[ 83.2360325] panic: LOCKDEBUG: Mutex error: mutex_vector_enter,522: spin lock held [ 83.2460322] cpu1: Begin traceback... [ 83.2560370] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:290 [ 83.3160372] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1221 [ 83.3760400] lockdebug_abort1() at netbsd:lockdebug_abort1+0x150 sys/kern/subr_lockdebug.c:381 [ 83.4160371] lockdebug_barrier() at netbsd:lockdebug_barrier+0x11d sys/kern/subr_lockdebug.c:650 [ 83.4560359] mutex_enter() at netbsd:mutex_enter+0xa26 sys/kern/kern_mutex.c:522 [ 83.4960355] fsetown() at netbsd:fsetown+0x7c sys/kern/kern_descrip.c:1798 [ 83.5360345] tunioctl() at netbsd:tunioctl+0x97 sys/net/if_tun.c:749 [ 83.5760353] cdev_ioctl() at netbsd:cdev_ioctl+0xfc sys/kern/subr_devsw.c:935 [ 83.6160349] spec_ioctl() at netbsd:spec_ioctl+0x20f sys/miscfs/specfs/spec_vnops.c:934 [ 83.6560348] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:883 [ 83.6960343] vn_ioctl() at netbsd:vn_ioctl+0x1b9 sys/kern/vfs_vnops.c:865 [ 83.7360340] sys_ioctl() at netbsd:sys_ioctl+0x8f5 sys/kern/sys_generic.c:673 [ 83.7760342] sys___syscall() at netbsd:sys___syscall+0xff sy_call sys/sys/syscallvar.h:65 [inline] [ 83.7760342] sys___syscall() at netbsd:sys___syscall+0xff sys/kern/sys_syscall.c:77 [ 83.8160349] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline] [ 83.8160349] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline] [ 83.8160349] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138 [ 83.8260350] --- syscall (number 198) --- [ 83.8360345] netbsd:syscall+0x25a: [ 83.8460353] cpu1: End traceback... [ 83.8460353] fatal breakpoint trap in supervisor mode [ 83.8560309] trap type 1 code 0 rip 0xffffffff80220a2d cs 0x8 rflags 0x282 cr2 0x7c9e328b19c1 ilevel 0x8 rsp 0xffffd9019f9b7710 [ 83.8660313] curlwp 0xffffd90012c64040 pid 3029.2878 lowest kstack 0xffffd9019f9b02c0 Stopped in pid 3029.2878 (syz-executor.1) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:290 panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1221 lockdebug_abort1() at netbsd:lockdebug_abort1+0x150 sys/kern/subr_lockdebug.c:381 lockdebug_barrier() at netbsd:lockdebug_barrier+0x11d sys/kern/subr_lockdebug.c:650 mutex_enter() at netbsd:mutex_enter+0xa26 sys/kern/kern_mutex.c:522 fsetown() at netbsd:fsetown+0x7c sys/kern/kern_descrip.c:1798 tunioctl() at netbsd:tunioctl+0x97 sys/net/if_tun.c:749 cdev_ioctl() at netbsd:cdev_ioctl+0xfc sys/kern/subr_devsw.c:935 spec_ioctl() at netbsd:spec_ioctl+0x20f sys/miscfs/specfs/spec_vnops.c:934 VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:883 vn_ioctl() at netbsd:vn_ioctl+0x1b9 sys/kern/vfs_vnops.c:865 sys_ioctl() at netbsd:sys_ioctl+0x8f5 sys/kern/sys_generic.c:673 sys___syscall() at netbsd:sys___syscall+0xff sy_call sys/sys/syscallvar.h:65 [inline] sys___syscall() at netbsd:sys___syscall+0xff sys/kern/sys_syscall.c:77 syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138 --- syscall (number 198) --- netbsd:syscall+0x25a: Panic string: LOCKDEBUG: Mutex error: mutex_vector_enter,522: spin lock held PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1871 3128 3 0 0 ffffd90012d7d4c0 syz-executor.3 xclocv 1871 3111 5 0 100100 ffffd900133801c0 syz-executor.3 1871 3557 5 0 100100 ffffd900133a5ac0 syz-executor.3 1871 1871 5 0 10100000 ffffd90012bb7600 syz-executor.3 3048 3048 2 1 0 ffffd90012d29300 syz-executor.4 3029 >2878 7 1 100 ffffd90012c64040 syz-executor.1 3029 3029 2 1 10000000 ffffd90012c98140 syz-executor.1 2860 2615 2 0 0 ffffd90012cbb600 syz-executor.2 2860 2860 2 0 10000000 ffffd90012c790c0 syz-executor.2 2537 2537 2 0 0 ffffd90012b34500 syz-executor.5 2718 2718 3 1 180 ffffd90012cac5c0 syz-executor.4 nanoslp 1220 1220 2 0 140 ffffd90013e23240 syz-executor.5 989 989 2 0 140 ffffd90013dc8a80 syz-executor.3 1194 1194 3 1 180 ffffd90013caaa40 syz-executor.2 nanoslp 421 421 2 0 140 ffffd90013caa600 syz-executor.1 1075 1075 2 0 40 ffffd90013367180 syz-executor.0 1255 972 2 1 100 ffffd90013dc8200 syz-fuzzer 1255 1193 3 1 180 ffffd90013ca0a00 syz-fuzzer parked 1255 1105 2 1 100 ffffd90013ca05c0 syz-fuzzer 1255 1223 3 1 180 ffffd90013ca0180 syz-fuzzer parked 1255 1222 3 1 180 ffffd900134639c0 syz-fuzzer parked 1255 1084 3 1 1c0 ffffd90013463580 syz-fuzzer parked 1255 1078 3 1 180 ffffd9001267b740 syz-fuzzer parked 1255 874 2 0 140 ffffd9001267b300 syz-fuzzer 1255 1255 3 1 180 ffffd90012a8f900 syz-fuzzer kqueue 1085 1085 3 1 180 ffffd90012a52040 sshd select 1070 1070 3 0 180 ffffd9001338ea80 getty nanoslp 1073 1073 3 0 180 ffffd9001338e640 getty nanoslp 1074 1074 3 1 180 ffffd900133b9280 getty nanoslp 1252 1252 3 1 1c0 ffffd9001267cbc0 getty ttyraw 1093 1093 3 1 180 ffffd