[ 185.0132252] panic: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/miscfs/specfs/spec_vnops.c", line 1665 
[ 185.0342585] cpu0: Begin traceback...
[ 185.0432022] vpanic() at netbsd:vpanic+0xc9d
[ 185.0732004] kern_assert() at netbsd:kern_assert+0x228
[ 185.0932072] spec_close() at netbsd:spec_close+0xdcb
[ 185.1232016] VOP_CLOSE() at netbsd:VOP_CLOSE+0x234 sys/kern/vnode_if.c:605
[ 185.1532046] cnclose() at netbsd:cnclose+0x20d sys/dev/cons.c:159
[ 185.1832027] cdev_close() at netbsd:cdev_close+0x30f sys/kern/subr_devsw.c:1200
[ 185.2132067] spec_close() at netbsd:spec_close+0x1280
[ 185.2332016] VOP_CLOSE() at netbsd:VOP_CLOSE+0x234 sys/kern/vnode_if.c:605
[ 185.2632021] vn_close() at netbsd:vn_close+0x23e
[ 185.2932071] closef() at netbsd:closef+0x4e5 sys/kern/kern_descrip.c:832
[ 185.3232110] fd_free() at netbsd:fd_free+0xc87
[ 185.3532007] exit1() at netbsd:exit1+0xaab sys/kern/kern_exit.c:301
[ 185.3732031] sys_exit() at netbsd:sys_exit+0x1d6
[ 185.4132149] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 185.4132149] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 185.4233159] --- syscall (number 1) ---
[ 185.4332083] netbsd:syscall+0x60c:
[ 185.4332083] cpu0: End traceback...
[ 185.4332083] fatal breakpoint trap in supervisor mode
[ 185.4441196] trap type 1 code 0 rip 0xffffffff802228ad cs 0x8 rflags 0x282 cr2 0x6fd9bc007300 ilevel 0 rsp 0xffffae00877c7440
[ 185.4573264] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c6e30
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c6820
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c6210
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c5c00
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c55f0
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c4fe0
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c49d0
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c43c0
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c3db0
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c37a0
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e
[ 185.4653075] fatal page fault in supervisor mode
[ 185.4653075] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffae00877c3190
[ 185.4653075] curlwp 0xffffae00121aa600 pid 5293.5293 lowest kstack 0xffffae00877c02c0
kernel: page fault trap, code=0
[ 185.4653075] uvm_fault(0xffffae0011e43190, 0x0, 1) -> e