[ 62.2165601] panic: ASan: Unauthorized Access In 0xffffffff8117ff25: Addr 0xffffbe8011f756d8 [8 bytes, read, PoolUseAfterFree] [ 62.2308921] cpu0: Begin traceback... [ 62.2466067] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336 [ 62.2766627] snprintf() at netbsd:snprintf [ 62.3067239] kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline] [ 62.3067239] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196 [ 62.3468029] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline] [ 62.3468029] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline] [ 62.3468029] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline] [ 62.3468029] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182 [ 62.3868770] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] [ 62.3868770] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 [ 62.4169301] mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550 [ 62.4570060] pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline] [ 62.4570060] pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306 [ 62.4870628] pmap_free_pvs() at netbsd:pmap_free_pvs+0x73 sys/arch/x86/x86/pmap.c:1836 [ 62.5271456] pmap_remove() at netbsd:pmap_remove+0x3ac sys/arch/x86/x86/pmap.c:3699 [ 62.5571978] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x623 sys/uvm/uvm_map.c:2323 [ 62.5972735] uvmspace_free() at netbsd:uvmspace_free+0x214 sys/uvm/uvm_map.c:4297 [ 62.6273348] uvm_proc_exit() at netbsd:uvm_proc_exit+0xbb sys/uvm/uvm_glue.c:444 [ 62.6674097] exit1() at netbsd:exit1+0x405 sys/kern/kern_exit.c:340 [ 62.6974664] sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180 [ 62.7275257] syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] [ 62.7275257] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] [ 62.7275257] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 [ 62.7476787] --- syscall (number 1) --- [ 62.7575851] 79dd37599a6a: [ 62.7575851] cpu0: End traceback... [ 62.7697686] fatal breakpoint trap in supervisor mode [ 62.7697686] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0x79bf48e68700 ilevel 0 rsp 0xffffbe817e897560 [ 62.7859051] curlwp 0xffffbe8012026bc0 pid 548.1 lowest kstack 0xffffbe817e8902c0 Stopped in pid 548.1 (syz-executor.2) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336 snprintf() at netbsd:snprintf kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196 __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182 mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550 pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline] pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306 pmap_free_pvs() at netbsd:pmap_free_pvs+0x73 sys/arch/x86/x86/pmap.c:1836 pmap_remove() at netbsd:pmap_remove+0x3ac sys/arch/x86/x86/pmap.c:3699 uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x623 sys/uvm/uvm_map.c:2323 uvmspace_free() at netbsd:uvmspace_free+0x214 sys/uvm/uvm_map.c:4297 uvm_proc_exit() at netbsd:uvm_proc_exit+0xbb sys/uvm/uvm_glue.c:444 exit1() at netbsd:exit1+0x405 sys/kern/kern_exit.c:340 sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180 syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 --- syscall (number 1) --- 79dd37599a6a: ds 6be0 es 6ed8 fs 7540 gs 7590 rdi ffffbe800d92d488 rsi ffffbe8012026e78 rbp ffffbe817e897560 rbx ffffffff82810480 cpu_info_primary rdx 2 rcx ffffffff80d14f81 db_panic+0xd5 rax 0 r8 4 r9 1ffffffff0554bf0 r10 ffffffff82aa5f83 db_onpanic+0x3 r11 10 r12 ffffbe816d8a4000 r13 ffffffff82440b68 ostype+0x4e268 r14 ffffbe817e8975f0 r15 ffffbe816d893068 rip ffffffff8021e4b5 breakpoint+0x5 cs 8 rflags 246 rsp ffffbe817e897560 ss 10 netbsd:breakpoint+0x5: leave PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 709 1 2 0 0 ffffbe801206e500 syz-executor.5 635 1 2 0 0 ffffbe801201db80 syz-executor.3 548 > 1 7 0 0 ffffbe8012026bc0 syz-executor.2 590 1 2 1 0 ffffbe8013cbc940 syz-executor.2 639 1 2 1 40000 ffffbe8013cbc500 syz-executor.4 73 1 2 0 0 ffffbe8013cbc0c0 syz-executor.1 568 > 1 7 1 0 ffffbe8013c9b900 syz-executor.5 500 1 2 1 0 ffffbe8013c9b4c0 syz-executor.3 487 1 2 0 0 ffffbe8013c9b080 syz-executor.0 464 10 3 1 80 ffffbe8013c908c0 syz-execprog kqueue 464 9 3 1 80 ffffbe8013c90480 syz-execprog parked 464 8 3 1 80 ffffbe8013c90040 syz-execprog parked 464 7 3 1 80 ffffbe8013a0cbc0 syz-execprog parked 464 6 3 0 80 ffffbe8011f45680 syz-execprog parked 464 5 3 0 80 ffffbe8012c9b640 syz-execprog parked 464 4 2 0 0 ffffbe8012ca4240 syz-execprog 464 3 3 1 80 ffffbe8011c89700 syz-execprog parked 464 2 3 1 80 ffffbe8011e86a00 syz-execprog parked 464 1 3 0 80 ffffbe8011f2d200 syz-execprog parked 535 1 3 0 80 ffffbe8011efb1c0 sshd select 473 1 3 1 80 ffffbe8012c85180 getty nanoslp 349 1 3 1 80 ffffbe8012ba5b00 getty nanoslp 530 1 3 1 80 ffffbe8012c7c140 getty nanoslp 570 1 3 1 80 ffffbe8012c9b200 getty ttyraw 542 1 3 0 80 ffffbe801221da80 cron nanoslp 469 1 3 0 80 ffffbe8012c068c0 inetd kqueue 369 1 3 0 80 ffffbe8012133b80 sshd select 486 1 3 1 80 ffffbe8012133740 powerd kqueue 431 1 2 0 0 ffffbe80120e8600 makemandb 202 1 3 0 80 ffffbe8012bcb700 syslogd kqueue 278 1 3 0 80 ffffbe8012146780 dhcpcd kqueue 236 1 3 0 80 ffffbe801206e0c0 dhcpcd kqueue 1 1 3 0 80 ffffbe8011e2d540 init wait 0 29 3 0 204 ffffbe8011e84140 physiod physiod 0 48 3 0 204 ffffbe8011e86180 pooldrain pooldrain 0 47 3 1 200 ffffbe8011e849c0 ioflush syncer 0 46 3 0 200 ffffbe8011e84580 pgdaemon pgdaemon 0 44 3 1 200 ffffbe8011e2d980 npfgc-0 npfgccv 0 43 3 1 204 ffffbe8011e2d100 rt_free rt_free 0 42 3 1 204 ffffbe8011e24940 unpgc unpgc 0 41 2 0 200 ffffbe8011e24500 key_timehandler 0 40 3 1 204 ffffbe8011e240c0 icmp6_wqinput/1 icmp6_wqinput 0 39 3 0 204 ffffbe8011e1b900 icmp6_wqinput/0 icmp6_wqinput 0 38 2 0 200 ffffbe8011e1b4c0 nd6_timer 0 37 3 1 204 ffffbe8011e1b080 carp6_wqinput/1 carp6_wqinput 0 36 3 0 204 ffffbe8011e168c0 carp6_wqinput/0 carp6_wqinput 0 35 3 1 204 ffffbe8011e16480 carp_wqinput/1 carp_wqinput 0 34 3 0 204 ffffbe8011e16040 carp_wqinput/0 carp_wqinput 0 33 3 1 204 ffffbe8011c9bbc0 icmp_wqinput/1 icmp_wqinput 0 32 3 0 204 ffffbe8011c9b780 icmp_wqinput/0 icmp_wqinput 0 31 2 0 200 ffffbe8011c9b340 rt_timer 0 30 3 0 204 ffffbe8011c8cb80 vmem_rehash vmem_rehash 0 28 3 0 204 ffffbe800f35dac0 scsibus0 sccomp 0 27 3 0 200 ffffbe800f35d680 pms0 pmsreset 0 26 3 1 204 ffffbe800f35d240 xcall/1 xcall 0 25 1 1 200 ffffbe800f35ca80 softser/1 0 24 1 1 200 ffffbe800f35c640 softclk/1 0 23 1 1 200 ffffbe800f35c200 softbio/1 0 22 1 1 200 ffffbe800f26ea40 softnet/1 0 21 1 1 201 ffffbe800f26e600 idle/1 0 20 3 0 204 ffffbe800f26e1c0 lnxpwrwq lnxpwrwq 0 19 3 0 204 ffffbe800f26ca00 lnxlngwq lnxlngwq 0 18 3 0 204 ffffbe800f26c5c0 lnxsyswq lnxsyswq 0 17 3 0 204 ffffbe800f26c180 lnxrcugc lnxrcugc 0 16 3 0 204 ffffbe800de4f9c0 sysmon smtaskq 0 15 3 0 204 ffffbe800de4f580 pmfsuspend pmfsuspend 0 14 3 0 204 ffffbe800de4f140 pmfevent pmfevent 0 13 3 0 204 ffffbe800de40980 sopendfree sopendfr 0 12 3 0 204 ffffbe800de40540 iflnkst iflnkst 0 11 3 0 204 ffffbe800de40100 nfssilly nfssilly 0 10 2 0 200 ffffbe800de34940 cachegc 0 9 3 0 204 ffffbe800de34500 vdrain vdrain 0 8 3 1 200 ffffbe800de340c0 modunload mod_unld 0 7 3 0 204 ffffbe800de24900 xcall/0 xcall 0 6 1 0 200 ffffbe800de244c0 softser/0 0 5 1 0 200 ffffbe800de24080 softclk/0 0 4 1 0 200 ffffbe800de218c0 softbio/0 0 3 1 0 200 ffffbe800de21480 softnet/0 0 2 1 0 201 ffffbe800de21040 idle/0 0 1 2 0 200 ffffffff82b6ef00 swapper [Locks tracked through LWPs] ****** LWP 635.1 (syz-executor.3) @ 0xffffbe801201db80, l_stat=2 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffbe801204c4d0 type : sleep/adaptive initialized : 0xffffffff81166c61 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbe801201db80 last held: 0xffffbe801201db80 last locked* : 0xffffffff81163289 unlocked : 000000000000000000 owner/count : 0xffffbe801201db80 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at pmap_ctor) lock address : 0xffffbe8012051380 type : sleep/adaptive initialized : 0xffffffff802772c1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbe801201db80 last held: 0xffffbe801201db80 last locked* : 0xffffffff8027650a unlocked : 0xffffffff80277bd5 owner field : 0xffffbe801201db80 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 548.1 (syz-executor.2) @ 0xffffbe8012026bc0, l_stat=7 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffbe8012021f10 type : sleep/adaptive initialized : 0xffffffff81166c61 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbe8012026bc0 last held: 0xffffbe8012026bc0 last locked* : 0xffffffff81163289 unlocked : 000000000000000000 owner/count : 0xffffbe8012026bc0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at amap_ctor) lock address : 0xffffbe8013ccfc40 type : sleep/adaptive initialized : 0xffffffff810e0103 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbe8012026bc0 last held: 0xffffbe8012026bc0 last locked* : 0xffffffff811009a3 unlocked : 0xffffffff810ecf90 owner/count : 0xffffbe8012026bc0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at pmap_ctor) lock address : 0xffffbe8012051580 type : sleep/adaptive initialized : 0xffffffff802772c1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbe8012026bc0 last held: 0xffffbe8012026bc0 last locked* : 0xffffffff8027793e unlocked : 0xffffffff80277bd5 owner field : 0xffffbe8012026bc0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at pool_init) lock address : 0xffffffff82da2bb0 type : sleep/adaptive initialized : 0xffffffff81215619 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 1 relevant lwp : 0xffffbe8012026bc0 last held: 000000000000000000 last locked : 0xffffffff812161e8 unlocked*: 0xffffffff81216826 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 73.1 (syz-executor.1) @ 0xffffbe8013cbc0c0, l_stat=2 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffbe8013ca7340 type : sleep/adaptive initialized : 0xffffffff81166caf shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbe8013cbc0c0 last held: 0xffffbe8013cbc0c0 last locked* : 0xffffffff81166fff unlocked : 0xffffffff81143f15 owner field : 0xffffbe8013cbc0c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 568.1 (syz-executor.5) @ 0xffffbe8013c9b900, l_stat=7 *** Locks held: * Lock 0 (initialized at vcache_alloc) lock address : 0xffffbe8013cb2f80 type : sleep/adaptive initialized : 0xffffffff812d2d5f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffbe8013c9b900 last held: 0xffffbe8013c9b900 last locked* : 0xffffffff8130075e unlocked : 0xffffffff813007c0 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at vcache_alloc) lock address : 0xffffbe8013d94b00 type : sleep/adaptive initialized : 0xffffffff812d2d5f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffbe8013c9b900 last held: 0xffffbe8013c9b900 last locked* : 0xffffffff8130075e unlocked : 0xffffffff813007c0 [ 62.7934258] Skipping crash dump on recursive panic [ 62.7934258] panic: ASan: Unauthorized Access In 0xffffffff811a3620: Addr 0xffffbe8013d94b00 [8 bytes, read, PoolUseAfterFree] [ 62.7934258] cpu0: Begin traceback... [ 62.7934258] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336 [ 62.7934258] snprintf() at netbsd:snprintf [ 62.7934258] kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline] [ 62.7934258] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196 [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline] [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline] [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline] [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182 [ 62.7934258] rw_dump() at netbsd:rw_dump+0x20 sys/kern/kern_rwlock.c:186 [ 62.7934258] lockdebug_dump() at netbsd:lockdebug_dump+0x28d sys/kern/subr_lockdebug.c:787 [ 62.7934258] lockdebug_show_one() at netbsd:lockdebug_show_one+0xca sys/kern/subr_lockdebug.c:864 [ 62.7934258] lockdebug_show_all_locks() at netbsd:lockdebug_show_all_locks+0x303 lockdebug_show_all_locks_lwp sys/kern/subr_lockdebug.c:900 [inline] [ 62.7934258] lockdebug_show_all_locks() at netbsd:lockdebug_show_all_locks+0x303 sys/kern/subr_lockdebug.c:962 [ 62.7934258] db_command() at netbsd:db_command+0x2c0 sys/ddb/db_command.c:942 [ 62.7934258] db_command_loop() at netbsd:db_command_loop+0x26c db_execute_commandlist sys/ddb/db_command.c:439 [inline] [ 62.7934258] db_command_loop() at netbsd:db_command_loop+0x26c sys/ddb/db_command.c:589 [ 62.7934258] db_trap() at netbsd:db_trap+0x219 sys/ddb/db_trap.c:94 [ 62.7934258] kdb_trap() at netbsd:kdb_trap+0x1ce sys/arch/amd64/amd64/db_interface.c:248 [ 62.7934258] trap() at netbsd:trap+0x66a sys/arch/amd64/amd64/trap.c:313 [ 62.7934258] --- trap (number 1) --- [ 62.7934258] breakpoint() at netbsd:breakpoint+0x5 [ 62.7934258] db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67 [ 62.7934258] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336 [ 62.7934258] snprintf() at netbsd:snprintf [ 62.7934258] kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline] [ 62.7934258] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196 [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline] [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline] [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline] [ 62.7934258] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182 [ 62.7934258] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] [ 62.7934258] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 [ 62.7934258] mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550 [ 62.7934258] pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline] [ 62.7934258] pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306 [ 62.7934258] pmap_free_pvs() at netbsd:pmap_free_pvs+0x73 sys/arch/x86/x86/pmap.c:1836 [ 62.7934258] pmap_remove() at netbsd:pmap_remove+0x3ac sys/arch/x86/x86/pmap.c:3699 [ 62.7934258] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x623 sys/uvm/uvm_map.c:2323 [ 62.7934258] uvmspace_free() at netbsd:uvmspace_free+0x214 sys/uvm/uvm_map.c:4297 [ 62.7934258] uvm_proc_exit() at netbsd:uvm_proc_exit+0xbb sys/uvm/uvm_glue.c:444 [ 62.7934258] exit1() at netbsd:exit1+0x405 sys/kern/kern_exit.c:340 [ 62.7934258] sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180 [ 62.7934258] syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] [ 62.7934258] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] [ 62.7934258] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 [ 62.7934258] --- syscall (number 1) --- [ 62.7934258] 79dd37599a6a: [ 62.7934258] cpu0: End traceback... [ 62.7934258] fatal breakpoint trap in supervisor mode [ 62.7934258] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0x79bf48e68700 ilevel 0x8 rsp 0xffffbe817e896b00 [ 62.7934258] curlwp 0xffffbe8012026bc0 pid 548.1 lowest kstack 0xffffbe817e8902c0 Stopped in pid 548.1 (syz-executor.2) at netbsd:breakpoint+0x5: leave