Summary

For PCI function 0, attach inserts csc into the global list BEFORE any resource setup; a later BAR/IRQ/intr failure returns without removing it - leaving virbase[0]==NULL on the list. Function 1's attach then finds that csc (or derefs csc==NULL) and unconditionally writes csc->reg->glcd - a NULL-deref write panic at boot. Intermediate paths also leak resources. Unwind-on-fail + NULL-check fix.