syzbot

[   2.1433821] panic: dk0 at sd0: "49b813d1-8009-4c4f-b3e1-2cc288366ecc", 2097085 blocks at 64, type: ffs
[   2.1433821] UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_thmap.c:262:10, member access within null pointer of type 'struct thmap_inode_t'
[   2.1433821] dk1 at sd0: "2a5f9479-33b7-499d-8cc4-f8d9ae0937b7", 2097119 blocks at 2097152, type: swap

[   2.2297778] cpu0: Begin traceback...
[   2.2297778] sd0: async, 8-bit transfers, tagged queueing
[   2.2833660] vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
[   2.4033626] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[   2.4733657] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
[   2.5433644] node_insert() at netbsd:node_insert+0x805 node_locked_p sys/kern/subr_thmap.c:262 [inline]
[   2.5433644] node_insert() at netbsd:node_insert+0x805 sys/kern/subr_thmap.c:417
[   2.6133669] thmap_put() at netbsd:thmap_put+0x3d5 root_try_put sys/kern/subr_thmap.c:544 [inline]
[   2.6133669] thmap_put() at netbsd:thmap_put+0x3d5 sys/kern/subr_thmap.c:706
[   2.6833619] npf_param_register() at netbsd:npf_param_register+0x164 sys/net/npf/npf_params.c:187
[   2.7433663] npf_state_tcp_sysinit() at netbsd:npf_state_tcp_sysinit+0x1dc sys/net/npf/npf_state_tcp.c:585
[   2.8133601] npf_state_sysinit() at netbsd:npf_state_sysinit+0x118 sys/net/npf/npf_state.c:127
[   2.8833641] npfk_create() at netbsd:npfk_create+0xd5 sys/net/npf/npf.c:88
[   2.9533602] npf_modcmd() at netbsd:npf_modcmd+0xac npf_init sys/net/npf/npf_os.c:158 [inline]
[   2.9533602] npf_modcmd() at netbsd:npf_modcmd+0xac sys/net/npf/npf_os.c:184
[   3.0233602] module_do_builtin() at netbsd:module_do_builtin+0x517 sys/kern/kern_module.c:940
[   3.0933604] module_init_class() at netbsd:module_init_class+0x544 sys/kern/kern_module.c:596
[   3.1633577] main() at netbsd:main+0x6c3 sys/kern/init_main.c:663
[   3.1733591] cpu0: End traceback...
[   3.1907235] fatal breakpoint trap in supervisor mode
[   3.1980852] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0 ilevel 0 rsp 0xffffffff86e933f0
[   3.2261441] curlwp 0xffffffff86534a40 pid 0.0 lowest kstack 0xffffffff86e8e2c0
Stopped in pid 0.0 (system) at  netbsd:breakpoint+0x5:  leave
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
node_insert() at netbsd:node_insert+0x805 node_locked_p sys/kern/subr_thmap.c:262 [inline]
node_insert() at netbsd:node_insert+0x805 sys/kern/subr_thmap.c:417
thmap_put() at netbsd:thmap_put+0x3d5 root_try_put sys/kern/subr_thmap.c:544 [inline]
thmap_put() at netbsd:thmap_put+0x3d5 sys/kern/subr_thmap.c:706
npf_param_register() at netbsd:npf_param_register+0x164 sys/net/npf/npf_params.c:187
npf_state_tcp_sysinit() at netbsd:npf_state_tcp_sysinit+0x1dc sys/net/npf/npf_state_tcp.c:585
npf_state_sysinit() at netbsd:npf_state_sysinit+0x118 sys/net/npf/npf_state.c:127
npfk_create() at netbsd:npfk_create+0xd5 sys/net/npf/npf.c:88
npf_modcmd() at netbsd:npf_modcmd+0xac npf_init sys/net/npf/npf_os.c:158 [inline]
npf_modcmd() at netbsd:npf_modcmd+0xac sys/net/npf/npf_os.c:184
module_do_builtin() at netbsd:module_do_builtin+0x517 sys/kern/kern_module.c:940
module_init_class() at netbsd:module_init_class+0x544 sys/kern/kern_module.c:596
main() at netbsd:main+0x6c3 sys/kern/init_main.c:663
ds          a9
es          33b0
fs          3400
gs          10
rdi         5
rsi         0
rbp         ffffffff86e933f0
--db_more--