[ 71.6702204] panic: kernel diagnostic assertion "dev->dv_detaching == curlwp" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_autoconf.c", line 2176 [ 71.6935797] cpu0: Begin traceback... [ 71.7090890] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 71.7790908] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 71.8390899] config_detach_commit() at netbsd:config_detach_commit+0xcb sys/kern/subr_autoconf.c:2176 [ 71.8890880] cdev_detached() at netbsd:cdev_detached+0x15d sys/kern/subr_devsw.c:1384 [ 71.9390879] vdevgone() at netbsd:vdevgone+0x125 sys/kern/vfs_subr.c:524 [ 71.9890895] audiodetach() at netbsd:audiodetach+0xb8 sys/dev/audio/audio.c:1371 [ 72.0390899] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037 [ 72.0790924] config_detach_children() at netbsd:config_detach_children+0x83 sys/kern/subr_autoconf.c:2195 [ 72.1390911] pad_detach() at netbsd:pad_detach+0x87 sys/dev/pad/pad.c:251 [ 72.1890891] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037 [ 72.2390902] fops_pad_close() at netbsd:fops_pad_close+0xb7 pad_close sys/dev/pad/pad.c:423 [inline] [ 72.2390902] fops_pad_close() at netbsd:fops_pad_close+0xb7 sys/dev/pad/pad.c:433 [ 72.2890883] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832 [ 72.3390907] fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571 [ 72.3890881] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301 [ 72.4390914] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180 [ 72.4890909] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 72.4890909] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 72.4890909] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 72.4990904] --- syscall (number 1) --- [ 72.5190923] netbsd:syscall+0x2da: [ 72.5190923] cpu0: End traceback... [ 72.5190923] fatal breakpoint trap in supervisor mode [ 72.5311707] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0xa3aa30 ilevel 0 rsp 0xffffd880c8713980 [ 72.5436403] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 [ 72.5513513] Skipping crash dump on recursive panic [ 72.5513513] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wsfb/genfb.c:988:28, member access within null pointer of type 'struct genfb_private' [ 72.5513513] cpu0: Begin traceback... [ 72.5513513] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 72.5513513] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 [ 72.5513513] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429 [ 72.5513513] genfb_enable_polling() at netbsd:genfb_enable_polling+0x17e sys/dev/wsfb/genfb.c:988 [ 72.5513513] x86_genfb_ddb_trap_callback() at netbsd:x86_genfb_ddb_trap_callback+0x39 sys/arch/x86/x86/genfb_machdep.c:97 [ 72.5513513] db_trap() at netbsd:db_trap+0x68 sys/ddb/db_trap.c:73 [ 72.5513513] kdb_trap() at netbsd:kdb_trap+0x1aa sys/arch/amd64/amd64/db_interface.c:251 [ 72.5513513] trap() at netbsd:trap+0x5b2 sys/arch/amd64/amd64/trap.c:315 [ 72.5513513] --- trap (number 1) --- [ 72.5513513] breakpoint() at netbsd:breakpoint+0x5 [ 72.5513513] db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 [ 72.5513513] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 72.5513513] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 72.5513513] config_detach_commit() at netbsd:config_detach_commit+0xcb sys/kern/subr_autoconf.c:2176 [ 72.5513513] cdev_detached() at netbsd:cdev_detached+0x15d sys/kern/subr_devsw.c:1384 [ 72.5513513] vdevgone() at netbsd:vdevgone+0x125 sys/kern/vfs_subr.c:524 [ 72.5513513] audiodetach() at netbsd:audiodetach+0xb8 sys/dev/audio/audio.c:1371 [ 72.5513513] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037 [ 72.5513513] config_detach_children() at netbsd:config_detach_children+0x83 sys/kern/subr_autoconf.c:2195 [ 72.5513513] pad_detach() at netbsd:pad_detach+0x87 sys/dev/pad/pad.c:251 [ 72.5513513] config_detach() at netbsd:config_detach+0x495 sys/kern/subr_autoconf.c:2037 [ 72.5513513] fops_pad_close() at netbsd:fops_pad_close+0xb7 pad_close sys/dev/pad/pad.c:423 [inline] [ 72.5513513] fops_pad_close() at netbsd:fops_pad_close+0xb7 sys/dev/pad/pad.c:433 [ 72.5513513] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832 [ 72.5513513] fd_free() at netbsd:fd_free+0x4dc sys/kern/kern_descrip.c:1571 [ 72.5513513] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301 [ 72.5513513] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180 [ 72.5513513] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 72.5513513] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 72.5513513] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 72.5513513] --- syscall (number 1) --- [ 72.5513513] netbsd:syscall+0x2da: [ 72.5513513] cpu0: End traceback... [ 72.5513513] fatal breakpoint trap in supervisor mode [ 72.5513513] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0xa3aa30 ilevel 0x8 rsp 0xffffd880c8713050 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 [ 72.5513513] uvm_fault(0xfffffc3147377308, 0x0, 1) -> e [ 72.5513513] fatal page fault in supervisor mode [ 72.5513513] trap type 6 code 0 rip 0xffffffff830b6b1b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffd880c8712c80 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 kernel: page fault trap, code=0 [ 72.5513513] uvm_fault(0xfffffc3147377308, 0x0, 1) -> e [ 72.5513513] fatal page fault in supervisor mode [ 72.5513513] trap type 6 code 0 rip 0xffffffff830b6b1b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffd880c87128b0 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 kernel: page fault trap, code=0 [ 72.5513513] uvm_fault(0xfffffc3147377308, 0x0, 1) -> e [ 72.5513513] fatal page fault in supervisor mode [ 72.5513513] trap type 6 code 0 rip 0xffffffff830b6b1b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffd880c87124e0 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 kernel: page fault trap, code=0 [ 72.5513513] uvm_fault(0xfffffc3147377308, 0x0, 1) -> e [ 72.5513513] fatal page fault in supervisor mode [ 72.5513513] trap type 6 code 0 rip 0xffffffff830b6b1b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffd880c8712110 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 kernel: page fault trap, code=0 [ 72.5513513] uvm_fault(0xfffffc3147377308, 0x0, 1) -> e [ 72.5513513] fatal page fault in supervisor mode [ 72.5513513] trap type 6 code 0 rip 0xffffffff830b6b1b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffd880c8711d40 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 kernel: page fault trap, code=0 [ 72.5513513] uvm_fault(0xfffffc3147377308, 0x0, 1) -> e [ 72.5513513] fatal page fault in supervisor mode [ 72.5513513] trap type 6 code 0 rip 0xffffffff830b6b1b cs 0x8 rflags 0x10217 cr2 0x1e8 ilevel 0x8 rsp 0xffffd880c8711970 [ 72.5513513] curlwp 0xfffffc314ab7fbc0 pid 1247.1247 lowest kstack 0xffffd880c870f2c0 kernel: page fault trap, code=0