[ 1493.8483869] panic: kernel diagnostic assertion "(so2->so_options & SO_ACCEPTCONN) == 0 || so2->so_lock == uipc_lock" failed: file "/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/uipc_usrreq.c", line 1201 [ 1493.8483869] cpu1: Begin traceback... [ 1493.8684059] vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 [ 1493.8984547] kern_assert() at netbsd:kern_assert+0x63 [ 1493.9385217] unp_connect() at netbsd:unp_connect+0x54f sys/kern/uipc_usrreq.c:1200 [ 1493.9785894] soconnect() at netbsd:soconnect+0x19c sys/kern/uipc_socket.c:832 [ 1494.0186537] do_sys_connect() at netbsd:do_sys_connect+0xd3 sys/kern/uipc_syscalls.c:369 [ 1494.0587189] sys_connect() at netbsd:sys_connect+0xaf sys/kern/uipc_syscalls.c:350 [ 1494.0887703] sys___syscall() at netbsd:sys___syscall+0x1c8 sy_call sys/sys/syscallvar.h:65 [inline] [ 1494.0887703] sys___syscall() at netbsd:sys___syscall+0x1c8 sys/kern/sys_syscall.c:77 [ 1494.1388504] syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline] [ 1494.1388504] syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline] [ 1494.1388504] syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138 [ 1494.1488674] --- syscall (number 198) --- [ 1494.1488674] Skipping crash dump on recursive panic [ 1494.1588826] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:153:24, member access within misaligned address 0x3 for type 'struct x86_64_frame' which requires 8 byte alignment [ 1494.1789153] Faulted in mid-traceback; aborting... [ 1494.1789153] fatal breakpoint trap in supervisor mode [ 1494.1889338] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x286 cr2 0x76461847a4f0 ilevel 0 rsp 0xffffb280a605ad70 [ 1494.1989479] curlwp 0xffffed0d6dd8e940 pid 24322.4 lowest kstack 0xffffb280a60582c0 Stopped in pid 24322.4 (syz-executor.1) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xd1 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 isAlreadyReported() at netbsd:isAlreadyReported HandleTypeMismatch.part.1() at netbsd:HandleTypeMismatch.part.1+0xcc HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b sys/../common/lib/libc/misc/ubsan.c:408 db_nextframe() at netbsd:db_nextframe+0x6f6 sys/arch/amd64/amd64/db_machdep.c:153 db_stack_trace_print() at netbsd:db_stack_trace_print+0x2c4 sys/arch/x86/x86/db_trace.c:277 db_panic() at netbsd:db_panic+0x8b x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:56 [inline] db_panic() at netbsd:db_panic+0x8b sys/ddb/db_panic.c:57 vpanic() at netbsd:vpanic+0x2aa sys/kern/subr_prf.c:336 kern_assert() at netbsd:kern_assert+0x63 unp_connect() at netbsd:unp_connect+0x54f sys/kern/uipc_usrreq.c:1200 soconnect() at netbsd:soconnect+0x19c sys/kern/uipc_socket.c:832 do_sys_connect() at netbsd:do_sys_connect+0xd3 sys/kern/uipc_syscalls.c:369 sys_connect() at netbsd:sys_connect+0xaf sys/kern/uipc_syscalls.c:350 sys___syscall() at netbsd:sys___syscall+0x1c8 sy_call sys/sys/syscallvar.h:65 [inline] sys___syscall() at netbsd:sys___syscall+0x1c8 sys/kern/sys_syscall.c:77 syscall() at netbsd:syscall+0x29a sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x29a sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x29a sys/arch/x86/x86/syscall.c:138 --- syscall (number 198) --- [ 1494.2089641] Skipping crash dump on recursive panic [ 1494.2089641] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/arch/amd64/amd64/db_machdep.c:154:14, member access within misaligned address 0x3 for type 'struct x86_64_frame' which requires 8 byte alignment [ 1494.2089641] Faulted in mid-traceback; aborting... [ 1494.2089641] fatal breakpoint trap in supervisor mode [ 1494.2089641] trap type 1 code 0 rip 0xffffffff8021e7cd cs 0x8 rflags 0x286 cr2 0x76461847a4f0 ilevel 0x8 rsp 0xffffb280a6059a70 [ 1494.2089641] curlwp 0xffffed0d6dd8e940 pid 24322.4 lowest kstack 0xffffb280a60582c0 Stopped in pid 24322.4 (syz-executor.1) at netbsd:breakpoint+0x5: leave