[ 940.5501064] panic: ASan: Unauthorized Access In 0xffffffff8182bc79: Addr 0xffff99801349f7b0 [8 bytes, read, PoolUseAfterFree] [ 940.5634919] cpu0: Begin traceback... [ 940.6296209] vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288 [ 940.8087208] panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084 [ 940.9778718] kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline] [ 940.9778718] kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201 [ 941.1072219] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline] [ 941.1072219] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:364 [inline] [ 941.1072219] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_check sys/kern/subr_asan.c:421 [inline] [ 941.1072219] __asan_load8() at netbsd:__asan_load8+0x251 sys/kern/subr_asan.c:1208 [ 941.2465299] wsmux_do_ioctl() at netbsd:wsmux_do_ioctl+0x720 sys/dev/wscons/wsmux.c:520 [ 941.3858279] cdev_ioctl() at netbsd:cdev_ioctl+0x193 sys/kern/subr_devsw.c:1525 [ 941.5151793] spec_ioctl() at netbsd:spec_ioctl+0x140 sys/miscfs/specfs/spec_vnops.c:1331 [ 941.6445247] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933 [ 941.7937754] vn_ioctl() at netbsd:vn_ioctl+0x1c0 sys/kern/vfs_vnops.c:894 [ 941.9330746] sys_ioctl() at netbsd:sys_ioctl+0x1e4 sys/kern/sys_generic.c:675 [ 942.0624318] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline] [ 942.0624318] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90 [ 942.1917770] syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline] [ 942.1917770] syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline] [ 942.1917770] syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137 [ 942.2216326] --- syscall (number 54 via SYS_syscall) --- [ 942.2614316] netbsd:syscall+0x35c: [ 942.2614316] cpu0: End traceback... [ 942.2746493] fatal breakpoint trap in supervisor mode [ 942.2746493] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x74b3a800d000 ilevel 0 rsp 0xffff998248257690 [ 942.2905870] curlwp 0xffff998012d12280 pid 6648.6787 lowest kstack 0xffff9982482502c0 Stopped in pid 6648.6787 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71 vpanic() at netbsd:vpanic+0x27a sys/kern/subr_prf.c:288 panic() at netbsd:panic+0x9d sys/kern/subr_prf.c:1084 kasan_report() at netbsd:kasan_report+0x8c kasan_code_name sys/kern/subr_asan.c:169 [inline] kasan_report() at netbsd:kasan_report+0x8c sys/kern/subr_asan.c:201 __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:364 [inline] __asan_load8() at netbsd:__asan_load8+0x251 kasan_shadow_check sys/kern/subr_asan.c:421 [inline] __asan_load8() at netbsd:__asan_load8+0x251 sys/kern/subr_asan.c:1208 wsmux_do_ioctl() at netbsd:wsmux_do_ioctl+0x720 sys/dev/wscons/wsmux.c:520 cdev_ioctl() at netbsd:cdev_ioctl+0x193 sys/kern/subr_devsw.c:1525 spec_ioctl() at netbsd:spec_ioctl+0x140 sys/miscfs/specfs/spec_vnops.c:1331 VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933 vn_ioctl() at netbsd:vn_ioctl+0x1c0 sys/kern/vfs_vnops.c:894 sys_ioctl() at netbsd:sys_ioctl+0x1e4 sys/kern/sys_generic.c:675 sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90 syscall() at netbsd:syscall+0x35c sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x35c sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x35c sys/arch/x86/x86/syscall.c:137 --- syscall (number 54 via SYS_syscall) --- netbsd:syscall+0x35c: Panic string: ASan: Unauthorized Access In 0xffffffff8182bc79: Addr 0xffff99801349f7b0 [8 bytes, read, PoolUseAfterFree] PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 8149 8149 2 0 0 ffff998012c8b8c0 syz-executor.2 6648 > 6787 7 0 0 ffff998012d12280 syz-executor.4 6648 6648 2 0 10000000 ffff998012c81780 syz-executor.4 6996 6996 2 0 40000 ffff99801431ba00 arp 8398 8398 2 0 0 ffff998013fca040 syz-executor.1 6542 6542 2 1 0 ffff998014a03a00 syz-executor.3 6129 6129 3 1 0 ffff998012ca5080 syz-executor.0 vm_map 6303 6303 3 0 180 ffff998014055940 syz-executor.5 wait 5877 5877 3 0 0 ffff998014892480 syz-executor.2 vfork 7020 7020 3 0 180 ffff998014ac1680 init nanoslp 4701 4701 3 1 180 ffff998013f67300 syz-executor.0 parked 5773 5773 2 0 0 ffff998012d126c0 syz-executor.4 5765 5765 3 0 180 ffff998014a03180 syz-executor.5 parked 6028 6028 3 0 180 ffff998012a20740 syz-executor.5 parked 5504 5504 3 1 180 ffff9980149d5580 syz-executor.1 parked 5974 5974 3 0 180 ffff99801346e140 syz-executor.0 parked 6488 6488 3 0 180 ffff998014055500 syz-executor.4 parked 4580 4580 3 0 180 ffff9980145922c0 syz-executor.3 parked 5324 5324 3 1 180 ffff998012c2f2c0 syz-executor.2 parked 6234 5820 3 0 1100000 ffff998014942540 syz-executor.2 vfork 6234 6234 2 1 11000040 ffff998013f30b40 syz-executor.2 6471 6471 3 0 180 ffff9980149d59c0 syz-executor.1 parked 5973 5973 3 1 180 ffff99801346e580 syz-executor.4 parked 6062 6062 3 1 180 ffff998013e4a6c0 syz-executor.3 parked 5574 5574 3 1 180 ffff9980133d1b40 syz-executor.2 parked 6190 4912 3 1 1000000 ffff998012cb70c0 syz-executor.2 lwpwait 6190 4135 5 0 11a0000 ffff998012ca5900 syz-executor.2 6190 6863 8 0 11a0000 ffff998012b939c0 syz-executor.2 6190 5309 3 1 151a0000 ffff998012ce6a40 syz-executor.2 vfork 6190 6190 8 0 111a0000 ffff998013f67b80 syz-executor.2 3836 3722 2 0 1000040 ffff998014141980 syz-executor.1 3836 4690 3 1 1100000 ffff99801343b780 syz-executor.1 mutex 4228 4228 3 0 180 ffff99801462fbc0 syz-executor.1 parked 4569 4569 3 1 180 ffff9980129c1b40 syz-executor.4 parked 3651 3651 3 0 180 ffff9980126d7b80 syz-executor.0 parked 5173 3741 2 1 1100000 ffff998012cb7500 syz-executor.2 5173 5173 2 0 11000040 ffff998013464980 syz-executor.2 3326 3326 3 1 180 ffff998012ccf9c0 syz-executor.4 parked 4280 4280 3 1 180 ffff9980133d1700 syz-executor.3 parked 5673 5673 3 0 180 ffff9980134785c0 syz-executor.5 parked 3321 3321 3 0 180 ffff998013478180 syz-executor.1 parked 3207 3424 2 0 1100000 ffff99801431b5c0 syz-executor.0 3207 3207 2 1 11000040 ffff998013e4ab00 syz-executor.0 5454 5454 3 0 180 ffff998013fdc4c0 syz-executor.0 parked 4937 4937 3 0 180 ffff9980133bb6c0 syz-executor.0 parked 3935 3935 3 0 180 ffff998012bdc1c0 syz-executor.1 parked 2979 2979 3 1 180 ffff998013464540 syz-executor.5 parked 1318 4009 3 1 1000000 ffff99801442fa80 syz-executor.5 lwpwait 1318 2351 8 1 11a0000 ffff99801442f640 syz-executor.5 1318 1320 3 1 111a0000 ffff9980126d7740 syz-executor.5 vfork 1318 1318 8 1 111a0000 ffff998012bb7180 syz-executor.5 3272 3272 3 0 180 ffff9980143c91c0 syz-executor.3 parked 1068 1068 3 1 180 ffff998013dc7a40 ndp netio 1846 1846 3 1 180 ffff998013fdc900 syz-executor.0 parked 922 922 3 0 180 ffff998012a718c0 syz-executor.5 parked 665 665 3 1 180 ffff998012c55b80 syz-executor.1 parked 737 737 3 1 180 ffff9980142619c0 syz-executor.4 parked 1696 1696 3 1 180 ffff998012a53bc0 syz-executor.5 parked 2779 2779 3 1 180 ffff998012ce61c0 syz-executor.2 parked 494 494 3 0 180 ffff998012bb7a00 syz-executor.1 parked 408 408 3 0 180 ffff998012b79540 syz-executor.1 parked 386 386 3 1 180 ffff99801334b9c0 syz-executor.0 parked 2761 2761 3 1 180 ffff9980133f7300 syz-executor.0 parked 2008 2008 3 1 180 ffff998012cdb5c0 syz-executor.3 parked 1723 1723 3 1 180 ffff998012a9a080 syz-executor.4 parked 1466 1466 3 0 180 ffff998012d04680 syz-executor.4 parked 1200 1200 3 1 180 ffff998012d04240 syz-executor.2 parked 932 1571 3 0 180 ffff998012bb75c0 syz-fuzzer wait 932 1489 3 0 180 ffff998012c81bc0 syz-fuzzer wait 932 1203 3 0 180 ffff998012bf8a80 syz-fuzzer wait 932 1129 3 1 180 ffff9980129bf280 syz-fuzzer parked 932 1206 3 1 180 ffff998013df8240 syz-fuzzer parked 932 1244 3 0 180 ffff998013deea80 syz-fuzzer parked 932 1209 2 0 0 ffff998013dee200 syz-fuzzer 932 895 3 0 180 ffff998013dc71c0 syz-fuzzer parked 932 1197 3 0 180 ffff998013451900 syz-fuzzer parked 932 449 3 0 180 ffff9980134514c0 syz-fuzzer wait 932 1186 3 1 180 ffff998013451080 syz-fuzzer wait 932 1080 3 0 180 ffff998013388a40 syz-fuzzer wait 932 1195 3 0 180 ffff998012b79980 syz-fuzzer parked 932 932 3 0 180 ffff998012bdc600 syz-fuzzer parked 1085 1085 3 1 180 ffff998012bf8200 sshd select 1238 1238 3 1 180 ffff998012ac5940 getty nanoslp 1079 1079 3 0 180 ffff998012ac5500 getty nanoslp 1086 1086 3 1 180 ffff998012b79100 getty nanoslp 1056 1056 3 0 180 ffff99801343b340 sshd select 1111 1111 3 0 180 ffff998013364a00 powerd kqueue 842 842 3 1 180 ffff9980133d12c0 syslogd kqueue 601 601 3 0 180 ffff998012c8b040 dhcpcd poll 746 746 3 0 180 ffff998012cdb180 dhcpcd poll 562 562 3 1 180 ffff998012ca54c0 dhcpcd poll 487 487 3 1 180 ffff998012da6940 dhcpcd poll 488 488 3 0 180 ffff998012da6500 dhcpcd poll 485 485 3 0 180 ffff998012da60c0 dhcpcd poll 1 1 3 1 180 ffff998012871180 init wait 0 6626 5 1 200 ffff9980133af240 (zombie) 0 3386 3 1 200 ffff998012d6b8c0 ktrace ktrwait 0 2361 3 0 200 ffff998012ddd540 ktrace ktrwait 0 2667 3 0 200 ffff998014261140 ktrace ktrwait 0 2353 3 1 200 ffff998012d20b40 ktrace ktrwait 0 978 3 0 200 ffff9980129bf6c0 physiod physiod 0 196 3 1 200 ffff9980129c1700 pooldrain pooldrain 0 195 3 1 200 ffff9980129c12c0 ioflush syncer 0 194 3 0 200 ffff9980129bfb00 pgdaemon pgdaemon 0 167 3 1 200 ffff998012976ac0 usb7 usbevt 0 172 3 1 200 ffff998012976680 usb6 usbevt 0 170 3 0 200 ffff998012976240 usb5 usbevt 0 168 3 0 200 ffff99801291ea80 usb4 usbevt 0 166 3 0 200 ffff99801291e640 usb3 usbevt 0 165 3 1 200 ffff99801291e200 usb2 usbevt 0 31 3 1 200 ffff9980128caa40 usb1 usbevt 0 63 3 1 200 ffff9980128ca600 usb0 usbevt 0 126 3 1 200 ffff9980128ca1c0 usbtask-dr usbtsk 0 125 3 1 200 ffff998012871a00 usbtask-hc usbtsk 0 124 3 0 200 ffff998010d66b00 swwreboot swwreboot 0 123 3 1 200 ffff9980128715c0 npfgc0 npfgcw 0 122 3 0 200 ffff9980128679c0 rt_free rt_free 0 121 3 1 200 ffff998012867580 unpgc unpgc 0 120 3 1 200 ffff998012867140 key_timehandler key_timehandler 0 119 3 1 200 ffff998012703980 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff998012703540 icmp6_wqinput/0 icmp6_wqinput 0 > 117 7 1 200 ffff998012703100 nd6_timer 0 116 3 1 200 ffff9980126fc940 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff9980126fc500 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff9980126fc0c0 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff9980126ed900 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff9980126ed4c0 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff9980126ed080 icmp_wqinput/0 icmp_wqinput 0 110 3 1 200 ffff9980126db040 rt_timer rt_timer 0 109 3 0 200 ffff9980126db8c0 vmem_rehash vmem_rehash 0 100 3 1 200 ffff9980126d7300 entbutler entropy 0 99 3 0 200 ffff9980120bdb40 viomb balloon 0 98 3 1 200 ffff9980120bd700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff9980120bd2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffff998010d666c0 scsibus0 sccomp 0 29 3 0 200 ffff998010d66280 pms0 pmsreset 0 28 3 1 200 ffff998010cacac0 xcall/1 xcall 0 27 1 1 200 ffff998010cac680 softser/1 0 > 26 7 1 200 ffff998010cac240 softclk/1 0 25 1 1 200 ffff998010ca9a80 softbio/1 0 24 1 1 200 ffff998010ca9640 softnet/1 0 23 1 1 201 ffff998010ca9200 idle/1 0 22 3 0 200 ffff99800fb55a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffff99800fb55600 lnxubdwq lnxubdwq 0 20 3 0 200 ffff99800fb551c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffff99800fb54a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffff99800fb545c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffff99800fb54180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff99800fb4d9c0 sysmon smtaskq 0 15 3 0 200 ffff99800fb4d580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff99800fb4d140 pmfevent pmfevent 0 13 3 0 200 ffff99800fb4a980 sopendfree sopendfr 0 12 3 0 200 ffff99800fb4a540 ifwdog ifwdog 0 11 3 0 200 ffff99800fb4a100 iflnkst iflnkst 0 10 3 0 200 ffff99800fb3b940 nfssilly nfssilly 0 9 3 0 200 ffff99800fb3b500 pooldisp pooldisp 0 8 3 1 200 ffff99800fb3b0c0 modunload mod_unld 0 7 3 0 200 ffff99800fb32900 xcall/0 xcall 0 6 1 0 200 ffff99800fb324c0 softser/0 0 5 3 0 200 ffff99800fb32080 softclk/0 mutex 0 4 1 0 200 ffff99800fb308c0 softbio/0 0 3 1 0 200 ffff99800fb30480 softnet/0 0 2 1 0 201 ffff99800fb30040 idle/0 0 0 2 0 240 ffffffff833501c0 swapper [Locks tracked through LWPs] ****** LWP 8149.8149 (syz-executor.2) @ 0xffff998012c8b8c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366) lock address : ffff9980145a1450 type : sleep/adaptive initialized : netbsd:fork1+0x369 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998012c8b8c0 last held: 0xffff998012c8b8c0 last locked* : netbsd:execve_loadvm+0x31a unlocked : 0 owner/count : 0xffff998012c8b8c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 6996.6996 (arp) @ 0xffff99801431ba00, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366) lock address : ffff998012a6a3d0 type : sleep/adaptive initialized : netbsd:fork1+0x369 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99801431ba00 last held: 0xffff99801431ba00 last locked* : netbsd:exit1+0x2e3 unlocked : netbsd:execve_runproc+0x217f owner/count : 0xffff99801431ba00 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265) lock address : ffff998014b13d00 type : sleep/adaptive initialized : netbsd:amap_ctor+0x39 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99801431ba00 last held: 0xffff99801431ba00 last locked* : netbsd:amap_unref+0x34 unlocked : netbsd:uvm_fault_lower_enter+0x60f owner/count : 0xffff99801431ba00 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 8398.8398 (syz-executor.1) @ 0xffff998013fca040, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x3f sys/kern/subr_kcov.c:461) lock address : ffff998014c81f40 type : sleep/adaptive initialized : netbsd:kcov_open+0x3f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998013fca040 last held: 0xffff998013fca040 last locked* : netbsd:kcov_fops_ioctl+0x28 unlocked : 0 owner field : 0xffff998013fca040 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 6542.6542 (syz-executor.3) @ 0xffff998014a03a00, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x3f sys/kern/subr_kcov.c:461) lock address : ffff998014c96340 type : sleep/adaptive initialized : netbsd:kcov_open+0x3f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff998014a03a00 last held: 0xffff998014a03a00 last locked* : netbsd:kcov_fops_ioctl+0x28 unlocked : 0 owner field : 0xffff998014a03a00 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 6129.6129 (syz-executor.0) @ 0xffff998012ca5080, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x3f sys/kern/subr_kcov.c:461) lock address : ffff99801499d1c0 type : sleep/adaptive initialized : netbsd:kcov_open+0x3f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff998012ca5080 last held: 0xffff998012ca5080 last locked* : netbsd:kcov_fops_ioctl+0x28 unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_obj_init+0xa0 sys/uvm/uvm_object.c:70) lock address : ffff998014aecdc0 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0xa0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff998012ca5080 last held: 0xffff998012ca5080 last locked* : netbsd:uvm_fault_internal+0x1801 unlocked : netbsd:uvm_fault_lower_enter+0x5f0 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 5773.5773 (syz-executor.4) @ 0xffff998012d126c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:387) lock address : netbsd:proc_lock type : sleep/adaptive initialized : netbsd:procinit+0x5c shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 1 relevant lwp : 0xffff998012d126c0 last held: 0xffff998012cb7500 last locked* : netbsd:proclist_foreach_call+0xbf unlocked : netbsd:proclist_foreach_call+0x318 owner field : 0xffff998012cb7500 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffff99801343b780 ****** LWP 3836.4690 (syz-executor.1) @ 0xffff99801343b780, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:do_posix_spawn+0xfb sys/kern/kern_exec.c:2580) lock address : ffff998014231680 type : sleep/adaptive initialized : netbsd:do_posix_spawn+0xfb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff99801343b780 last held: 0xffff99801343b780 last locked* : netbsd:do_posix_spawn+0x103 unlocked : 0 owner field : 0xffff99801343b780 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366) lock address : ffff998013383ad0 type : sleep/adaptive initialized : netbsd:fork1+0x369 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff99801343b780 last held: 0xffff99801343b780 last locked* : netbsd:execve_loadvm+0x31a unlocked : 0 owner/count : 0xffff99801343b780 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 5173.3741 (syz-executor.2) @ 0xffff998012cb7500, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:do_posix_spawn+0xfb sys/kern/kern_exec.c:2580) lock address : ffff998012bf9400 type : sleep/adaptive initialized : netbsd:do_posix_spawn+0xfb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff998012cb7500 last held: 0xffff998012cb7500 last locked* : netbsd:do_posix_spawn+0x103 unlocked : 0 owner field : 0xffff998012cb7500 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366) lock address : ffff99801343ef90 type : sleep/adaptive initialized : netbsd:fork1+0x369 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff998012cb7500 last held: 0xffff998012cb7500 last locked* : netbsd:execve_loadvm+0x31a unlocked : 0 owner/count : 0xffff998012cb7500 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:387) lock address : netbsd:proc_lock type : sleep/adaptive initialized : netbsd:procinit+0x5c shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffff998012cb7500 last held: 0xffff998012cb7500 last locked* : netbsd:proclist_foreach_call+0xbf unlocked : netbsd:proclist_foreach_call+0x318 owner field : 0xffff998012cb7500 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffff99801343b780 *** Locks wanted: none ****** LWP 3207.3424 (syz-executor.0) @ 0xffff99801431b5c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:do_posix_spawn+0xfb sys/kern/kern_exec.c:2580) lock address : ffff9980145d3480 type : sleep/adaptive initialized : netbsd:do_posix_spawn+0xfb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffff99801431b5c0 last held: 0xffff99801431b5c0 last locked* : netbsd:do_posix_spawn+0x103 unlocked : 0 owner field : 0xffff99801431b5c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:fork1+0x369 sys/kern/kern_fork.c:366) lock address : ffff998012be8c10 type : sleep/adaptive initialized : netbsd:fork1+0x369 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffff99801431b5c0 last held: 0xffff99801431b5c0 last locked* : netbsd:execve_loadvm+0x31a unlocked : 0 owner/count : 0xffff99801431b5c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1068.1068 (ndp) @ 0xffff998013dc7a40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff998013dc7a40 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 746.746 (dhcpcd) @ 0xffff998012cdb180, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998012cdb180 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 562.562 (dhcpcd) @ 0xffff998012ca54c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff998012ca54c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 488.488 (dhcpcd) @ 0xffff998012da6500, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998012da6500 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffff998012da60c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998012da60c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffff998010cac240, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff998010cac240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff99800fb4a100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99800fb4a100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff99800fb32080, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99800fb32080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff833501c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff833501c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:main+0x11e sys/kern/init_main.c:304) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x11e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998012d12280 last held: 0xffff998012d12280 last locked* : netbsd:cdev_ioctl+0x20a unlocked : netbsd:sleepq_enter+0xcf curcpu holds : 1 wanted by: 000000000000000000 * Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x61 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff998012d12280 last held: 0xffff998012d12280 last locked* : netbsd:kprintf_lock+0x33 unlocked : netbsd:kprintf_unlock+0x53 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff998000017180 0041 00000000 0x0 0x0 0xffff998000017200 0041 00000000 0x0 0x0 0xffff998000017280 0041 00000000 0x0 0x0 0xffff998000017300 0041 00000000 0x0 0x0 0xffff998000017380 0041 00000000 0x0 0x0 0xffff998000017400 0041 00000000 0x0 0x0 0xffff998000017480 0041 00000000 0x0 0x0 0xffff998000017500 0041 00000000 0x0 0x0 0xffff998000017580 0041 00000000 0x0 0x0 0xffff998000017600 0041 00000000 0x0 0x0 0xffff998000017680 0041 00000000 0x0 0x0 0xffff998000017700 0041 00000000 0x0 0x0 0xffff998000017780 0041 00000000 0x0 0x0 0xffff998000017800 0041 00000000 0x0 0x0 0xffff998000017880 0041 00000000 0x0 0x0 0xffff998000017900 0041 00000000 0x0 0x0 0xffff998000017980 0041 00000000 0x0 0x0 0xffff998000017a00 0041 00000000 0x0 0x0 0xffff998000017a80 0041 00000000 0x0 0x0 0xffff998000017b00 0041 00000000 0x0 0x0 0xffff998000017b80 0041 00000000 0x0 0x0 0xffff998000017c00 0041 00000000 0x0 0x0 0xffff998000017c80 0041 00000000 0x0 0x0 0xffff998000017d00 0041 00000000 0x0 0x0 0xffff998000017d80 0041 00000000 0x0 0x0 0xffff998000017e00 0041 00000000 0x0 0x0 0xffff998000017e80 0041 00000000 0x0 0x0 0xffff998000017f00 0041 00000000 0x0 0x0 0xffff998000017f80 0041 00000000 0x0 0x0 0xffff998000018000 0041 00000000 0x0 0x0 0xffff998000018080 0041 00000000 0x0 0x0 0xffff998000018100 0041 00000000 0x0 0x0 0xffff998000018180 0041 00000000 0x0 0x0 0xffff998000018200 0041 00000000 0x0 0x0 0xffff998000018280 0041 00000000 0x0 0x0 0xffff998000018300 0041 00000000 0x0 0x0 0xffff998000018380 0041 00000000 0x0 0x0 0xffff998000018400 0041 00000000 0x0 0x0 0xffff998000018480 0041 00000000 0x0 0x0 0xffff998000018500 0041 00000000 0x0 0x0 0xffff998000018580 0041 00000000 0x0 0x0 0xffff998000018600 0041 00000000 0x0 0x0 0xffff998000018680 0041 00000000 0x0 0x0 0xffff998000018700 0041 00000000 0x0 0x0 0xffff998000018780 0041 00000000 0x0 0x0 0xffff998000018800 0041 00000000 0x0 0x0 0xffff998000018880 0041 00000000 0x0 0x0 0xffff998000018900 0041 00000000 0x0 0x0 0xffff998000018980 0041 00000000 0x0 0x0 0xffff998000018a00 0041 00000000 0x0 0x0 0xffff998000018a80 0041 00000000 0x0 0x0 0xffff998000018b00 0041 00000000 0x0 0x0 0xffff998000018b80 0041 00000000 0x0 0x0 0xffff998000018c00 0041 00000000 0x0 0x0 0xffff998000018c80 0041 00000000 0x0 0x0 0xffff998000018d00 0041 00000000 0x0 0x0 0xffff998000018d80 0041 00000000 0x0 0x0 0xffff998000018e00 0041 00000000 0x0 0x0 0xffff998000018e80 0041 00000000 0x0 0x0 0xffff998000018f00 0041 00000000 0x0 0x0 0xffff998000018f80 0041 00000000 0x0 0x0 0xffff998000019000 0041 00000000 0x0 0x0 0xffff998000019080 0041 00000000 0x0 0x0 0xffff998000019100 0041 00000000 0x0 0x0 0xffff998000019180 0041 00000000 0x0 0x0 0xffff998000019200 0041 00000000 0x0 0x0 0xffff998000019280 0041 00000000 0x0 0x0 0xffff998000019300 0041 00000000 0x0 0x0 0xffff998000019380 0041 00000000 0x0 0x0 0xffff998000019400 0041 00000000 0x0 0x0 0xffff998000019480 0041 00000000 0x0 0x0 0xffff998000019500 0041 00000000 0x0 0x0 0xffff998000019580 0041 00000000 0x0 0x0 0xffff998000019600 0041 00000000 0x0 0x0 0xffff998000019680 0041 00000000 0x0 0x0 0xffff998000019700 0041 00000000 0x0 0x0 0xffff998000019780 0041 00000000 0x0 0x0 0xffff998000019800 0041 00000000 0x0 0x0 0xffff998000019880 0041 00000000 0x0 0x0 0xffff998000019900 0041 00000000 0x0 0x0 0xffff998000019980 0041 00000000 0x0 0x0 0xffff998000019a00 0041 00000000 0x0 0x0 0xffff998000019a80 0041 00000000 0x0 0x0 0xffff998000019b00 0041 00000000 0x0 0x0 0xffff998000019b80 0041 00000000 0x0 0x0 0xffff998000019c00 0041 00000000 0x0 0x0 0xffff998000019c80 0041 00000000 0x0 0x0 0xffff998000019d00 0041 00000000 0x0 0x0 0xffff998000019d80 0041 00000000 0x0 0x0 0xffff998000019e00 0041 00000000 0x0 0x0 0xffff998000019e80 0041 00000000 0x0 0x0 0xffff998000019f00 0041 00000000 0x0 0x0 0xffff998000019f80 0041 00000000 0x0 0x0 0xffff99800001a000 0041 00000000 0x0 0x0 0xffff99800001a080 0041 00000000 0x0 0x0 0xffff99800001a100 0041 00000000 0x0 0x0 0xffff99800001a180 0041 00000000 0x0 0x0 0xffff99800001a200 0041 00000000 0x0 0x0 0xffff99800001a280 0041 00000000 0x0 0x0 0xffff99800001a300 0041 00000000 0x0 0x0 0xffff99800001a380 0041 00000000 0x0 0x0 0xffff99800001a400 0041 00000000 0x0 0x0 0xffff99800001a480 0041 00000000 0x0 0x0 0xffff99800001a500 0041 00000000 0x0 0x0 0xffff99800001a580 0041 00000000 0x0 0x0 0xffff99800001a600 0041 00000000 0x0 0x0 0xffff99800001a680 0041 00000000 0x0 0x0 0xffff99800001a700 0041 00000000 0x0 0x0 0xffff99800001a780 0041 00000000 0x0 0x0 0xffff99800001a800 0041 00000000 0x0 0x0 0xffff99800001a880 0041 00000000 0x0 0x0 0xffff99800001a900 0041 00000000 0x0 0x0 0xffff99800001a980 0041 00000000 0x0 0x0 0xffff99800001aa00 0041 00000000 0x0 0x0 0xffff99800001aa80 0041 00000000 0x0 0x0 0xffff99800001ab00 0041 00000000 0x0 0x0 0xffff99800001ab80 0041 00000000 0x0 0x0 0xffff99800001ac00 0041 00000000 0x0 0x0 0xffff99800001ac80 0041 00000000 0x0 0x0 0xffff99800001ad00 0041 00000000 0x0 0x0 0xffff99800001ad80 0041 00000000 0x0 0x0 0xffff99800001ae00 0041 00000000 0x0 0x0 0xffff99800001ae80 0041 00000000 0x0 0x0 0xffff99800001af00 0041 00000000 0x0 0x0 0xffff99800001af80 0041 00000000 0x0 0x0 0xffff99800001b000 0041 00000000 0x0 0x0 0xffff99800001b080 0041 00000000 0x0 0x0 0xffff99800001b100 0041 00000000 0x0 0x0 0xffff99800001b180 0041 00000000 0x0 0x0 0xffff99800001b200 0041 00000000 0x0 0x0 0xffff99800001b280 0041 00000000 0x0 0x0 0xffff99800001b300 0041 00000000 0x0 0x0 0xffff99800001b380 0041 00000000 0x0 0x0 0xffff99800001b400 0041 00000000 0x0 0x0 0xffff99800001b480 0041 00000000 0x0 0x0 0xffff99800001b500 0041 00000000 0x0 0x0 0xffff99800001b580 0041 00000000 0x0 0x0 0xffff99800001b600 0041 00000000 0x0 0x0 0xffff99800001b680 0041 00000000 0x0 0x0 0xffff99800001b700 0041 00000000 0x0 0x0 0xffff99800001b780 0041 00000000 0x0 0x0 0xffff99800001b800 0041 00000000 0x0 0x0 0xffff99800001b880 0041 00000000 0x0 0x0 0xffff99800001b900 0041 00000000 0x0 0x0 0xffff99800001b980 0041 00000000 0x0 0x0 0xffff99800001ba00 0041 00000000 0x0 0x0 0xffff99800001ba80 0041 00000000 0x0 0x0 0xffff99800001bb00 0041 00000000 0x0 0x0 0xffff99800001bb80 0001 00000000 0x0 0x0 0xffff99800001bc00 0001 00000000 0x0 0x0 0xffff99800001bc80 0001 00000000 0x0 0x0 0xffff99800001bd00 0001 00000000 0x0 0x0 0xffff99800001bd80 0001 00000000 0x0 0x0 0xffff99800001be00 0001 00000000 0x0 0x0 0xffff99800001be80 0001 00000000 0x0 0x0 0xffff99800001bf00 0001 00000000 0x0 0x0 0xffff99800001bf80 0001 00000000 0x0 0x0 0xffff99800001c000 0001 00000000 0x0 0x0 0xffff99800001c080 0001 00000000 0x0 0x0