[ 70.4657759] panic: LOCKDEBUG: Mutex error: mutex_vector_enter,516: spin lock held [ 70.4657759] cpu0: Begin traceback... [ 70.4657759] vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:288 [ 70.4657759] panic() at netbsd:panic+0x1ad sys/kern/subr_prf.c:209 [ 70.4657759] lockdebug_abort1() at netbsd:lockdebug_abort1+0xd12 [ 70.4657759] mutex_enter() at netbsd:mutex_enter+0x7fe sys/kern/kern_mutex.c:516 [ 70.4657759] pool_put() at netbsd:pool_put+0x97 [ 70.4657759] pmap_update() at netbsd:pmap_update+0x1116 sys/arch/x86/x86/pmap.c:5410 [ 70.4657759] uvm_pagezerocheck() at netbsd:uvm_pagezerocheck+0x13f [ 70.4657759] uvm_pagefree() at netbsd:uvm_pagefree+0x1b86 splraiseipl sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./x86/intr.h:190 [inline] [ 70.4657759] uvm_pagefree() at netbsd:uvm_pagefree+0x1b86 splvm sys/sys/spl.h:56 [inline] [ 70.4657759] uvm_pagefree() at netbsd:uvm_pagefree+0x1b86 sys/uvm/uvm_page.c:1653 [ 70.4657759] pmap_update() at netbsd:pmap_update+0x8e8 sys/arch/x86/x86/pmap.c:5410 [ 70.4657759] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x1732 sys/uvm/uvm_map.c:2276 [ 70.4657759] uvm_map_enter() at netbsd:uvm_map_enter+0x491 sys/uvm/uvm_map.c:1337 [ 70.4657759] uvm_map() at netbsd:uvm_map+0x54f sys/uvm/uvm_map.c:1101 [ 70.4657759] uvm_mmap() at netbsd:uvm_mmap+0xb59 sys/uvm/uvm_mmap.c:910 [ 70.4657759] sys_mmap() at netbsd:sys_mmap+0x11a9 sys/uvm/uvm_mmap.c:401 [ 70.4657759] sys___syscall() at netbsd:sys___syscall+0x27e sys/kern/sys_syscall.c:77 [ 70.4657759] syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline] [ 70.4657759] syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline] [ 70.4657759] syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138 [ 70.4657759] --- syscall (number 198) --- [ 70.4657759] netbsd:syscall+0x35d: [ 70.4657759] cpu0: End traceback... [ 70.4657759] fatal breakpoint trap in supervisor mode [ 70.4657759] trap type 1 code 0 rip 0xffffffff802227ed cs 0x8 rflags 0x246 cr2 0x20000348 ilevel 0x8 rsp 0xffff9c807b3b2da0 [ 70.4657759] curlwp 0xffff9c80129418c0 pid 3007.2728 lowest kstack 0xffff9c807b3ac2c0 Stopped in pid 3007.2728 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:288 panic() at netbsd:panic+0x1ad sys/kern/subr_prf.c:209 lockdebug_abort1() at netbsd:lockdebug_abort1+0xd12 mutex_enter() at netbsd:mutex_enter+0x7fe sys/kern/kern_mutex.c:516 pool_put() at netbsd:pool_put+0x97 pmap_update() at netbsd:pmap_update+0x1116 sys/arch/x86/x86/pmap.c:5410 uvm_pagezerocheck() at netbsd:uvm_pagezerocheck+0x13f uvm_pagefree() at netbsd:uvm_pagefree+0x1b86 splraiseipl sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./x86/intr.h:190 [inline] uvm_pagefree() at netbsd:uvm_pagefree+0x1b86 splvm sys/sys/spl.h:56 [inline] uvm_pagefree() at netbsd:uvm_pagefree+0x1b86 sys/uvm/uvm_page.c:1653 pmap_update() at netbsd:pmap_update+0x8e8 sys/arch/x86/x86/pmap.c:5410 uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x1732 sys/uvm/uvm_map.c:2276 uvm_map_enter() at netbsd:uvm_map_enter+0x491 sys/uvm/uvm_map.c:1337 uvm_map() at netbsd:uvm_map+0x54f sys/uvm/uvm_map.c:1101 uvm_mmap() at netbsd:uvm_mmap+0xb59 sys/uvm/uvm_mmap.c:910 sys_mmap() at netbsd:sys_mmap+0x11a9 sys/uvm/uvm_mmap.c:401 sys___syscall() at netbsd:sys___syscall+0x27e sys/kern/sys_syscall.c:77 syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138 --- syscall (number 198) --- netbsd:syscall+0x35d: ds 2d90 es 4918 fs 1 gs