[ 133.6944173] panic: ASan: Unauthorized Access In 0xffffffff81178155: Addr 0xffffc20011dfd8d8 [8 bytes, read, PoolUseAfterFree] [ 133.7044052] fatal page fault in supervisor mode [ 133.7044052] uvm_fault(0xffffc20011c06730, 0xffff900000000000, 1) -> e [ 133.7044052] fatal page fault in supervisor mode [ 133.7044052] trap type 6 code 0 rip 0xffffffff811db564 cs 0x8 rflags 0x10283 cr2 0xffff900000000007 ilevel 0x8 rsp 0xffffc2017c287b90 [ 133.7044052] curlwp 0xffffc20014010760 pid 2710.1 lowest kstack 0xffffc2017c2802c0 k[e r13ne3.l7:0 p44ag05e 2]f autrlta pt tryappe, c6 ocdeo=d0e [ Stopped in pid 2710.1 (syz-executor.4) at netbsd:__asan_load8+0x62: movzbl 0(%rax),%r8d ? __asan_load8() at netbsd:__asan_load8+0x62 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:356 [inline] __asan_load8() at netbsd:__asan_load8+0x62 kasan_shadow_check sys/kern/subr_asan.c:410 [inline] __asan_load8() at netbsd:__asan_load8+0x62 sys/kern/subr_asan.c:1180 setrunnable() at netbsd:setrunnable+0x1d5 spc_lock sys/sys/lwp.h:449 [inline] setrunnable() at netbsd:setrunnable+0x1d5 sys/kern/kern_synch.c:848 lwp_start() at netbsd:lwp_start+0x175 sys/kern/kern_lwp.c:1004 do_lwp_create() at netbsd:do_lwp_create+0x151 sys/kern/sys_lwp.c:123 sys__lwp_create() at netbsd:sys__lwp_create+0x1fc sys/kern/sys_lwp.c:156 syscall() at netbsd:syscall+0x559 sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x559 sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x559 sys/arch/x86/x86/syscall.c:138 --- syscall (number 309) --- 7cc318c4333a: ds 7ba0 es c87a fs 3060 gs e814 rdi 38 rsi 7 rbp ffffc2017c287ba0 rbx ffffc20013ace740 rdx 800000000000 rcx ffffffff811af85f setrunnable+0x1d5 rax ffff900000000007 r8 0 r9 3f r10 7 r11 0 r12 0 r13 ffffc20013ace758 r14 ffffc20013ace794 r15 ffffc20013ace790 rip ffffffff811db564 __asan_load8+0x62 cs 8 rflags 10283 rsp ffffc2017c287b90 ss 10 netbsd:__asan_load8+0x62: movzbl 0(%rax),%r8d PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 2710 3 1 -1 0 ffffc20013ace740 syz-executor.4 2710 > 1 7 0 20000000 ffffc20014010760 syz-executor.4 1922 > 1 7 1 20000000 ffffc20013a75700 syz-executor.5 1533 4 3 1 80 ffffc20014121920 syz-executor.2 parked 1533 3 3 1 80 ffffc200129c28e0 syz-executor.2 socket 1533 1 3 1 10000080 ffffc200143d66a0 syz-executor.2 nanoslp 2303 3 3 1 80 ffffc20014455700 syz-executor.0 parked 2303 1 2 0 10040000 ffffc200143ea6c0 syz-executor.0 2701 3 3 0 80 ffffc20011efba40 syz-executor.3 parked 2302 3 4 0 1000080 ffffc2001423b5a0 syz-executor.3 parked 2302 1 4 0 11000000 ffffc20011ae45c0 syz-executor.3 1934 3 3 0 80 ffffc20013f7c700 syz-executor.0 parked 2181 3 3 1 80 ffffc200143d6ae0 syz-executor.0 parked 1645 4 3 0 80 ffffc20011eb1120 syz-executor.4 parked 1904 3 3 0 80 ffffc20013d33140 syz-executor.4 parked 2289 3 3 0 80 ffffc20011eb19a0 syz-executor.4 parked 1252 3 3 1 80 ffffc20014251180 syz-executor.0 parked 838 3 3 0 80 ffffc20013f18b00 syz-executor.0 parked 1096 3 3 0 80 ffffc2001437daa0 syz-executor.0 parked 1099 3 3 1 80 ffffc20013d72160 syz-executor.4 parked 1847 3 3 0 80 ffffc20014290a40 syz-executor.4 parked 1458 3 3 0 80 ffffc20011e64500 syz-executor.4 parked 1696 3 3 0 80 ffffc20014318200 syz-executor.0 parked 1181 3 3 1 80 ffffc20011ed19e0 syz-executor.4 parked 1679 3 3 1 80 ffffc200129d44c0 syz-executor.4 parked 1034 3 3 1 80 ffffc200141004c0 syz-executor.4 parked 1159 3 3 1 80 ffffc20011dfd480 syz-executor.0 parked 1672 3 3 1 80 ffffc20014383ac0 syz-executor.0 parked 1404 3 3 0 80 ffffc2001423b9e0 syz-executor.4 parked 1554 3 3 1 80 ffffc20014383240 syz-executor.4 parked 1530 3 3 1 80 ffffc20013af7ba0 syz-executor.0 parked 888 3 3 0 80 ffffc20011fd82c0 syz-executor.4 parked 2551 3 3 1 80 ffffc20011e390a0 syz-executor.0 parked 1653 3 3 1 80 ffffc20013f7c2c0 syz-executor.0 parked 361 3 3 0 80 ffffc20013a752c0 syz-executor.0 parked 2024 3 3 1 80 ffffc20011cd02a0 syz-executor.4 parked 999 3 3 1 80 ffffc20012a1c960 syz-executor.4 parked 1766 3 3 1 80 ffffc20014307a60 syz-executor.0 parked 1879 3 3 0 80 ffffc20012a2e9a0 syz-executor.0 parked 1745 3 3 1 80 ffffc200129d4900 syz-executor.4 parked 1232 3 3 0 80 ffffc20011e27900 syz-executor.4 parked 590 3 3 1 80 ffffc20013cb20e0 syz-executor.0 parked 457 3 3 0 80 ffffc20014276a20 syz-executor.0 parked 579 3 3 1 80 ffffc200140648e0 syz-executor.0 parked 831 3 3 0 80 ffffc20014251a00 syz-executor.4 parked 704 3 3 1 80 ffffc200142515c0 syz-executor.0 parked 700 3 3 1 80 ffffc2001423b160 syz-executor.0 parked 2097 3 3 0 80 ffffc20011e394e0 syz-executor.0 parked 816 3 3 1 80 ffffc20013b05480 syz-executor.0 parked 1581 3 3 1 80 ffffc20012a50180 syz-executor.4 parked 2476 3 3 0 80 ffffc20014208580 syz-executor.4 parked 934 3 3 0 80 ffffc20011ae2160 syz-executor.4 parked 1573 3 3 0 80 ffffc20013c6a0c0 syz-executor.4 parked 1700 3 3 1 80 ffffc20013fdf300 syz-executor.4 parked 545 3 3 0 80 ffffc20011f1d640 syz-executor.4 parked 1183 3 3 0 80 ffffc20013ef4ae0 syz-executor.4 parked 1432 3 3 1 80 ffffc20013b02780 syz-executor.0 parked 2196 3 3 1 80 ffffc20013a546e0 syz-executor.4 parked 787 3 3 0 80 ffffc200141ab560 syz-executor.0 parked 912 3 3 1 80 ffffc20013fc22e0 syz-executor.4 parked 265 3 3 0 80 ffffc20011ddc320 syz-executor.4 parked 1158 3 3 0 80 ffffc20013e9b220 syz-executor.4 parked 385 3 3 0 80 ffffc20013a542a0 syz-executor.0 parked 384 3 3 1 80 ffffc2001413e940 syz-executor.4 parked 1146 3 3 1 80 ffffc2001413e500 syz-executor.4 parked 1640 3 3 0 80 ffffc200141214e0 syz-executor.4 parked 2167 3 3 0 80 ffffc200141210a0 syz-executor.4 parked 1050 3 3 0 80 ffffc20011f4a6a0 syz-executor.4 parked 1520 3 3 0 80 ffffc20012a100c0 syz-executor.4 parked 1443 3 3 0 80 ffffc20011f4a260 syz-executor.0 parked 1454 3 3 1 80 ffffc20012a084e0 syz-executor.0 parked 1273 3 3 1 80 ffffc20011ed15a0 syz-executor.4 parked 1886 3 3 0 80 ffffc20012932720 syz-executor.4 parked 1453 3 3 1 80 ffffc2000f3c49c0 syz-executor.0 parked 1038 3 3 0 80 ffffc20013da21a0 syz-executor.4 parked 1989 3 3 1 80 ffffc2001402bbc0 syz-executor.4 parked 1131 3 3 1 80 ffffc20013c6a500 syz-executor.4 parked 1969 3 3 0 80 ffffc20011d09b40 syz-executor.4 parked 1386 3 3 0 80 ffffc2001402b340 syz-executor.4 parked 1973 3 3 1 80 ffffc20011edb180 syz-executor.4 parked 1812 3 3 1 80 ffffc20013fdf740 syz-executor.4 parked 1039 3 3 1 80 ffffc20013b02bc0 syz-executor.4 parked 1809 3 3 1 80 ffffc20013d82180 syz-executor.4 parked 514 3 3 0 80 ffffc20013b058c0 syz-executor.4 parked 1908 3 3 1 80 ffffc20013ef4260 syz-executor.4 parked 1151 3 3 0 80 ffffc20012a2e560 syz-executor.4 parked 1048 3 3 1 80 ffffc20013d33580 syz-executor.4 parked 899 3 3 1 80 ffffc200129aa8c0 syz-executor.4 parked 1014 3 3 1 80 ffffc2001297b760 syz-executor.4 parked 1445 3 3 0 80 ffffc20013f7cb40 syz-executor.4 parked 1032 3 3 1 80 ffffc20011e9c540 syz-executor.4 parked 715 3 3 0 80 ffffc20013e0aa60 syz-executor.4 parked 774 3 3 0 80 ffffc20013dc7a40 syz-executor.4 parked 1815 3 3 0 80 ffffc20013cc1100 syz-executor.4 parked 760 3 3 0 80 ffffc2001295e300 syz-executor.4 parked 1261 3 3 1 80 ffffc20013c584e0 syz-executor.4 parked 687 3 3 0 80 ffffc20011f3c680 syz-executor.4 parked 1123 3 3 1 80 ffffc20011c81b00 syz-executor.4 parked 861 3 3 1 80 ffffc20013a75b40 syz-executor.4 parked 799 3 3 1 80 ffffc20013ebb680 syz-executor.4 parked 848 3 3 0 80 ffffc2001376d220 syz-executor.4 parked 1493 3 3 0 80 ffffc20011d1f720 syz-executor.4 parked 979 3 3 1 80 ffffc20011cd06e0 syz-executor.4 parked 836 3 3 1 80 ffffc2001299b340 syz-executor.4 parked 320 3 3 1 80 ffffc20012a10500 syz-executor.4 parked 321 3 3 1 80 ffffc20013e85640 syz-executor.4 parked 1470 3 3 0 80 ffffc20012a449e0 syz-executor.4 parked 445 3 3 1 80 ffffc2001295eb80 syz-executor.4 parked 763 3 3 0 80 ffffc20013cda560 syz-executor.4 parked 755 3 3 1 80 ffffc20013e0a1e0 syz-executor.4 parked 818 3 3 0 80 ffffc20013cb2520 syz-executor.4 parked 1649 3 3 0 80 ffffc20012a08920 syz-executor.4 parked 233 3 3 0 80 ffffc20011dfd040 syz-executor.4 parked 679 3 3 0 80 ffffc20012a6ca40 syz-executor.4 parked 162 3 3 1 80 ffffc20013dc71c0 syz-executor.4 parked 609 3 3 1 80 ffffc20013da2a20 syz-executor.4 parked 608 3 3 0 80 ffffc20013da25e0 syz-executor.4 parked 856 3 3 1 80 ffffc20011eec5e0 syz-executor.4 parked 1751 3 3 0 80 ffffc20011e640c0 syz-executor.4 parked 650 3 3 0 80 ffffc20011d09700 syz-executor.4 parked 137 3 3 0 80 ffffc20013ac0b60 syz-executor.4 parked 519 3 3 0 80 ffffc20013915b00 syz-executor.4 parked 1525 3 3 0 80 ffffc20011cd0b20 syz-executor.4 parked 878 3 3 1 80 ffffc20012a44160 syz-executor.4 parked 417 3 3 1 80 ffffc20013af7320 syz-executor.4 parked 541 3 3 1 80 ffffc20013cda9a0 syz-executor.4 parked 754 3 3 1 80 ffffc20011f1da80 syz-executor.4 parked 1361 3 3 1 80 ffffc200129322e0 syz-executor.4 parked 1406 3 3 0 80 ffffc200129d4080 syz-executor.4 parked 1463 3 3 1 80 ffffc20011f5f280 syz-executor.4 parked 1460 3 3 0 80 ffffc20011f5fb00 syz-executor.4 parked 810 3 3 0 80 ffffc20011f5f6c0 syz-executor.4 parked 1364 3 4 0 1000000 ffffc20013c6a940 syz-executor.1 591 3 3 0 80 ffffc20011eb1560 syz-executor.1 parked 665 3 4 1 1000000 ffffc20011d87740 syz-executor.1 659 3 4 0 1000000 ffffc20011eec1a0 syz-executor.1 659 1 4 1 11000000 ffffc20013ac0720 syz-executor.1 688 5 3 0 80 ffffc20011ec1580 syz-executor.1 parked 615 5 3 1 80 ffffc20011fd8700 syz-executor.1 parked 98 4 3 1 80 ffffc20013c580a0 syz-executor.1 parked 1388 3 3 1 80 ffffc20013c414c0 syz-executor.1 parked 703 3 3 0 80 ffffc20011d1f2e0 syz-executor.1 parked 316 3 3 1 80 ffffc20013b064a0 syz-executor.1 parked 571 3 3 1 80 ffffc20013b05040 syz-executor.1 parked 346 3 3 1 80 ffffc20011d87b80 syz-executor.1 parked 598 3 3 0 80 ffffc20011c816c0 syz-executor.1 parked 717 3 3 0 80 ffffc20011de9bc0 syz-executor.1 parked 1356 3 3 0 80 ffffc20011de9780 syz-executor.1 parked 73 3 3 0 80 ffffc20011d092c0 syz-executor.1 parked 808 3 3 1 80 ffffc20011d1fb60 syz-executor.1 parked 550 3 3 0 80 ffffc20011c81280 syz-executor.1 parked 612 3 3 0 80 ffffc200129c24a0 syz-executor.1 parked 66 3 3 0 80 ffffc20012a10940 syz-executor.1 parked 475 3 3 1 80 ffffc20011f4aae0 syz-executor.1 parked 1182 3 3 1 80 ffffc20012a1c0e0 syz-executor.1 parked 1125 3 3 0 80 ffffc20011e9c980 syz-executor.1 parked 1173 3 3 0 80 ffffc20011e1a4a0 syz-executor.1 parked 712 3 3 0 80 ffffc20011e1a060 syz-executor.1 parked 455 1 2 1 0 ffffc200139156c0 syz-executor.3 563 1 3 1 80 ffffc20013915280 syz-executor.5 nanoslp 569 1 3 1 80 ffffc200138dcae0 syz-executor.4 nanoslp 607 1 3 -1 0 ffffc200138dc260 syz-executor.2 566 1 3 0 0 ffffc20013793ac0 syz-executor.1 biolock 41 1 3 1 80 ffffc20013793680 syz-executor.0 nanoslp 528 12 3 1 80 ffffc200138dc6a0 syz-fuzzer parked 528 11 3 1 80 ffffc20013793240 syz-fuzzer parked 528 10 3 0 80 ffffc2001376daa0 syz-fuzzer parked 528 9 3 1 80 ffffc20011ae29e0 syz-fuzzer parked 528 8 3 1 80 ffffc2001376d660 syz-fuzzer parked 528 7 3 1 80 ffffc20012a5ea20 syz-fuzzer parked 528 6 3 1 80 ffffc20012a5e5e0 syz-fuzzer parked 528 5 3 1 80 ffffc20012a5e1a0 syz-fuzzer parked 528 4 3 1 80 ffffc200132ffa80 syz-fuzzer kqueue 528 3 3 1 80 ffffc200132ff640 syz-fuzzer parked 528 2 3 0 80 ffffc200129aa480 syz-fuzzer parked 528 1 3 1 80 ffffc20011ae71a0 syz-fuzzer parked 454 1 3 0 80 ffffc2001297b320 sshd select 586 1 3 1 80 ffffc20012a2e120 getty nanoslp 516 1 3 0 80 ffffc20012a3c580 getty nanoslp 451 1 3 0 80 ffffc20012a3c140 getty nanoslp 381 1 3 0 80 ffffc20012a26540 getty ttyraw 495 1 3 1 80 ffffc200132ff200 cron nanoslp 462 1 3 0 80 ffffc20011fd8b40 inetd kqueue 466 1 3 0 80 ffffc20011fb42a0 sshd select 440 1 3 1 80 ffffc20011efb600 powerd kqueue 314 1 3 1 80 ffffc2001297bba0 syslogd kqueue 267 1 3 1 80 ffffc20011f0c1e0 dhcpcd kqueue 220 1 3 0 80 ffffc20011e27080 dhcpcd kqueue 1 1 3 1 80 ffffc20011bfcaa0 init wait 0 58 3 0 204 ffffc20011c10680 physiod physiod 0 57 3 0 204 ffffc20011c52ae0 aiodoned aiodoned 0 56 3 0 204 ffffc20011c526a0 pooldrain pooldrain 0 55 3 0 200 ffffc20011c52260 ioflush syncer 0 54 3 0 200 ffffc20011c10ac0 pgdaemon pgdaemon 0 51 3 1 200 ffffc20011c10240 npfgc-0 npfgccv 0 50 3 0 204 ffffc20011bfc660 rt_free rt_free 0 49 3 0 204 ffffc20011bfc220 unpgc unpgc 0 48 3 1 204 ffffc20011bf5a80 key_timehandler key_timehandler 0 47 3 1 204 ffffc20011bf5640 icmp6_wqinput/1 icmp6_wqinput 0 46 3 0 204 ffffc20011bf5200 icmp6_wqinput/0 icmp6_wqinput 0 45 3 1 204 ffffc20011b0ca60 nd6_timer nd6_timer 0 44 3 1 204 ffffc20011b0c620 carp6_wqinput/1 carp6_wqinput 0 43 3 0 204 ffffc20011b0c1e0 carp6_wqinput/0 carp6_wqinput 0 42 3 1 204 ffffc20011af7a40 carp_wqinput/1 carp_wqinput 0 41 3 0 204 ffffc20011af7600 carp_wqinput/0 carp_wqinput 0 40 3 1 204 ffffc20011af71c0 icmp_wqinput/1 icmp_wqinput 0 39 3 0 204 ffffc20011ae7a20 icmp_wqinput/0 icmp_wqinput 0 38 3 0 204 ffffc20011ae75e0 rt_timer rt_timer 0 37 3 0 204 ffffc20011ae4a00 vmem_rehash vmem_rehash 0 27 3 0 204 ffffc2000f3c4580 scsibus0 sccomp 0 26 3 0 200 ffffc2000f3c4140 pms0 pmsreset 0 25 3 1 204 ffffc2000f3359a0 xcall/1 xcall 0 24 1 1 200 ffffc2000f335560 softser/1 0 > 23 7 1 20000200 ffffc2000f335120 softclk/1 0 22 1 1 200 ffffc2000f331980 softbio/1 0 21 1 1 200 ffffc2000f331540 softnet/1 0 20 1 1 201 ffffc2000f331100 idle/1 0 19 3 0 204 ffffc2000de52960 lnxpwrwq lnxpwrwq 0 18 3 0 204 ffffc2000de52520 lnxlngwq lnxlngwq 0 17 3 0 204 ffffc2000de520e0 lnxsyswq lnxsyswq 0 16 3 0 204 ffffc2000de4d940 lnxrcugc lnxrcugc 0 15 3 0 204 ffffc2000de4d500 sysmon smtaskq 0 14 3 0 204 ffffc2000de4d0c0 pmfsuspend pmfsuspend 0 13 3 0 204 ffffc2000de3e920 pmfevent pmfevent 0 12 3 0 204 ffffc2000de3e4e0 sopendfree sopendfr 0 11 3 0 204 ffffc2000de3e0a0 nfssilly nfssilly 0 10 3 1 200 ffffc2000de32900 cachegc cachegc 0 9 3 0 204 ffffc2000de324c0 vdrain vdrain 0 8 3 1 200 ffffc2000de32080 modunload mod_unld 0 7 3 0 204 ffffc2000de228e0 xcall/0 xcall 0 6 1 0 200 ffffc2000de224a0 softser/0 0 5 1 0 200 ffffc2000de22060 softclk/0 0 4 1 0 200 ffffc2000de1f8c0 softbio/0 0 3 1 0 200 ffffc2000de1f480 softnet/0 0 2 1 0 201 ffffc2000de1f040 idle/0 0 1 3 0 200 ffffffff82b66bc0 swapper uvm [Locks tracked through LWPs] Locks held by an LWP (syz-executor.4): Lock 0 (initialized at uvm_obj_init) lock address : 0xffffc20013259f40 type : sleep/adaptive initialized : 0xffffffff8110a5f7 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffffc20014010760 last held: 0xffffc20014010760 last locked* : 0xffffffff810ee398 unlocked : 0xffffffff812c868d owner field : 000000000000000000 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8ca68 with mutex 0xffffffff82d8c5c0. => No active turnstile for this lock. Lock 1 (initialized at pmap_ctor) lock address : 0xffffc20014369380 type : sleep/adaptive initialized : 0xffffffff80276a34 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffffc20014010760 last held: 0xffffc20014010760 last locked* : 0xffffffff80278fdc unlocked : 0xffffffff802799e8 owner field : 000000000000000000 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8c8f0 with mutex 0xffffffff82d8ba00. => No active turnstile for this lock. Locks held by an LWP (syz-executor.5): Lock 0 (initialized at amap_ctor) lock address : 0xffffc200138e9c40 type : sleep/adaptive initialized : 0xffffffff810de423 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffffc20014010760 last held: 0xffffc20013a75700 last locked* : 0xffffffff810ecee4 unlocked : 0xffffffff810eaf8c owner field : 0xffffc20013a75700 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8ca08 with mutex 0xffffffff82d8c2c0. => No active turnstile for this lock. Lock 1 (initialized at pmap_ctor) lock address : 0xffffc2001402c380 type : sleep/adaptive initialized : 0xffffffff80276a34 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffffc20014010760 last held: 0xffffc20013a75700 last locked* : 0xffffffff80278fdc unlocked : 0xffffffff802799e8 owner field : 0xffffc20013a75700 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8c6f0 with mutex 0xffffffff82d8aa00. => No active turnstile for this lock. Locks held by an LWP (syz-executor.0): Lock 0 (initialized at uvm_map_setup) lock address : 0xffffc20013f63bb8 type : sleep/adaptive initialized : 0xffffffff810fe3fd shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 1 current lwp : 0xffffc20014010760 last held: 0xffffc200143ea6c0 last locked* : 0xffffffff810f8294 unlocked : 0xffffffff810eb616 owner/count : 0xffffc200143ea6c0 flags : 0x0000000000000004 Turnstile chain at 0xffffffff82d8c9f0 with mutex 0xffffffff82d8c200. => No active turnstile for this lock. Lock 1 (initialized at uvm_obj_init) lock address : 0xffffc200138c1500 type : sleep/adaptive initialized : 0xffffffff8110a5f7 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 1 current lwp : 0xffffc20014010760 last held: 0xffffc200143ea6c0 last locked* : 0xffffffff810fe653 unlocked : 0xffffffff810eb5d6 owner field : 0xffffc200143ea6c0 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8c920 with mutex 0xffffffff82d8bb80. => No active turnstile for this lock. Lock 2 (initialized at pmap_ctor) lock address : 0xffffc20013fa9980 type : sleep/adaptive initialized : 0xffffffff80276a34 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 1 current lwp : 0xffffc20014010760 last held: 0xffffc200143ea6c0 last locked* : 0xffffffff802783f2 unlocked : 0xffffffff802799e8 owner field : 0xffffc200143ea6c0 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8c9b0 with mutex 0xffffffff82d8c000. => No active turnstile for this lock. Locks held by an LWP (syz-executor.3): Lock 0 (initialized at vcache_alloc) lock address : 0xffffc20013774700 type : sleep/adaptive initialized : 0xffffffff812c7c42 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 1 current lwp : 0xffffc20014010760 last held: 0xffffc200139156c0 last locked* : 0xffffffff812f4760 unlocked : 0xffffffff812f461d owner/count : 0xffffc200139156c0 flags : 0x0000000000000004 Turnstile chain at 0xffffffff82d8c760 with mutex 0xffffffff82d8ad80. => No active turnstile for this lock. Lock 1 (initialized at vcache_alloc) lock address : 0xffffc20013ad5a40 type : sleep/adaptive initialized : 0xffffffff812c7c42 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 1 current lwp : 0xffffc20014010760 last held: 0xffffc200139156c0 last locked* : 0xffffffff812f4760 unlocked : 000000000000000000 owner/count : 0xffffc200139156c0 flags : 0x0000000000000004 Turnstile chain at 0xffffffff82d8c9c8 with mutex 0xffffffff82d8c0c0. => No active turnstile for this lock. Locks held by an LWP (syz-executor.1): Lock 0 (initialized at vcache_alloc) lock address : 0xffffc200137744c0 type : sleep/adaptive initialized : 0xffffffff812c7c42 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffffc20014010760 last held: 0xffffc20013793ac0 last locked* : 0xffffffff812f4760 unlocked : 0xffffffff812f461d owner/count : 0xffffc20013793ac0 flags : 0x0000000000000004 Turnstile chain at 0xffffffff82d8c718 with mutex 0xffffffff82d8ab40. => No active turnstile for this lock. Lock 1 (initialized at vcache_alloc) lock address : 0xffffc20013ad5b40 type : sleep/adaptive initialized : 0xffffffff812c7c42 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffffc20014010760 last held: 0xffffc20013793ac0 last locked* : 0xffffffff812f4760 unlocked : 0xffffffff812f461d