[ 167.1226517] panic: kernel diagnostic assertion "sn->sn_opencnt" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/miscfs/specfs/spec_vnops.c", line 1665 
[ 167.1326372] cpu1: Begin traceback...
[ 167.1526462] vpanic() at netbsd:vpanic+0xc9d
[ 167.2026430] kern_assert() at netbsd:kern_assert+0x228
[ 167.2526447] spec_close() at netbsd:spec_close+0xdcb
[ 167.2926408] VOP_CLOSE() at netbsd:VOP_CLOSE+0x234 sys/kern/vnode_if.c:605
[ 167.3326445] cnclose() at netbsd:cnclose+0x20d sys/dev/cons.c:159
[ 167.3826426] cdev_close() at netbsd:cdev_close+0x30f sys/kern/subr_devsw.c:1200
[ 167.4326430] spec_close() at netbsd:spec_close+0x1280
[ 167.4726432] VOP_CLOSE() at netbsd:VOP_CLOSE+0x234 sys/kern/vnode_if.c:605
[ 167.5226424] vn_close() at netbsd:vn_close+0x23e
[ 167.5626435] closef() at netbsd:closef+0x4e5 sys/kern/kern_descrip.c:832
[ 167.6126474] fd_free() at netbsd:fd_free+0xc87
[ 167.6526433] exit1() at netbsd:exit1+0xaab sys/kern/kern_exit.c:301
[ 167.7026389] sys_exit() at netbsd:sys_exit+0x1d6
[ 167.7526506] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 167.7526506] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 167.7626441] --- syscall (number 1) ---
[ 167.7726380] netbsd:syscall+0x60c:
[ 167.7826385] cpu1: End traceback...
[ 167.7826385] fatal breakpoint trap in supervisor mode
[ 167.7926321] trap type 1 code 0 rip 0xffffffff802228ad cs 0x8 rflags 0x282 cr2 0x7df3e5dccff8 ilevel 0 rsp 0xffffd4008f574440
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f573e30
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f573820
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f573210
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f572c00
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f5725f0
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f571fe0
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f5719d0
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f5713c0
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f570db0
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f5707a0
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e
[ 167.8026326] fatal page fault in supervisor mode
[ 167.8026326] trap type 6 code 0 rip 0xffffffff848ae8f7 cs 0x8 rflags 0x10246 cr2 0x1e8 ilevel 0x8 rsp 0xffffd4008f570190
[ 167.8026326] curlwp 0xffffd4001364c640 pid 2967.2967 lowest kstack 0xffffd4008f56d2c0
kernel: page fault trap, code=0
[ 167.8026326] uvm_fault(0xffffd400135359b0, 0x0, 1) -> e