[ 61.0454290] panic: kernel diagnostic assertion "mp->mnt_refcnt > 0 || mutex_owned(&mountlist_lock)" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_mount.c", line 292 [ 61.0654379] cpu1: Begin traceback... [ 61.0854151] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293 [ 61.1154157] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x23de6 [ 61.1454171] vfs_ref() at netbsd:vfs_ref+0x90 sys/kern/vfs_mount.c:292 [ 61.1754187] mount_domount() at netbsd:mount_domount+0x80e sys/kern/vfs_mount.c:858 [ 61.2054174] do_sys_mount() at netbsd:do_sys_mount+0x7a1 sys/kern/vfs_syscalls.c:616 [ 61.2354183] compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd sys/compat/common/vfs_syscalls_40.c:88 [ 61.2654169] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline] [ 61.2654169] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90 [ 61.3054185] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline] [ 61.3054185] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline] [ 61.3054185] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138 [ 61.3154168] --- syscall (number 21 via SYS_syscall) --- [ 61.3254160] netbsd:syscall+0x25a: [ 61.3354162] cpu1: End traceback... [ 61.3354162] fatal breakpoint trap in supervisor mode [ 61.3454124] trap type 1 code 0 rip 0xffffffff8023230d cs 0x8 rflags 0x282 cr2 0x7d9a22deb0d8 ilevel 0 rsp 0xffffa382486c58e0 [ 61.3554139] curlwp 0xffffa38013460940 pid 2281.2138 lowest kstack 0xffffa382486be2c0 Stopped in pid 2281.2138 (syz-executor.5) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293 _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x23de6 vfs_ref() at netbsd:vfs_ref+0x90 sys/kern/vfs_mount.c:292 m