syzbot

[ 407.1138021] panic: kernel diagnostic assertion "tmp != NULL" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/fs/tmpfs/tmpfs.h", line 324 
[ 407.1237870] cpu1: Begin traceback...
[ 407.1537875] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
[ 407.1937944] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0xc91c
[ 407.2437917] tmpfs_statvfs() at netbsd:tmpfs_statvfs+0x1af VFS_TO_TMPFS sys/fs/tmpfs/tmpfs.h:324 [inline]
[ 407.2437917] tmpfs_statvfs() at netbsd:tmpfs_statvfs+0x1af VFS_TO_TMPFS sys/fs/tmpfs/tmpfs.h:320 [inline]
[ 407.2437917] tmpfs_statvfs() at netbsd:tmpfs_statvfs+0x1af sys/fs/tmpfs/tmpfs_vfsops.c:406
[ 407.2837914] VFS_STATVFS() at netbsd:VFS_STATVFS+0x68 sys/kern/vfs_subr.c:1571
[ 407.3337922] layerfs_statvfs() at netbsd:layerfs_statvfs+0x85 sys/miscfs/genfs/layer_vfsops.c:169
[ 407.3837974] VFS_STATVFS() at netbsd:VFS_STATVFS+0x68 sys/kern/vfs_subr.c:1571
[ 407.4237945] dostatvfs() at netbsd:dostatvfs+0x1d3 sys/kern/vfs_syscalls.c:1263
[ 407.4737955] do_sys_getvfsstat() at netbsd:do_sys_getvfsstat+0x151 sys/kern/vfs_syscalls.c:1413
[ 407.5137930] compat_20_sys_getfsstat() at netbsd:compat_20_sys_getfsstat+0x63 sys/compat/common/vfs_syscalls_20.c:157
[ 407.5637946] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 407.5637946] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 407.6137996] syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
[ 407.6137996] syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 407.6137996] syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
[ 407.6237958] --- syscall (number 18 via SYS_syscall) ---
[ 407.6337942] netbsd:syscall+0x246:
[ 407.6437949] cpu1: End traceback...
[ 407.6437949] fatal breakpoint trap in supervisor mode
[ 407.6537913] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x2000c000 ilevel 0 rsp 0xffffbe0248b609f0
[ 407.6637924] curlwp 0xffffbe0012c02200 pid 6847.10698 lowest kstack 0xffffbe0248b592c0
Stopped in pid 6847.10698 (syz-executor.0) at   netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0xc91c
tmpfs_statvfs() at netbsd:tmpfs_statvfs+0x1af VFS_TO_TMPFS sys/fs/tmpfs/tmpfs.h:324 [inline]
tmpfs_statvfs() at netbsd:tmpfs_statvfs+0x1af VFS_TO_TMPFS sys/fs/tmpfs/tmpfs.h:320 [inline]
tmpfs_statvfs() at netbsd:tmpfs_statvfs+0x1af sys/fs/tmpfs/tmpfs_vfsops.c:406
VFS_STATVFS() at netbsd:VFS_STATVFS+0x68 sys/kern/vfs_subr.c:1571
layerfs_statvfs() at netbsd:layerfs_statvfs+0x85 sys/miscfs/genfs/layer_vfsops.c:169
VFS_STATVFS() at netbsd:VFS_STATVFS+0x68 sys/kern/vfs_subr.c:1571
dostatvfs() at netbsd:dostatvfs+0x1d3 sys/kern/vfs_syscalls.c:1263
do_sys_getvfsstat() at netbsd:do_sys_getvfsstat+0x151 sys/kern/vfs_syscalls.c:1413
compat_20_sys_getfsstat() at netbsd:compat_20_sys_getfsstat+0x63 sys/compat/common/vfs_syscalls_20.c:157
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
s