[ 387.4728915] panic: kernel diagnostic assert[ 387.4829102] ion "lwpcnt >= 0" failed: file "/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 225 
[ 387.4929251] cpu1: Begin traceback...
[ 387.5029453] vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
[ 387.5029453] kern_assert() at netbsd:kern_assert+0x63
[ 387.5029453] chglwpcnt() at netbsd:chglwpcnt+0x82 sys/kern/kern_uidinfo.c:225
[ 387.5029453] lwp_free() at netbsd:lwp_free+0x5be sys/kern/kern_lwp.c:1244
[ 387.5029453] lwp_wait() at netbsd:lwp_wait+0x1b1 sys/kern/kern_lwp.c:570
[ 387.5029453] exit_lwps() at netbsd:exit_lwps+0x2cb sys/kern/kern_exit.c:634
[ 387.5029453] exit1() at netbsd:exit1+0x15e ksiginfo_queue_init sys/sys/signalvar.h:239 [inline]
[ 387.5029453] exit1() at netbsd:exit1+0x15e sys/kern/kern_exit.c:224
[ 387.5029453] sys_exit() at netbsd:sys_exit+0xba sys/kern/kern_exit.c:179
[ 387.5029453] syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline]
[ 387.5029453] syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 387.5029453] syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138
[ 387.5029453] --- syscall (number 1) ---
[ 387.5029453] Skipping crash dump on recursive panic
[ 387.5029453] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:153:24, member access within misaligned address 0xffffffff for type 'struct x86_64_frame' which requires 8 byte alignment

[ 387.5029453] Faulted in mid-traceback; aborting...
[ 387.5029453] fatal breakpoint trap in supervisor mode
[ 387.5029453] trap type 1 code 0 rip 0xffffffff8021ddbd cs 0x8 rflags 0x286 cr2 0x7257f8004ff8 ilevel 0x8 rsp 0xffffcf00b472ce10
[ 387.5029453] curlwp 0xffffef6ea07ff260 pid 11040.1 lowest kstack 0xffffcf00b472a2c0
Stopped in pid 11040.1 (syz-executor.3) at      netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x109 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:408
db_nextframe() at netbsd:db_nextframe+0x6f6 sys/arch/amd64/amd64/db_machdep.c:153
db_stack_trace_print() at netbsd:db_stack_trace_print+0x2c4 sys/arch/x86/x86/db_trace.c:277
db_panic() at netbsd:db_panic+0xa3 x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:67 [inline]
db_panic() at netbsd:db_panic+0xa3 sys/ddb/db_panic.c:57
vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336
kern_assert() at netbsd:kern_assert+0x63
chglwpcnt() at netbsd:chglwpcnt+0x82 sys/kern/kern_uidinfo.c:225
lwp_free() at netbsd:lwp_free+0x5be sys/kern/kern_lwp.c:1244
lwp_wait() at netbsd:lwp_wait+0x1b1 sys/kern/kern_lwp.c:570
exit_lwps() at netbsd:exit_lwps+0x2cb sys/kern/kern_exit.c:634
exit1() at netbsd:exit1+0x15e ksiginfo_queue_init sys/sys/signalvar.h:239 [inline]
exit1() at netbsd:exit1+0x15e sys/kern/kern_exit.c:224
sys_exit() at netbsd:sys_exit+0xba sys/kern/kern_exit.c:179
syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
[ 387.5029453] Skipping crash dump on recursive panic
[ 387.5029453] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:154:14, member access within misaligned address 0xffffffff for type 'struct x86_64_frame' which requires 8 byte alignment

[ 387.5029453] Faulted in mid-traceback; aborting...
[ 387.5029453] fatal breakpoint trap in supervisor mode
[ 387.5029453] trap type 1 code 0 rip 0xffffffff8021ddbd cs 0x8 rflags 0x286 cr2 0x7257f8004ff8 ilevel 0x8 rsp 0xffffcf00b472bb10
[ 387.5029453] curlwp 0xffffef6ea07ff260 pid 11040.1 lowest kstack 0xffffcf00b472a2c0
Stopped in pid 11040.1 (syz-executor.3) at      netbsd:breakpoint+0x5:  leave