[ 63.6007708] panic: ASan: Unauthorized Access In 0xffffffff816c7699: Addr 0xffff9a00147df518 [8 bytes, read, PoolUseAfterFree] [ 63.6136492] cpu0: Begin traceback... [ 63.6207906] vpanic() at netbsd:vpanic+0x22e sys/kern/subr_prf.c:290 [ 63.6408248] snprintf() at netbsd:snprintf [ 63.6608585] kasan_report() at netbsd:kasan_report+0x9c kasan_code_name sys/kern/subr_asan.c:187 [inline] [ 63.6608585] kasan_report() at netbsd:kasan_report+0x9c sys/kern/subr_asan.c:197 [ 63.6909120] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:347 [inline] [ 63.6909120] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:361 [inline] [ 63.6909120] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:413 [inline] [ 63.6909120] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1210 [ 63.7209582] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] [ 63.7209582] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 [ 63.7409941] mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550 [ 63.7710417] lwp_exit() at netbsd:lwp_exit+0x32e sys/kern/kern_lwp.c:1140 [ 63.7910759] lwp_userret() at netbsd:lwp_userret+0x1f5 sys/kern/kern_lwp.c:1639 [ 63.8211254] syscall() at netbsd:syscall+0x85e x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline] [ 63.8211254] syscall() at netbsd:syscall+0x85e KPREEMPT_DISABLE sys/sys/lwp.h:536 [inline] [ 63.8211254] syscall() at netbsd:syscall+0x85e mi_userret sys/sys/userret.h:97 [inline] [ 63.8211254] syscall() at netbsd:syscall+0x85e userret sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/userret.h:81 [inline] [ 63.8211254] syscall() at netbsd:syscall+0x85e sys/arch/x86/x86/syscall.c:166 [ 63.8312832] --- syscall (number 4) --- [ 63.8411571] 7bfc3b2ade7a: [ 63.8411571] cpu0: End traceback... [ 63.8411571] fatal breakpoint trap in supervisor mode [ 63.8515339] trap type 1 code 0 rip 0xffffffff802209c5 cs 0x8 rflags 0x246 cr2 0x7bfc3b5fb729 ilevel 0 rsp 0xffff9a017f64fb90 [ 63.8645476] curlwp 0xffff9a0013791b40 pid 6089.5969 lowest kstack 0xffff9a017f6482c0 Stopped in pid 6089.5969 (syz-executor9687) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x22e sys/kern/subr_prf.c:290 snprintf() at netbsd:snprintf kasan_report() at netbsd:kasan_report+0x9c kasan_code_name sys/kern/subr_asan.c:187 [inline] kasan_report() at netbsd:kasan_report+0x9c sys/kern/subr_asan.c:197 __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:347 [inline] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:361 [inline] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:413 [inline] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1210 mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550 lwp_exit() at ne