[ 128.6032393] panic: kernel diagnostic assertion "ks->ks_pshared_proc == NULL" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/uipc_sem.c", line 501 [ 128.6277764] cpu0: Begin traceback... [ 128.6432326] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 128.7132319] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 128.7732317] ksem_free() at netbsd:ksem_free+0x3f9 sys/kern/uipc_sem.c:501 [ 128.8332325] do_ksem_init() at netbsd:do_ksem_init+0x22b sys/kern/uipc_sem.c:613 [ 128.8832336] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] [ 128.8832336] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90 [ 128.9332329] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 128.9332329] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 128.9332329] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 128.9432324] --- syscall (number 247 via SYS_syscall) --- [ 128.9632344] netbsd:syscall+0x2da: [ 128.9632344] cpu0: End traceback... [ 128.9746323] fatal breakpoint trap in supervisor mode [ 128.9746323] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x20000040 ilevel 0 rsp 0xffffca00c853ada0 [ 128.9904236] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 [ 128.9981488] Skipping crash dump on recursive panic [ 128.9981488] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wsfb/genfb.c:988:28, member access within null pointer of type 'struct genfb_private' [ 128.9981488] cpu0: Begin traceback... [ 128.9981488] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 128.9981488] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 [ 128.9981488] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429 [ 128.9981488] genfb_enable_polling() at netbsd:genfb_enable_polling+0x17e sys/dev/wsfb/genfb.c:988 [ 128.9981488] x86_genfb_ddb_trap_callback() at netbsd:x86_genfb_ddb_trap_callback+0x39 sys/arch/x86/x86/genfb_machdep.c:97 [ 128.9981488] db_trap() at netbsd:db_trap+0x68 sys/ddb/db_trap.c:73 [ 128.9981488] kdb_trap() at netbsd:kdb_trap+0x1aa sys/arch/amd64/amd64/db_interface.c:251 [ 128.9981488] trap() at netbsd:trap+0x5b2 sys/arch/amd64/amd64/trap.c:315 [ 128.9981488] --- trap (number 1) --- [ 128.9981488] breakpoint() at netbsd:breakpoint+0x5 [ 128.9981488] db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 [ 128.9981488] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 128.9981488] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 128.9981488] ksem_free() at netbsd:ksem_free+0x3f9 sys/kern/uipc_sem.c:501 [ 128.9981488] do_ksem_init() at netbsd:do_ksem_init+0x22b sys/kern/uipc_sem.c:613 [ 128.9981488] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] [ 128.9981488] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90 [ 128.9981488] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 128.9981488] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 128.9981488] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 128.9981488] --- syscall (number 247 via SYS_syscall) --- [ 128.9981488] netbsd:syscall+0x2da: [ 128.9981488] cpu0: End traceback... [ 128.9981488] fatal breakpoint trap in supervisor mode [ 128.9981488] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x20000040 ilevel 0x8 rsp 0xffffca00c853a470 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c853a0a0 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c8539cd0 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c8539900 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c8539530 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c8539160 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c8538d90 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e [ 128.9981488] fatal page fault in supervisor mode [ 128.9981488] trap type 6 code 0 rip 0xffffffff830b6b5b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffca00c85389c0 [ 128.9981488] curlwp 0xffffbf1ba408e100 pid 5300.6143 lowest kstack 0xffffca00c85362c0 kernel: page fault trap, code=0 [ 128.9981488] uvm_fault(0xffffbf1ba1f00cb8, 0x0, 1) -> e