb800fb4a100 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffbb800fb32080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb800fb32080 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83350000, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x1c
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffffff83350000 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type         : spin
initialized  : netbsd:kprintf_init+0x61
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffbb8012de2100 last held: 0xffffbb8012de2100
last locked* : netbsd:kprintf_lock+0x33
unlocked     : netbsd:kprintf_unlock+0x53
owner field  : 0x0000000000000800 wait/spin:                0/1

              PAGE FLAG   PQ            UOBJECT              UANON
0xffffbb8000017180 0041 00000000                0x0                0x0
0xffffbb8000017200 0041 00000000                0x0                0x0
0xffffbb8000017280 0041 00000000                0x0                0x0
0xffffbb8000017300 0041 00000000                0x0                0x0
0xffffbb8000017380 0041 00000000                0x0                0x0
0xffffbb8000017400 0041 00000000                0x0                0x0
0xffffbb8000017480 0041 00000000                0x0                0x0
0xffffbb8000017500 0041 00000000                0x0                0x0
0xffffbb8000017580 0041 00000000                0x0                0x0
0xffffbb8000017600 0041 00000000                0x0                0x0
0xffffbb8000017680 0041 00000000                0x0                0x0
0xffffbb8000017700 0041 00000000                0x0                0x0
0xffffbb8000017780 0041 00000000                0x0                0x0
0xffffbb8000017800 0041 00000000                0x0                0x0
0xffffbb8000017880 0041 00000000                0x0                0x0
0xffffbb8000017900 0041 00000000                0x0                0x0
0xffffbb8000017980 0041 00000000                0x0                0x0
0xffffbb8000017a00 0041 00000000                0x0                0x0
0xffffbb8000017a80 0041 00000000                0x0                0x0
0xffffbb8000017b00 0041 00000000                0x0                0x0
0xffffbb8000017b80 0041 00000000                0x0                0x0
0xffffbb8000017c00 0041 00000000                0x0                0x0
0xffffbb8000017c80 0041 00000000                0x0                0x0
0xffffbb8000017d00 0041 00000000                0x0                0x0
0xffffbb8000017d80 0041 00000000                0x0                0x0
0xffffbb8000017e00 0041 00000000                0x0                0x0
0xffffbb8000017e80 0041 00000000                0x0                0x0
0xffffbb8000017f00 0041 00000000                0x0                0x0
0xffffbb8000017f80 0041 00000000                0x0                0x0
0xffffbb8000018000 0041 00000000                0x0                0x0
0xffffbb8000018080 0041 00000000                0x0                0x0
0xffffbb8000018100 0041 00000000                0x0                0x0
0xffffbb8000018180 0041 00000000                0x0                0x0
0xffffbb8000018200 0041 00000000                0x0                0x0
0xffffbb8000018280 0041 00000000                0x0                0x0
0xffffbb8000018300 0041 00000000                0x0                0x0
0xffffbb8000018380 0041 00000000                0x0                0x0
0xffffbb8000018400 0041 00000000                0x0                0x0
0xffffbb8000018480 0041 00000000                0x0                0x0
0xffffbb8000018500 0041 00000000                0x0                0x0
0xffffbb8000018580 0041 00000000                0x0                0x0
0xffffbb8000018600 0041 00000000                0x0                0x0
0xffffbb8000018680 0041 00000000                0x0                0x0
0xffffbb8000018700 0041 00000000                0x0                0x0
0xffffbb8000018780 0041 00000000                0x0                0x0
0xffffbb8000018800 0041 00000000                0x0                0x0
0xffffbb8000018880 0041 00000000                0x0                0x0
0xffffbb8000018900 0041 00000000                0x0                0x0
0xffffbb8000018980 0041 00000000                0x0                0x0
0xffffbb8000018a00 0041 00000000                0x0                0x0
0xffffbb8000018a80 0041 00000000                0x0                0x0
0xffffbb8000018b00 0041 00000000                0x0                0x0
0xffffbb8000018b80 0041 00000000                0x0                0x0
0xffffbb8000018c00 0041 00000000                0x0                0x0
0xffffbb8000018c80 0041 00000000                0x0                0x0
0xffffbb8000018d00 0041 00000000                0x0                0x0
0xffffbb8000018d80 0041 00000000                0x0                0x0
0xffffbb8000018e00 0041 00000000                0x0                0x0
0xffffbb8000018e80 0041 00000000                0x0                0x0
0xffffbb8000018f00 0041 00000000                0x0                0x0
0xffffbb8000018f80 0041 00000000                0x0                0x0
0xffffbb8000019000 0041 00000000                0x0                0x0
0xffffbb8000019080 0041 00000000                0x0                0x0
0xffffbb8000019100 0041 00000000                0x0                0x0
0xffffbb8000019180 0041 00000000                0x0                0x0
0xffffbb8000019200 0041 00000000                0x0                0x0
0xffffbb8000019280 0041 00000000                0x0                0x0
0xffffbb8000019300 0041 00000000                0x0                0x0
0xffffbb8000019380 0041 00000000                0x0                0x0
0xffffbb8000019400 0041 00000000                0x0                0x0
0xffffbb8000019480 0041 00000000                0x0                0x0
0xffffbb8000019500 0041 00000000                0x0                0x0
0xffffbb8000019580 0041 00000000                0x0                0x0
0xffffbb8000019600 0041 00000000                0x0                0x0
0xffffbb8000019680 0041 00000000                0x0                0x0
0xffffbb8000019700 0041 00000000                0x0                0x0
0xffffbb8000019780 0041 00000000                0x0                0x0
0xffffbb8000019800 0041 00000000                0x0                0x0
0xffffbb8000019880 0041 00000000                0x0                0x0
0xffffbb8000019900 0041 00000000                0x0                0x0
0xffffbb8000019980 0041 00000000                0x0                0x0
0xffffbb8000019a00 0041 00000000                0x0                0x0
0xffffbb8000019a80 0041 00000000                0x0                0x0
0xffffbb8000019b00 0041 00000000                0x0                0x0
0xffffbb8000019b80 0041 00000000                0x0                0x0
0xffffbb8000019c00 0041 00000000                0x0                0x0
0xffffbb8000019c80 0041 00000000                0x0                0x0
0xffffbb8000019d00 0041 00000000                0x0                0x0
0xffffbb8000019d80 0041 00000000                0x0                0x0
0xffffbb8000019e00 0041 00000000                0x0                0x0
0xffffbb8000019e80 0041 00000000                0x0                0x0
0xffffbb8000019f00 0041 00000000                0x0                0x0
0xffffbb8000019f80 0041 00000000                0x0                0x0
0xffffbb800001a000 0041 00000000                0x0                0x0
0xffffbb800001a080 0041 00000000                0x0                0x0
0xffffbb800001a100 0041 00000000                0x0                0x0
0xffffbb800001a180 0041 00000000                0x0                0x0
0xffffbb800001a200 0041 00000000                0x0                0x0
0xffffbb800001a280 0041 00000000                0x0                0x0
0xffffbb800001a300 0041 00000000                0x0                0x0
0xffffbb800001a380 0041 00000000                0x0                0x0
0xffffbb800001a400 0041 00000000                0x0                0x0
0xffffbb800001a480 0041 00000000                0x0                0x0
0xffffbb800001a500 0041 00000000                0x0                0x0
0xffffbb800001a580 0041 00000000                0x0                0x0
0xffffbb800001a600 0041 00000000                0x0                0x0
0xffffbb800001a680 0041 00000000                0x0                0x0
0xffffbb800001a700 0041 00000000                0x0                0x0
0xffffbb800001a780 0041 00000000                0x0                0x0
0xffffbb800001a800 0041 00000000                0x0                0x0
0xffffbb800001a880 0041 00000000                0x0                0x0
0xffffbb800001a900 0041 00000000                0x0                0x0
0xffffbb800001a980 0041 00000000                0x0                0x0
0xffffbb800001aa00 0041 00000000                0x0                0x0
0xffffbb800001aa80 0041 00000000                0x0                0x0
0xffffbb800001ab00 0041 00000000                0x0                0x0
0xffffbb800001ab80 0041 00000000                0x0                0x0
0xffffbb800001ac00 0041 00000000                0x0                0x0
0xffffbb800001ac80 0041 00000000                0x0                0x0
0xffffbb800001ad00 0041 00000000                0x0                0x0
0xffffbb800001ad80 0041 00000000                0x0                0x0
0xffffbb800001ae00 0041 00000000                0x0                0x0
0xffffbb800001ae80 0041 00000000                0x0                0x0
0xffffbb800001af00 0041 00000000                0x0                0x0
0xffffbb800001af80 0041 00000000                0x0                0x0
0xffffbb800001b000 0041 00000000                0x0                0x0
0xffffbb800001b080 0041 00000000                0x0                0x0
0xffffbb800001b100 0041 00000000                0x0                0x0
0xffffbb800001b180 0041 00000000                0x0                0x0
0xffffbb800001b200 0041 00000000                0x0                0x0
0xffffbb800001b280 0041 00000000                0x0                0x0
0xffffbb800001b300 0041 00000000                0x0                0x0
0xffffbb800001b380 0041 00000000                0x0                0x0
0xffffbb800001b400 0041 00000000                0x0                0x0
0xffffbb800001b480 0041 00000000                0x0                0x0
0xffffbb800001b500 0041 00000000                0x0                0x0
0xffffbb800001b580 0041 00000000                0x0                0x0
0xffffbb800001b600 0041 00000000                0x0                0x0
0xffffbb800001b680 0041 00000000                0x0                0x0
0xffffbb800001b700 0041 00000000                0x0                0x0
0xffffbb800001b780 0041 00000000                0x0                0x0
0xffffbb800001b800 0041 00000000                0x0                0x0
0xffffbb800001b880 0041 00000000                0x0                0x0
0xffffbb800001b900 0041 00000000                0x0                0x0
0xffffbb800001b980 0041 00000000                0x0                0x0
0xffffbb800001ba00 0041 00000000                0x0                0x0
0xffffbb800001ba80 0041 00000000                0x0                0x0
0xffffbb800001bb00 0041 00000000                0x0                0x0
0xffffbb800001bb80 0001 00000000                0x0                0x0
0xffffbb800001bc00 0001 00000000                0x0                0x0
0xffffbb800001bc80 0001 00000000                0x0                0x0
0xffffbb800001bd00 0001 00000000                0x0                0x0
0xffffbb800001bd80 0001 00000000                0x0                0x0
0xffffbb800001be00 0001 00000000                0x0                0x0
0xffffbb800001be80 0001 00000000                0x0                0x0
0xffffbb800001bf00 0001 00000000                0x0                0x0
0xffffbb800001bf80 0001 00000000                0x0                0x0
0xffffbb800001c000 0001 00000000                0x0                0x0
0xffffbb800001c080 0001 00000000                0x0                0x0
0xffffbb800001c100 0001 00000000                0x0                0x0
0xffffbb800001c180 0001 00000000                0x0                0x0
0xffffbb800001c200 0001 00000000                0x0                0x0
0xffffbb800001c280 0001 00000000                0x0                0x0
0xffffbb800001c300 0001 00000000                0x0                0x0
0xffffbb800001c380 0001 00000000                0x0                0x0
0xffffbb800001c400 0001 00000000                0x0                0x0
0xffffbb800001c480 0001 00000000                0x0                0x0
0xffffbb800001c500 0001 00000000                0x0                0x0
0xffffbb800001c580 0001 00000000                0x0                0x0
0xffffbb800001c600 0001 00000000                0x0                0x0
0xffffbb800001c680 0001 00000000                0x0                0x0
0xffffbb800001c700 0001 00000000                0x0                0x0
0xffffbb800001c780 0001 00000000                0x0                0x0
0xffffbb800001c800 0001 00000000                0x0                0x0
0xffffbb800001c880 0001 00000000                0x0                0x0
0xffffbb800001c900 0001 00000000                0x0                0x0
0xffffbb800001c980 0001 00000000                0x0                0x0
0xffffbb800001ca00 0001 00000000                0x0                0x0
0xffffbb800001ca80 0001 00000000                0x0                0x0
0xffffbb800001cb00 0001 00000000                0x0                0x0
0xffffbb800001cb80 0001 00000000                0x0                0x0
0xffffbb800001cc00 0001 00000000                0x0                0x0
0xffffbb800001cc80 0001 00000000                0x0                0x0
0xffffbb800001cd00 0001 00000000                0x0                0x0
0xffffbb800001cd80 0001 00000000                0x0                0x0
0xffffbb800001ce00 0001 00000000                0x0                0x0
0xffffbb800001ce80 0001 00000000                0x0                0x0
0xffffbb800001cf00 0001 00000000                0x0                0x0
0xffffbb800001cf80 0001 00000000                0x0                0x0
0xffffbb800001d000 0001 00000000                0x0                0x0
0xffffbb800001d080 0001 00000000                0x0                0x0
0xffffbb800001d100 0001 00000000                0x0                0x0
0xffffbb800001d180 0001 00000000                0x0                0x0
0xffffbb800001d200 0001 00000000                0x0                0x0
0xffffbb800001d280 0001 00000000                0x0                0x0
0xffffbb800001d300 0001 00000000                0x0                0x0
0xffffbb800001d380 0001 00000000                0x0                0x0
0xffffbb800001d400 0001 00000000                0x0                0x0
0xffffbb800001d480 0001 00000000                0x0                0x0
0xffffbb800001d500 0001 00000000                0x0                0x0
0xffffbb800001d580 0001 00000000                0x0                0x0
0xffffbb800001d600 0001 00000000                0x0                0x0
0xffffbb800001d680 0001 00000000                0x0                0x0
0xffffbb800001d700 0001 00000000                0x0                0x0
0xffffbb800001d780 0001 00000000                0x0                0x0
0xffffbb800001d800 0001 00000000                0x0                0x0
0xffffbb800001d880 0001 00000000                0x0                0x0
0xffffbb800001d900 0001 00000000                0x0                0x0
0xffffbb800001d980 0001 00000000                0x0                0x0
0xffffbb800001da00 0001 00000000                0x0                0x0
0xffffbb800001da80 0001 00000000                0x0                0x0
0xffffbb800001db00 0001 00000000                0x0                0x0
0xffffbb800001db80 0001 00000000                0x0                0x0
0xffffbb800001dc00 0001 00000000                0x0                0x0
0xffffbb800001dc80 0001 00000000                0x0                0x0
0xffffbb800001dd00 0001 00000000                0x0                0x0
0xffffbb800001dd80 0001 00000000                0x0                0x0
0xffffbb800001de00 0001 00000000                0x0                0x0
0xffffbb800001de80 0001 00000000                0x0                0x0
0xffffbb800001df00 0001 00000000                0x0                0x0
0xffffbb800001df80 0001 00000000                0x0                0x0
0xffffbb800001e000 0001 00000000                0x0                0x0
0xffffbb800001e080 0001 00000000                0x0                0x0
0xffffbb800001e100 0001 00000000                0x0                0x0
0xffffbb800001e180 0001 00000000                0x0                0x0
0xffffbb800001e200 0001 00000000                0x0                0x0
0xffffbb800001e280 0001 00000000                0x0                0x0
0xffffbb800001e300 0001 00000000                0x0                0x0
0xffffbb800001e380 0001 00000000                0x0                0x0
0xffffbb800001e400 0001 00000000                0x0                0x0
0xffffbb800001e480 0001 00000000                0x0                0x0
0xffffbb800001e500 0001 00000000                0x0                0x0
0xffffbb800001e580 0001 00000000                0x0                0x0
0xffffbb800001e600 0001 00000000                0x0                0x0
0xffffbb800001e680 0001 00000000                0x0                0x0
0xffffbb800001e700 0001 00000000                0x0                0x0
0xffffbb800001e780 0001 00000000                0x0                0x0
0xffffbb800001e800 0001 00000000                0x0                0x0
0xffffbb800001e880 0001 00000000                0x0                0x0
0xffffbb800001e900 0001 00000000                0x0                0x0
0xffffbb800001e980 0001 00000000                0x0                0x0
0xffffbb800001ea00 0001 00000000                0x0                0x0
0xffffbb800001ea80 0001 00000000                0x0                0x0
0xffffbb800001eb00 0001 00000000                0x0                0x0
0xffffbb800001eb80 0001 00000000                0x0                0x0
0xffffbb800001ec00 0001 00000000                0x0                0x0
0xffffbb800001ec80 0001 00000000                0x0                0x0
0xffffbb800001ed00 0001 00000000                0x0                0x0
0xffffbb800001ed80 0001 00000000                0x0                0x0
0xffffbb800001ee00 0001 00000000                0x0                0x0
0xffffbb800001ee80 0001 00000000                0x0                0x0
0xffffbb800001ef00 0001 00000000                0x0                0x0
0xffffbb800001ef80 0001 00000000                0x0                0x0
0xffffbb800001f000 0001 00000000                0x0                0x0
0xffffbb800001f080 0001 00000000                0x0                0x0
0xffffbb800001f100 0001 00000000                0x0                0x0
0xffffbb800001f180 0001 00000000                0x0                0x0
0xffffbb800001f200 0001 00000000                0x0                0x0
0xffffbb800001f280 0001 00000000                0x0                0x0
0xffffbb800001f300 0001 00000000                0x0                0x0
0xffffbb800001f380 0001 00000000                0x0                0x0
0xffffbb800001f400 0001 00000000                0x0                0x0
0xffffbb800001f480 0001 00000000                0x0                0x0
0xffffbb800001f500 0001 00000000                0x0                0x0
0xffffbb800001f580 0001 00000000                0x0                0x0
0xffffbb800001f600 0001 00000000                0x0                0x0
0xffffbb800001f680 0001 00000000                0x0                0x0
0xffffbb800001f700 0001 00000000                0x0                0x0
0xffffbb800001f780 0001 00000000                0x0                0x0
0xffffbb800001f800 0001 00000000                0x0                0x0
0xffffbb800001f880 0001 00000000                0x0                0x0
0xffffbb800001f900 0001 00000000                0x0                0x0
0xffffbb800001f980 0001 00000000                0x0                0x0
0xffffbb800001fa00 0001 00000000                0x0                0x0

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/19 00:10 netbsd e28af4372a4d 639d6cdf .config console log report [disk image] [netbsd.gdb] ci2-netbsd ASan: Unauthorized Access in sacheck
2024/06/06 09:51 netbsd e7626d1f1ae1 121701b6 .config console log report [disk image] [netbsd.gdb] ci2-netbsd ASan: Unauthorized Access in sacheck
* Struck through repros no longer work on HEAD.