[ 54.5621078] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:344:3, signed integer overflow: -9223372036854775808 - 1578169053 cannot be represented in type 'long int' [ 54.5873275] cpu0: Begin traceback... [ 54.6121628] vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 [ 54.6722351] isAlreadyReported() at netbsd:isAlreadyReported [ 54.7323082] HandleOverflow() at netbsd:HandleOverflow+0x1fb sys/../common/lib/libc/misc/ubsan.c:360 [ 54.7923861] ts2timo() at netbsd:ts2timo+0x649 sys/kern/subr_time.c:344 [ 54.8524446] nanosleep1() at netbsd:nanosleep1+0x3e sys/kern/kern_time.c:340 [ 54.9125203] sys_clock_nanosleep() at netbsd:sys_clock_nanosleep+0xb7 sys/kern/kern_time.c:320 [ 54.9725975] sys___syscall() at netbsd:sys___syscall+0x1c8 sy_call sys/sys/syscallvar.h:65 [inline] [ 54.9725975] sys___syscall() at netbsd:sys___syscall+0x1c8 sys/kern/sys_syscall.c:77 [ 55.0426757] syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline] [ 55.0426757] syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline] [ 55.0426757] syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138 [ 55.0627042] --- syscall (number 198) --- [ 55.0627042] Skipping crash dump on recursive panic [ 55.0733118] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:153:24, member access within misaligned address 0x4 for type 'struct x86_64_frame' which requires 8 byte alignment [ 55.0943145] Faulted in mid-traceback; aborting... [ 55.0943145] fatal breakpoint trap in supervisor mode [ 55.1050730] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x282 cr2 0x7c858b200000 ilevel 0 rsp 0xffff9e00b2ca6960 [ 55.1170402] curlwp 0xffff8cd9cc6965a0 pid 1643.3 lowest kstack 0xffff9e00b2ca42c0 Stopped in pid 1643.3 (syz-executor.2) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xd1 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 isAlreadyReported() at netbsd:isAlreadyReported HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:408 db_nextframe() at netbsd:db_nextframe+0x6f6 sys/arch/amd64/amd64/db_machdep.c:153 db_stack_trace_print() at netbsd:db_stack_trace_print+0x2c4 sys/arch/x86/x86/db_trace.c:277 db_panic() at netbsd:db_panic+0x8b x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:56 [inline] db_panic() at netbsd:db_panic+0x8b sys/ddb/db_panic.c:57 vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 isAlreadyReported() at netbsd:isAlreadyReported HandleOverflow() at netbsd:HandleOverflow+0x1fb sys/../common/lib/libc/misc/ubsan.c:360 ts2timo() at netbsd:ts2timo+0x649 sys/kern/subr_time.c:344 nanosleep1() at netbsd:nanosleep1+0x3e sys/kern/kern_time.c:340 sys_clock_nanosleep() at netbsd:sys_clock_nanosleep+0xb7 sys/kern/kern_time.c:320 sys___syscall() at netbsd:sys___syscall+0x1c8 sy_call sys/sys/syscallvar.h:65 [inline] sys___syscall() at netbsd:sys___syscall+0x1c8 sys/kern/sys_syscall.c:77 syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138 --- syscall (number 198) --- [ 55.1248861] Skipping crash dump on recursive panic [ 55.1248861] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:154:14, member access within misaligned address 0x4 for type 'struct x86_64_frame' which requires 8 byte alignment [ 55.1248861] Faulted in mid-traceback; aborting... [ 55.1248861] fatal breakpoint trap in supervisor mode [ 55.1248861] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x282 cr2 0x7c858b200000 ilevel 0x8 rsp 0xffff9e00b2ca5660 [ 55.1248861] curlwp 0xffff8cd9cc6965a0 pid 1643.3 lowest kstack 0xffff9e00b2ca42c0 Stopped in pid 1643.3 (syz-executor.2) at netbsd:breakpoint+0x5: leave