[ 236.1689028] panic: LOCKDEBUG: Reader / writer lock error: rw_vector_enter,300: locking against myself [ 236.1788959] cpu1: Begin traceback... [ 236.2189042] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 [ 236.3188257] panic() at netbsd:panic+0x49 sys/kern/subr_prf.c:1116 [ 236.4088035] lockdebug_abort1() at netbsd:lockdebug_abort1+0x191 lockdebug_abort1 sys/kern/subr_lockdebug.c:814 [inline] [ 236.4088035] lockdebug_abort1() at netbsd:lockdebug_abort1+0x191 sys/kern/subr_lockdebug.c:796 [ 236.4887517] lockdebug_wantlock() at netbsd:lockdebug_wantlock+0x457 sys/kern/subr_lockdebug.c:489 [ 236.5687055] rw_enter() at netbsd:rw_enter+0x887 sys/kern/kern_rwlock.c:300 [ 236.6386705] genfs_lock() at netbsd:genfs_lock+0x220 sys/miscfs/genfs/genfs_vnops.c:397 [ 236.7186265] layer_bypass() at netbsd:layer_bypass+0x63e sys/miscfs/genfs/layer_vnops.c:294 [ 236.7985860] VOP_LOCK() at netbsd:VOP_LOCK+0x22a sys/kern/vnode_if.c:1632 [ 236.8685514] vn_lock() at netbsd:vn_lock+0x2ae sys/kern/vfs_vnops.c:1388 [ 236.9485149] union_getattr() at netbsd:union_getattr+0x3a9 sys/fs/union/union_vnops.c:872 [ 237.0184767] VOP_GETATTR() at netbsd:VOP_GETATTR+0x1f7 sys/kern/vnode_if.c:711 [ 237.0984366] change_owner() at netbsd:change_owner+0x74 sys/kern/vfs_syscalls.c:3820 [ 237.1784066] sys___posix_chown() at netbsd:sys___posix_chown+0x8a sys/kern/vfs_syscalls.c:3684 [ 237.2583559] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] [ 237.2583559] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90 [ 237.3383178] syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline] [ 237.3383178] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline] [ 237.3383178] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137 [ 237.3483127] --- syscall (number 283 via SYS_syscall) --- [ 237.3782969] netbsd:syscall+0x28b: [ 237.3782969] cpu1: End traceback... [ 237.3882921] fatal breakpoint trap in supervisor mode [ 237.3882921] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x1b30c2f000 ilevel 0 rsp 0xffff9e8248944830 [ 237.3982850] curlwp 0xffff8fcc25b7f700 pid 6191.3650 lowest kstack 0xffff9e82489402c0 Stopped in pid 6191.3650 (syz-executor.5) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:71 vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 panic() at netbsd:panic+0x49 sys/kern/subr_prf.c:1116 lockdebug_abort1() at netbsd:lockdebug_abort1+0x191 lockdebug_abort1 sys/kern/subr_lockdebug.c:814 [inline] lockdebug_abort1() at netbsd:lockdebug_abort1+0x191 sys/kern/subr_lockdebug.c:796 lockdebug_wantlock() at netbsd:lockdebug_wantlock+0x457 sys/kern/subr_lockdebug.c:489 rw_enter() at netbsd:rw_enter+0x887 sys/kern/kern_rwlock.c:300 genfs_lock() at netbsd:genfs_lock+0x220 sys/miscfs/genfs/genfs_vnops.c:397 layer_bypass() at netbsd:layer_bypass+0x63e sys/miscfs/genfs/layer_vnops.c:294 VOP_LOCK() at netbsd:VOP_LOCK+0x22a sys/kern/vnode_if.c:1632 vn_lock() at netbsd:vn_lock+0x2ae sys/kern/vfs_vnops.c:1388 union_getattr() at netbsd:union_getattr+0x3a9 sys/fs/union/union_vnops.c:872 VOP_GETATTR() at netbsd:VOP_GETATTR+0x1f7 sys/kern/vnode_if.c:711 change_owner() at netbsd:change_owner+0x74 sys/kern/vfs_syscalls.c:3820 sys___posix_chown() at netbsd:sys___posix_chown+0x8a sys/kern/vfs_syscalls.c:3684 sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90 syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137 --- syscall (number 283 via SYS_syscall) --- netbsd:syscall+0x28b: Panic string: LOCKDEBUG: Reader / writer lock error: rw_vector_enter,300: locking against myself PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 4791 4791 2 1 0 ffff8fcc2e8a3080 syz-executor.2 6460 6460 2 0 0 ffff8fcc0dd10900 syz-executor.3 6191 > 3650 7 1 0 ffff8fcc25b7f700 syz-executor.5 6191 3719 2 0 0 ffff8fcc16d259c0 syz-executor.5 6191 6191 2 1 10040000 ffff8fcc0cbc7bc0 syz-executor.5 3732 > 3732 7 0 40000 ffff8fcc1b28e040 syz-executor.4 6861 6861 2 1 140 ffff8fcc1cca56c0 syz-executor.3 5829 5829 3 0 180 ffff8fcc121f0300 syz-executor.2 parked 4175 4175 3 1 180 ffff8fcc12f2bac0 syz-executor.4 parked 3573 3573 3 1 180 ffff8fcc1f3c5640 syz-executor.0 parked 5705 3581 3 1 11100000 ffff8fcc25b7f2c0 syz-executor.0 vfork 5705 5705 2 1 11000040 ffff8fcc16d25140 syz-executor.0 6096 6096 2 1 140 ffff8fcc0c930040 syz-executor.5 5458 5458 3 0 180 ffff8fcc1cca5280 syz-executor.0 wait 4029 4029 3 1 180 ffff8fcc12f2b680 syz-executor.1 parked 5849 6221 3 1 11100000 ffff8fcc1cca5b00 syz-executor.1 vfork 5849 5849 2 1 11000040 ffff8fcc1b28e8c0 syz-executor.1 3762 3762 3 1 180 ffff8fcc1b99d900 syz-executor.1 wait 2712 2712 3 0 180 ffff8fcc1d2c4340 syz-executor.2 parked 5344 5344 3 1 180 ffff8fcc2051c740 syz-executor.3 parked 4710 5312 2 1 1140000 ffff8fcc1f3c5200 syz-executor.3 4710 4710 2 1 11000040 ffff8fcc12f2b240 syz-executor.3 2900 2900 3 0 180 ffff8fcc1b99d4c0 syz-executor.2 parked 1322 1322 3 1 180 ffff8fcc159f5340 syz-executor.3 parked 1313 1313 3 1 180 ffff8fcc1f3c5a80 syz-executor.2 parked 913 913 3 1 180 ffff8fcc1c8eaa40 syz-executor.4 parked 904 904 3 1 180 ffff8fcc1bba0980 syz-executor.4 parked 906 901 3 1 1100000 ffff8fcc0c673700 syz-executor.4 vfork 906 906 2 1 11000040 ffff8fcc1c8ea600 syz-executor.4 2229 2229 3 1 180 ffff8fcc1c8ea1c0 syz-executor.5 parked 1457 1457 3 0 180 ffff8fcc1b192500 syz-executor.5 parked 2349 3510 3 1 1000000 ffff8fcc16c585c0 syz-executor.5 lwpwait 2349 2739 3 1 111a0000 ffff8fcc1bba0540 syz-executor.5 vfork 2349 3376 3 0 11a0000 ffff8fcc0c673b40 syz-executor.5 vfork 2349 2349 5 0 111a0000 ffff8fcc159f5bc0 syz-executor.5 388 388 3 1 180 ffff8fcc16c58a00 syz-executor.0 parked 2735 2735 3 0 180 ffff8fcc1b1920c0 syz-executor.2 parked 2890 2890 3 1 180 ffff8fcc1bba0100 syz-executor.1 parked 3004 2104 3 1 1000000 ffff8fcc1b99d080 syz-executor.1 lwpwait 3004 2656 8 0 11a0000 ffff8fcc1686bb40 syz-executor.1 3004 2649 3 1 11a0000 ffff8fcc11461240 syz-executor.1 vfork 3004 3004 8 1 111a0000 ffff8fcc0d4cb0c0 syz-executor.1 2655 2655 3 0 180 ffff8fcc190246c0 syz-executor.4 parked 1614 1614 3 0 180 ffff8fcc121f0740 syz-executor.4 parked 1231 2238 3 1 180 ffff8fcc121f0b80 syz-fuzzer parked 1231 1323 3 1 180 ffff8fcc0d6a7540 syz-fuzzer wait 1231 1079 3 0 180 ffff8fcc0d4cb500 syz-fuzzer kqueue 1231 1209 3 1 180 ffff8fcc0c9d7740 syz-fuzzer wait 1231 814 3 0 180 ffff8fcc0c930480 syz-fuzzer wait 1231 990 3 0 180 ffff8fcc0d6a7980 syz-fuzzer parked 1231 449 3 1 180 ffff8fcc0cc2b580 syz-fuzzer wait 1231 829 3 1 180 ffff8fcc0cc2b9c0 syz-fuzzer wait 1231 1244 3 1 180 ffff8fcc0e29f180 syz-fuzzer parked 1231 1242 3 1 180 ffff8fcc0e13e200 syz-fuzzer parked 1231 1223 3 1 180 ffff8fcc0e0e61c0 syz-fuzzer wait 1231 1068 3 0 180 ffff8fcc0e29f5c0 syz-fuzzer parked 1231 1233 2 1 140 ffff8fcc0e29fa00 syz-fuzzer 1231 1231 3 0 180 ffff8fcc0c29f200 syz-fuzzer parked 1236 1236 3 0 180 ffff8fcc0c5a4b00 sshd select 1073 1073 3 1 180 ffff8fcc0c2b4ac0 getty nanoslp 1222 1222 3 0 180 ffff8fcc0e0e6600 getty nanoslp 1082 1082 3 0 180 ffff8fcc0c5a4280 getty nanoslp 1224 1224 3 1 180 ffff8fcc0c5a46c0 getty ttyraw -2087909354Skipping crash dump on recursive panic [ 237.4082824] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/ddb/db_proc.c:202:10, member access within misaligned address 0xffff9e8248952460 for type 'struct cpu_info' which requires 64 byte alignment [ 237.4082824] cpu1: Begin traceback... [ 237.4082824] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 [ 237.4082824] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 [ 237.4082824] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc sys/../common/lib/libc/misc/ubsan.c:432 [ 237.4082824] db_show_all_procs() at netbsd:db_show_all_procs+0xe82 sys/ddb/db_proc.c:202 [ 237.4082824] db_command() at netbsd:db_command+0x240 sys/ddb/db_command.c:972 [ 237.4082824] db_command_loop() at netbsd:db_command_loop+0x221 db_execute_commandlist sys/ddb/db_command.c:468 [inline] [ 237.4082824] db_command_loop() at netbsd:db_command_loop+0x221 sys/ddb/db_command.c:618 [ 237.4082824] db_trap() at netbsd:db_trap+0x261 sys/ddb/db_trap.c:94 [ 237.4082824] kdb_trap() at netbsd:kdb_trap+0x1aa sys/arch/amd64/amd64/db_interface.c:252 [ 237.4082824] trap() at netbsd:trap+0x569 sys/arch/amd64/amd64/trap.c:314 [ 237.4082824] --- trap (number 1) --- [ 237.4082824] breakpoint() at netbsd:breakpoint+0x5 [ 237.4082824] db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:71 [ 237.4082824] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 [ 237.4082824] panic() at netbsd:panic+0x49 sys/kern/subr_prf.c:1116 [ 237.4082824] lockdebug_abort1() at netbsd:lockdebug_abort1+0x191 lockdebug_abort1 sys/kern/subr_lockdebug.c:814 [inline] [ 237.4082824] lockdebug_abort1() at netbsd:lockdebug_abort1+0x191 sys/kern/subr_lockdebug.c:796 [ 237.4082824] lockdebug_wantlock() at netbsd:lockdebug_wantlock+0x457 sys/kern/subr_lockdebug.c:489 [ 237.4082824] rw_enter() at netbsd:rw_enter+0x887 sys/kern/kern_rwlock.c:300 [ 237.4082824] genfs_lock() at netbsd:genfs_lock+0x220 sys/miscfs/genfs/genfs_vnops.c:397 [ 237.4082824] layer_bypass() at netbsd:layer_bypass+0x63e sys/miscfs/genfs/layer_vnops.c:294 [ 237.4082824] VOP_LOCK() at netbsd:VOP_LOCK+0x22a sys/kern/vnode_if.c:1632 [ 237.4082824] vn_lock() at netbsd:vn_lock+0x2ae sys/kern/vfs_vnops.c:1388 [ 237.4082824] union_getattr() at netbsd:union_getattr+0x3a9 sys/fs/union/union_vnops.c:872 [ 237.4082824] VOP_GETATTR() at netbsd:VOP_GETATTR+0x1f7 sys/kern/vnode_if.c:711 [ 237.4082824] change_owner() at netbsd:change_owner+0x74 sys/kern/vfs_syscalls.c:3820 [ 237.4082824] sys___posix_chown() at netbsd:sys___posix_chown+0x8a sys/kern/vfs_syscalls.c:3684 [ 237.4082824] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] [ 237.4082824] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90 [ 237.4082824] syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline] [ 237.4082824] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline] [ 237.4082824] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137 [ 237.4082824] --- syscall (number 283 via SYS_syscall) --- [ 237.4082824] netbsd:syscall+0x28b: [ 237.4082824] cpu1: End traceback... [ 237.4082824] fatal breakpoint trap in supervisor mode [ 237.4082824] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x1b30c2f000 ilevel 0x8 rsp 0xffff9e8248943d10 [ 237.4082824] curlwp 0xffff8fcc25b7f700 pid 6191.3650 lowest kstack 0xffff9e82489402c0 Stopped in pid 6191.3650 (syz-executor.5) at netbsd:breakpoint+0x5: leave