[ 315.1874647] panic: kernel diagnostic assertion "dev->dv_detaching == curlwp" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_autoconf.c", line 2176 
[ 315.2074577] cpu1: Begin traceback...
[ 315.2274574] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 315.2974568] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 315.3574567] config_detach_commit() at netbsd:config_detach_commit+0xcb sys/kern/subr_autoconf.c:2176
[ 315.4074549] cdev_detached() at netbsd:cdev_detached+0x15d sys/kern/subr_devsw.c:1384
[ 315.4574556] vdevgone() at netbsd:vdevgone+0x125 sys/kern/vfs_subr.c:524
[ 315.5074570] audiodetach() at netbsd:audiodetach+0xb8 sys/dev/audio/audio.c:1371
[ 315.5474559] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037
[ 315.5974573] config_detach_children() at netbsd:config_detach_children+0x83 sys/kern/subr_autoconf.c:2195
[ 315.6574541] pad_detach() at netbsd:pad_detach+0x87 sys/dev/pad/pad.c:251
[ 315.7074553] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037
[ 315.7574549] fops_pad_close() at netbsd:fops_pad_close+0xb7 pad_close sys/dev/pad/pad.c:423 [inline]
[ 315.7574549] fops_pad_close() at netbsd:fops_pad_close+0xb7 sys/dev/pad/pad.c:433
[ 315.8074565] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
[ 315.8574547] fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571
[ 315.9074549] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301
[ 315.9474535] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
[ 315.9974571] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 315.9974571] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 315.9974571] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 316.0174545] --- syscall (number 1) ---
[ 316.0274531] netbsd:syscall+0x2da:
[ 316.0374558] cpu1: End traceback...
[ 316.0374558] fatal breakpoint trap in supervisor mode
[ 316.0374558] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x77ddd3c7cc50 ilevel 0 rsp 0xffff9600c9277980
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
[ 316.0574526] Skipping crash dump on recursive panic
[ 316.0574526] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wsfb/genfb.c:988:28, member access within null pointer of type 'struct genfb_private'

[ 316.0574526] cpu1: Begin traceback...
[ 316.0574526] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 316.0574526] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 316.0574526] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
[ 316.0574526] genfb_enable_polling() at netbsd:genfb_enable_polling+0x17e sys/dev/wsfb/genfb.c:988
[ 316.0574526] x86_genfb_ddb_trap_callback() at netbsd:x86_genfb_ddb_trap_callback+0x39 sys/arch/x86/x86/genfb_machdep.c:97
[ 316.0574526] db_trap() at netbsd:db_trap+0x68 sys/ddb/db_trap.c:73
[ 316.0574526] kdb_trap() at netbsd:kdb_trap+0x1aa sys/arch/amd64/amd64/db_interface.c:251
[ 316.0574526] trap() at netbsd:trap+0x5b2 sys/arch/amd64/amd64/trap.c:315
[ 316.0574526] --- trap (number 1) ---
[ 316.0574526] breakpoint() at netbsd:breakpoint+0x5
[ 316.0574526] db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
[ 316.0574526] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 316.0574526] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 316.0574526] config_detach_commit() at netbsd:config_detach_commit+0xcb sys/kern/subr_autoconf.c:2176
[ 316.0574526] cdev_detached() at netbsd:cdev_detached+0x15d sys/kern/subr_devsw.c:1384
[ 316.0574526] vdevgone() at netbsd:vdevgone+0x125 sys/kern/vfs_subr.c:524
[ 316.0574526] audiodetach() at netbsd:audiodetach+0xb8 sys/dev/audio/audio.c:1371
[ 316.0574526] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037
[ 316.0574526] config_detach_children() at netbsd:config_detach_children+0x83 sys/kern/subr_autoconf.c:2195
[ 316.0574526] pad_detach() at netbsd:pad_detach+0x87 sys/dev/pad/pad.c:251
[ 316.0574526] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037
[ 316.0574526] fops_pad_close() at netbsd:fops_pad_close+0xb7 pad_close sys/dev/pad/pad.c:423 [inline]
[ 316.0574526] fops_pad_close() at netbsd:fops_pad_close+0xb7 sys/dev/pad/pad.c:433
[ 316.0574526] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
[ 316.0574526] fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571
[ 316.0574526] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301
[ 316.0574526] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
[ 316.0574526] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 316.0574526] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 316.0574526] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 316.0574526] --- syscall (number 1) ---
[ 316.0574526] netbsd:syscall+0x2da:
[ 316.0574526] cpu1: End traceback...
[ 316.0574526] fatal breakpoint trap in supervisor mode
[ 316.0574526] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x77ddd3c7cc50 ilevel 0x8 rsp 0xffff9600c9277050
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
[ 316.0574526] uvm_fault(0xffff81e7b2043e18, 0x0, 1) -> e
[ 316.0574526] fatal page fault in supervisor mode
[ 316.0574526] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffff9600c9276c80
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
kernel: page fault trap, code=0
[ 316.0574526] uvm_fault(0xffff81e7b2043e18, 0x0, 1) -> e
[ 316.0574526] fatal page fault in supervisor mode
[ 316.0574526] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffff9600c92768b0
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
kernel: page fault trap, code=0
[ 316.0574526] uvm_fault(0xffff81e7b2043e18, 0x0, 1) -> e
[ 316.0574526] fatal page fault in supervisor mode
[ 316.0574526] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffff9600c92764e0
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
kernel: page fault trap, code=0
[ 316.0574526] uvm_fault(0xffff81e7b2043e18, 0x0, 1) -> e
[ 316.0574526] fatal page fault in supervisor mode
[ 316.0574526] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffff9600c9276110
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
kernel: page fault trap, code=0
[ 316.0574526] uvm_fault(0xffff81e7b2043e18, 0x0, 1) -> e
[ 316.0574526] fatal page fault in supervisor mode
[ 316.0574526] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffff9600c9275d40
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
kernel: page fault trap, code=0
[ 316.0574526] uvm_fault(0xffff81e7b2043e18, 0x0, 1) -> e
[ 316.0574526] fatal page fault in supervisor mode
[ 316.0574526] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffff9600c9275970
[ 316.0574526] curlwp 0xffff81e7c084a580 pid 5335.3906 lowest kstack 0xffff9600c92732c0
kernel: page fault trap, code=0