[ 908.5389217] panic: kernel diagnostic assertion "mutex_owned(&tty_lock)" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/tty_pty.c", line 552 [ 908.5601487] cpu0: Begin traceback... [ 908.6088807] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292 [ 908.7488831] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x23435 [ 908.8888846] ptsstop() at netbsd:ptsstop+0x1ad sys/kern/tty_pty.c:552 [ 909.0288811] tty_try_xonxoff() at netbsd:tty_try_xonxoff+0x1e7 sys/kern/tty.c:3198 [ 909.1688886] pppinput() at netbsd:pppinput+0x1e4 sys/net/ppp_tty.c:844 [ 909.3088859] ttioctl() at netbsd:ttioctl+0xe84 sys/kern/tty.c:1549 [ 909.4488836] ptyioctl() at netbsd:ptyioctl+0x526 sys/kern/tty_pty.c:1182 [ 909.5788815] cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525 [ 909.7188804] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331 [ 909.8588829] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933 [ 910.0088909] vn_ioctl() at netbsd:vn_ioctl+0x1c3 sys/kern/vfs_vnops.c:894 [ 910.1488839] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675 [ 910.2788827] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline] [ 910.2788827] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90 [ 910.4188844] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline] [ 910.4188844] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline] [ 910.4188844] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138 [ 910.4488840] --- syscall (number 54 via SYS_syscall) --- [ 910.4888865] netbsd:syscall+0x25a: [ 910.5006546] cpu0: End traceback... [ 910.5006546] fatal breakpoint trap in supervisor mode [ 910.5097361] trap type 1 code 0 rip 0xffffffff8023241d cs 0x8 rflags 0x286 cr2 0x61f668 ilevel 0 rsp 0xffffcc8248e592f0 [ 910.5201924] curlwp 0xffffcc8012c0b640 pid 10089.8958 lowest kstack 0xffffcc8248e522c0 Stopped in pid 10089.8958 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292 _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x23435 ptsstop() at netbsd:ptsstop+0x1ad sys/kern/tty_pty.c:552 tty_try_xonxoff() at netbsd:tty_try_xonxoff+0x1e7 sys/kern/tty.c:3198 pppinput() at netbsd:pppinput+0x1e4 sys/net/ppp_tty.c:844 ttioctl() at netbsd:ttioctl+0xe84 sys/kern/tty.c:1549 ptyioctl() at netbsd:ptyioctl+0x526 sys/kern/tty_pty.c:1182 cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525 spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331 VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933 vn_ioctl() at netbsd:vn_ioctl+0x1c3 sys/kern/vfs_vnops.c:894 sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675 sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90 syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138 --- syscall (number 54 via SYS_syscall) --- netbsd:syscall+0x25a: Panic string: kernel diagnostic assertion "mutex_owned(&tty_lock)" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/tty_pty.c", line 552 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 10207 10207 2 0 0 ffffcc8013ef2740 syz-executor.2 9098 9105 2 0 0 ffffcc8013f0ebc0 syz-executor.5 9098 9098 2 0 0 ffffcc8012d21ac0 syz-executor.5 10089 8757 3 1 180 ffffcc8012d31280 syz-executor.0 parked 10089>8958 7 0 100 ffffcc8012c0b640 syz-executor.0 10089 10089 2 1 10000000 ffffcc8012d02a40 syz-executor.0 9091 9091 2 0 0 ffffcc80143d5940 syz-executor.4 5926 5926 2 0 40 ffffcc8012ccb0c0 syz-executor.3 6213 6213 2 1 140 ffffcc8012a46780 syz-executor.2 5975 5104 3 1 1100000 ffffcc8013388180 syz-executor.1 tstile 5975 6336 3 1 1100000 ffffcc801347f980 syz-executor.1 tstile 5975 5224 3 0 1100000 ffffcc8013fcb140 syz-executor.1 tstile 5975 5975 2 1 11000040 ffffcc8012d8f8c0 syz-executor.1 4992 4853 3 0 0 ffffcc80141df700 syz-executor.2 tstile 5965 5411 2 1 1000040 ffffcc801336d9c0 syz-executor.2 5965 4755 3 1 1100000 ffffcc8012bc4a00 syz-executor.2 tstile 4593 4748 3 0 1100000 ffffcc8012d50300 syz-executor.2 tstile 4593 4593 2 1 11000040 ffffcc8014231340 syz-executor.2 4937 4937 2 1 140 ffffcc801347f540 syz-executor.0 3737 1444 3 0 1100000 ffffcc8012aa1900 syz-executor.2 tstile 3737 3737 2 1 11000040 ffffcc8014241480 syz-executor.2 3270 3270 3 0 180 ffffcc8012ce79c0 syz-executor.5 parked 1526 1526 3 0 180 ffffcc8012d8f480 syz-executor.3 parked 1637 1637 3 1 180 ffffcc80133b9640 syz-executor.2 parked 2011 2011 3 1 180 ffffcc8013f68080 syz-executor.1 parked 1760 1760 3 0 180 ffffcc801411e6c0 syz-executor.2 parked 1753 1753 3 1 180 ffffcc80126e8b80 syz-executor.3 parked 1366 1366 3 1 180 ffffcc80126ec480 syz-executor.3 parked 1490 1756 2 0 1000040 ffffcc801411c240 syz-executor.3 1490 1365 3 1 11100000 ffffcc8014117200 syz-executor.3 vfork 1490 1747 3 1 1100000 ffffcc80133e16c0 syz-executor.3 vfork 716 989 3 0 1100000 ffffcc801411c680 syz-executor.2 vfork 716 716 2 0 11000040 ffffcc8012ca18c0 syz-executor.2 1339 1339 3 0 180 ffffcc80133f7b40 syz-executor.4 parked 1464 1464 3 0 180 ffffcc801340f300 syz-executor.4 parked 1330 1330 3 1 180 ffffcc8012d402c0 syz-executor.4 parked 300 300 3 1 180 ffffcc801400d600 syz-executor.4 parked 1060 1060 3 1 180 ffffcc8012ce7580 syz-executor.4 parked 453 453 3 1 180 ffffcc8012c66740 syz-executor.2 parked 1375 1375 3 1 180 ffffcc8012c55b40 syz-executor.2 parked 1332 1486 2 1 1000040 ffffcc8012c32280 syz-executor.2 1332 1329 3 1 1100000 ffffcc8012c21ac0 syz-executor.2 vfork 1332 1363 3 1 1100000 ffffcc80133885c0 syz-executor.2 vfork 1369 1369 3 1 180 ffffcc8013f6b500 syz-executor.3 parked 336 336 3 1 180 ffffcc8013f478c0 syz-executor.3 parked 332 1344 2 1 1000040 ffffcc8012a6c8c0 syz-executor.3 332 1198 3 1 11100000 ffffcc8012c552c0 syz-executor.3 vfork 332 1197 3 1 1100000 ffffcc8012b76980 syz-executor.3 vfork 1207 1207 2 0 140 ffffcc8013e38b00 syz-executor.5 1323 >1323 7 1 140 ffffcc8013e386c0 syz-executor.4 1185 2398 3 1 180 ffffcc8012d021c0 syz-fuzzer wait 1185 1351 3 0 180 ffffcc8013e6d2c0 syz-fuzzer wait 1185 1352 3 1 180 ffffcc8013e38280 syz-fuzzer kqueue 1185 1211 3 0 180 ffffcc8013e0f680 syz-fuzzer wait 1185 1202 3 1 180 ffffcc8013ddea80 syz-fuzzer parked 1185 1376 3 1 180 ffffcc8012bed1c0 syz-fuzzer parked 1185 1231 3 0 180 ffffcc8013d0e600 syz-fuzzer wait 1185 944 3 0 1c0 ffffcc8013d0e1c0 syz-fuzzer wait 1185 895 3 1 180 ffffcc8013456780 syz-fuzzer parked 1185 449 3 1 180 ffffcc801346e900 syz-fuzzer parked 1185 930 3 1 180 ffffcc801346e080 syz-fuzzer parked 1185 1080 3 1 180 ffffcc8012b76540 syz-fuzzer parked 1185 1082 3 1 180 ffffcc8012b76100 syz-fuzzer parked 1185 1185 3 1 180 ffffcc8012c0b200 syz-fuzzer parked 931 931 3 1 180 ffffcc8012beda40 sshd select 1237 1237 3 1 180 ffffcc801347f100 getty nanoslp 1260 1260 3 0 180 ffffcc8012ace940 getty nanoslp 1239 1239 3 0 180 ffffcc8012ace500 getty nanoslp 1238 1238 3 1 1c0 ffffcc8012a46340 getty ttyraw 1106 1106 3 0 180 ffffcc80133e1b00 sshd select 1131 1131 3 0 180 ffffcc8012d21680 powerd kqueue 842 842 3 1 180 ffffcc80133f72c0 syslogd kqueue 603 603 3 0 180 ffffcc8012c91bc0 dhcpcd poll 746 746 3 0 180 ffffcc8012cf3180 dhcpcd poll 563 563 2 1 100 ffffcc8012cb84c0 dhcpcd 605 605 3 0 180 ffffcc8012cb8080 dhcpcd poll 487 487 3 0 180 ffffcc8012dc6940 dhcpcd poll 488 488 3 1 180 ffffcc8012dc6500 dhcpcd poll 485 485 2 0 0 ffffcc8012dc60c0 dhcpcd 1 1 3 0 180 ffffcc8012879180 init wait 0 3231 5 1 200 ffffcc80134985c0 (zombie) 0 413 3 0 200 ffffcc8012cf35c0 ktrace ktrwait 0 399 3 1 200 ffffcc8012d316c0 swapiod swapiod 0 990 3 0 200 ffffcc80129a26c0 physiod physiod 0 196 3 1 200 ffffcc80129a4700 pooldrain pooldrain 0 195 3 1 200 ffffcc80129a42c0 ioflush syncer 0 194 3 1 200 ffffcc80129a2b00 pgdaemon pgdaemon 0 169 3 1 200 ffffcc8012962ac0 usb7 usbevt 0 172 3 1 200 ffffcc8012962680 usb6 usbevt 0 170 3 1 200 ffffcc8012962240 usb5 usbevt 0 168 3 0 200 ffffcc8012914a80 usb4 usbevt 0 166 3 0 200 ffffcc8012914640 usb3 usbevt 0 165 3 1 240 ffffcc8012914200 usb2 tstile 0 31 3 1 240 ffffcc80128daa40 usb1 tstile 0 63 3 1 200 ffffcc80128da600 usb0 usbevt 0 126 3 0 200 ffffcc80128da1c0 usbtask-dr usbtsk 0 125 3 1 200 ffffcc8012879a00 usbtask-hc usbtsk 0 124 3 0 200 ffffcc8010d77b00 swwreboot swwreboot 0 123 3 0 200 ffffcc80128795c0 npfgc0 npfgcw 0 122 3 0 200 ffffcc801286b9c0 rt_free rt_free 0 121 3 0 200 ffffcc801286b580 unpgc unpgc 0 120 2 0 200 ffffcc801286b140 key_timehandler 0 119 3 1 200 ffffcc801271c980 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffcc801271c540 icmp6_wqinput/0 icmp6_wqinput 0 117 2 0 200 ffffcc801271c100 nd6_timer 0 116 3 1 200 ffffcc8012713940 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffcc8012713500 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffcc80127130c0 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffcc8012705900 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffcc80127054c0 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffcc8012705080 icmp_wqinput/0 icmp_wqinput 0 110 2 0 200 ffffcc80126ec8c0 rt_timer 0 109 3 0 200 ffffcc80126ec040 vmem_rehash vmem_rehash 0 100 3 1 200 ffffcc80126e8300 entbutler entropy 0 99 3 0 200 ffffcc80120beb40 viomb balloon 0 98 3 1 200 ffffcc80120be700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffcc80120be2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffffcc8010d776c0 scsibus0 sccomp 0 29 3 0 200 ffffcc8010d77280 pms0 pmsreset 0 28 3 1 200 ffffcc8010cbcac0 xcall/1 xcall 0 27 1 1 200 ffffcc8010cbc680 softser/1 0 > 26 7 1 200 ffffcc8010cbc240 softclk/1 0 25 1 1 200 ffffcc8010cb9a80 softbio/1 0 24 1 1 200 ffffcc8010cb9640 softnet/1 0 23 1 1 201 ffffcc8010cb9200 idle/1 0 22 3 1 200 ffffcc800f755a40 lnxsyswq lnxsyswq 0 21 3 1 200 ffffcc800f755600 lnxubdwq lnxubdwq 0 20 3 1 200 ffffcc800f7551c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffcc800f754a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffffcc800f7545c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffcc800f754180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffcc800f74e9c0 sysmon smtaskq 0 15 3 0 200 ffffcc800f74e580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffcc800f74e140 pmfevent pmfevent 0 13 3 0 200 ffffcc800f74a980 sopendfree sopendfr 0 12 3 0 200 ffffcc800f74a540 ifwdog ifwdog 0 11 3 1 200 ffffcc800f74a100 iflnkst iflnkst 0 10 3 0 200 ffffcc800f73d940 nfssilly nfssilly 0 9 3 0 200 ffffcc800f73d500 vdrain vdrain 0 8 3 0 200 ffffcc800f73d0c0 modunload mod_unld 0 7 3 0 200 ffffcc800f733900 xcall/0 xcall 0 6 1 0 200 ffffcc800f7334c0 softser/0 0 5 1 0 200 ffffcc800f733080 softclk/0 0 4 1 0 200 ffffcc800f7318c0 softbio/0 0 3 1 0 200 ffffcc800f731480 softnet/0 0 2 1 0 201 ffffcc800f731040 idle/0 0 0 2 0 240 ffffffff83341f80 swapper [Locks tracked through LWPs] ****** LWP 10207.10207 (syz-executor.2) @ 0xffffcc8013ef2740, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265) lock address : ffffcc801436bb40 type : sleep/adaptive initialized : netbsd:amap_ctor+0x39 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8013ef2740 last held: 0xffffcc8013ef2740 last locked* : netbsd:uvm_fault_internal+0x88a unlocked : netbsd:uvm_fault_upper_enter+0x366 owner/count : 0xffffcc8013ef2740 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2872) lock address : ffffcc8012c62580 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x93 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8013ef2740 last held: 0xffffcc8013ef2740 last locked* : netbsd:pmap_extract+0xde unlocked : netbsd:pmap_enter_ma+0xe14 owner field : 0xffffcc8013ef2740 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 9098.9105 (syz-executor.5) @ 0xffffcc8013f0ebc0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:uvmspace_alloc+0x174 uvm_map_setup sys/uvm/uvm_map.c:4794 [inline]) * Lock 0 (initialized at netbsd:uvmspace_alloc+0x174 uvmspace_init sys/uvm/uvm_map.c:4137 [inline]) * Lock 0 (initialized at netbsd:uvmspace_alloc+0x174 sys/uvm/uvm_map.c:4116) lock address : ffffcc8012a9f5c8 type : sleep/adaptive initialized : netbsd:uvmspace_alloc+0x174 shared holds : 1 exclusive: 0 shares wanted: 1 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8013f0ebc0 last held: 0xffffcc8012d21ac0 last locked : netbsd:uvm_fault_internal+0x344 unlocked* : netbsd:uvm_fault_upper_enter+0x387 owner/count : 0x0000000000000040 flags : 000000000000000000 Turnstile: no active turnstile for this lock. ****** LWP 5926.5926 (syz-executor.3) @ 0xffffcc8012ccb0c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376) lock address : ffffcc80141004c0 type : sleep/adaptive initialized : netbsd:vcache_alloc+0x3e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc8012ccb0c0 last held: 0xffffcc8012ccb0c0 last locked* : netbsd:genfs_lock+0x160 unlocked : netbsd:genfs_unlock+0x2a owner/count : 0xffffcc8012ccb0c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376) lock address : ffffcc80142c07c0 type : sleep/adaptive initialized : netbsd:vcache_alloc+0x3e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc8012ccb0c0 last held: 0xffffcc8012ccb0c0 last locked* : netbsd:genfs_lock+0x160 unlocked : netbsd:genfs_unlock+0x2a owner/count : 0xffffcc8012ccb0c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:genfs_node_init+0x2e sys/miscfs/genfs/genfs_vnops.c:475) lock address : ffffcc8014431848 type : sleep/adaptive initialized : netbsd:genfs_node_init+0x2e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8012ccb0c0 last held: 0xffffcc8012ccb0c0 last locked* : netbsd:ffs_truncate+0xfe4 unlocked : 0 owner/count : 0xffffcc8012ccb0c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 5975.5104 (syz-executor.1) @ 0xffffcc8013388180, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283) lock address : ffffcc801269f6f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x129 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 3 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc8013388180 last held: 0xffffcc8013388180 last locked* : netbsd:vhci_usb_detach+0x115 unlocked : netbsd:vhci_fd_write+0x49d owner field : 0xffffcc8013388180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 3 waiting writers: 0xffffcc801347f980 0xffffcc8013fcb140 0xffffcc80128daa40 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc801269f4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc8013388180 last held: 0xffffcc80128daa40 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_free_xfer+0x19c owner field : 0xffffcc80128daa40 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffcc8013388180 ****** LWP 5975.6336 (syz-executor.1) @ 0xffffcc801347f980, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283) lock address : ffffcc801269f6f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x129 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 3 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc801347f980 last held: 0xffffcc8013388180 last locked* : netbsd:vhci_usb_detach+0x115 unlocked : netbsd:vhci_fd_write+0x49d owner field : 0xffffcc8013388180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 3 waiting writers: 0xffffcc801347f980 0xffffcc8013fcb140 0xffffcc80128daa40 ****** LWP 5975.5224 (syz-executor.1) @ 0xffffcc8013fcb140, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283) lock address : ffffcc801269f6f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x129 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 3 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc8013fcb140 last held: 0xffffcc8013388180 last locked* : netbsd:vhci_usb_detach+0x115 unlocked : netbsd:vhci_fd_write+0x49d owner field : 0xffffcc8013388180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 3 waiting writers: 0xffffcc801347f980 0xffffcc8013fcb140 0xffffcc80128daa40 ****** LWP 4992.4853 (syz-executor.2) @ 0xffffcc80141df700, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x392 sys/kern/kern_fork.c:366) lock address : ffffcc80133d8b50 type : sleep/adaptive initialized : netbsd:fork1+0x392 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc80141df700 last held: 0xffffcc80141df700 last locked* : netbsd:exit1+0x2f2 unlocked : 0 owner/count : 0xffffcc80141df700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc80126af4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 4 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc80141df700 last held: 0xffffcc8012914200 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_setup_pipe_flags+0xc8 owner field : 0xffffcc8012914200 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffffcc8012aa1900 0xffffcc8012d50300 0xffffcc8012bc4a00 0xffffcc80141df700 ****** LWP 5965.4755 (syz-executor.2) @ 0xffffcc8012bc4a00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc80126af4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 4 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc8012bc4a00 last held: 0xffffcc8012914200 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_setup_pipe_flags+0xc8 owner field : 0xffffcc8012914200 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffffcc8012aa1900 0xffffcc8012d50300 0xffffcc8012bc4a00 0xffffcc80141df700 ****** LWP 4593.4748 (syz-executor.2) @ 0xffffcc8012d50300, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc80126af4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 4 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc8012d50300 last held: 0xffffcc8012914200 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_setup_pipe_flags+0xc8 owner field : 0xffffcc8012914200 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffffcc8012aa1900 0xffffcc8012d50300 0xffffcc8012bc4a00 0xffffcc80141df700 ****** LWP 3737.1444 (syz-executor.2) @ 0xffffcc8012aa1900, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283) lock address : ffffcc80126af6f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x129 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8012aa1900 last held: 0xffffcc8012aa1900 last locked* : netbsd:vhci_usb_detach+0x115 unlocked : netbsd:vhci_fd_read+0x475 owner field : 0xffffcc8012aa1900 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffcc8012914200 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc80126af4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 4 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc8012aa1900 last held: 0xffffcc8012914200 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_setup_pipe_flags+0xc8 owner field : 0xffffcc8012914200 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffffcc8012aa1900 0xffffcc8012d50300 0xffffcc8012bc4a00 0xffffcc80141df700 ****** LWP 746.746 (dhcpcd) @ 0xffffcc8012cf3180, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8012cf3180 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 563.563 (dhcpcd) @ 0xffffcc8012cb84c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc8012cb84c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 488.488 (dhcpcd) @ 0xffffcc8012dc6500, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc8012dc6500 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffcc8012dc60c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8012dc60c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.165 (usb2) @ 0xffffcc8012914200, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc80126af4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 4 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc8012914200 last held: 0xffffcc8012914200 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_setup_pipe_flags+0xc8 owner field : 0xffffcc8012914200 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffffcc8012aa1900 0xffffcc8012d50300 0xffffcc8012bc4a00 0xffffcc80141df700 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283) lock address : ffffcc80126af6f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x129 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc8012914200 last held: 0xffffcc8012aa1900 last locked* : netbsd:vhci_usb_detach+0x115 unlocked : netbsd:vhci_fd_read+0x475 owner field : 0xffffcc8012aa1900 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffcc8012914200 ****** LWP 0.31 (usb1) @ 0xffffcc80128daa40, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0xe1 sys/dev/usb/vhci.c:1280) lock address : ffffcc801269f4c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0xe1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc80128daa40 last held: 0xffffcc80128daa40 last locked* : netbsd:usbd_transfer+0x23e unlocked : netbsd:usbd_free_xfer+0x19c owner field : 0xffffcc80128daa40 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffcc8013388180 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x129 sys/dev/usb/vhci.c:1283) lock address : ffffcc801269f6f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x129 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 3 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc80128daa40 last held: 0xffffcc8013388180 last locked* : netbsd:vhci_usb_detach+0x115 unlocked : netbsd:vhci_fd_write+0x49d owner field : 0xffffcc8013388180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 3 waiting writers: 0xffffcc801347f980 0xffffcc8013fcb140 0xffffcc80128daa40 ****** LWP 0.11 (iflnkst) @ 0xffffcc800f74a100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc800f74a100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffcc800f733080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc800f733080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff83341f80, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff83341f80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:main+0x133 sys/kern/init_main.c:305) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x133 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc8012c0b640 last held: 0xffffcc8012c0b640 last locked* : netbsd:cdev_ioctl+0x218 unlocked : netbsd:cdev_open+0x421 curcpu holds : 1 wanted by: 000000000000000000 * Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)