syzbot

[   2.0557136] panic: MSan: Uninitialized Stack Memory In LinearDmaSyncOp At Offset 20, Variable 'replun.i.i' From scsi_probe_bus()

[   2.0653287] cpu1: Begin traceback...
[   2.0753607] vpanic() at netbsd:vpanic+0x9ec
[   2.1053438] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[   2.1353460] kmsan_report_hook() at netbsd:kmsan_report_hook+0x184 sys/kern/subr_msan.c:178
[   2.1653486] bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x10b
[   2.2053465] vioscsi_scsipi_request() at netbsd:vioscsi_scsipi_request+0x1839
[   2.2353601] scsipi_run_queue() at netbsd:scsipi_run_queue+0x2011 scsipi_adapter_request sys/dev/scsipi/scsipi_base.c:2832 [inline]
[   2.2353601] scsipi_run_queue() at netbsd:scsipi_run_queue+0x2011 sys/dev/scsipi/scsipi_base.c:2183
[   2.2653493] scsipi_execute_xs() at netbsd:scsipi_execute_xs+0xe7e sys/dev/scsipi/scsipi_base.c:2204
[   2.2953493] scsipi_command() at netbsd:scsipi_command+0x386
[   2.3253433] scsi_probe_bus() at netbsd:scsi_probe_bus+0xe01 scsi_report_luns sys/dev/scsipi/scsiconf.c:428 [inline]
[   2.3253433] scsi_probe_bus() at netbsd:scsi_probe_bus+0xe01 scsi_discover_luns sys/dev/scsipi/scsiconf.c:483 [inline]
[   2.3253433] scsi_probe_bus() at netbsd:scsi_probe_bus+0xe01 sys/dev/scsipi/scsiconf.c:542
[   2.3553649] scsibus_config() at netbsd:scsibus_config+0x349 sys/dev/scsipi/scsiconf.c:325
[   2.4153226] scsibus_discover_thread() at netbsd:scsibus_discover_thread+0x28 sys/dev/scsipi/scsiconf.c:291
[   2.4253207] cpu1: End traceback...
[   2.4353190] fatal breakpoint trap in supervisor mode
[   2.4353190] trap type 1 code 0 rip 0xffffffff8022288d cs 0x8 rflags 0x286 cr2 0 ilevel 0 rsp 0xffff97806f0b8480
[   2.4453181] curlwp 0xffff9780117ff6c0 pid 0.30 lowest kstack 0xffff97806f0b12c0
Stopped in pid 0.30 (system) at netbsd:breakpoint+0x5:  leave
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0x9ec
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
kmsan_report_hook() at netbsd:kmsan_report_hook+0x184 sys/kern/subr_msan.c:178
bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x10b
vioscsi_scsipi_request() at netbsd:vioscsi_scsipi_request+0x1839
scsipi_run_queue() at netbsd:scsipi_run_queue+0x2011 scsipi_adapter_request sys/dev/scsipi/scsipi_base.c:2832 [inline]
scsipi_run_queue() at netbsd:scsipi_run_queue+0x2011 sys/dev/scsipi/scsipi_base.c:2183
scsipi_execute_xs() at netbsd:scsipi_execute_xs+0xe7e sys/dev/scsipi/scsipi_base.c:2204
scsipi_command() at netbsd:scsipi_command+0x386
scsi_probe_bus() at netbsd:scsi_probe_bus+0xe01 scsi_report_luns sys/dev/scsipi/scsiconf.c:428 [inline]
scsi_probe_bus() at netbsd:scsi_probe_bus+0xe01 scsi_discover_luns sys/dev/scsipi/scsiconf.c:483 [inline]
scsi_probe_bus() at netbsd:scsi_probe_bus+0xe01 sys/dev/scsipi/scsiconf.c:542
scsibus_config() at netbsd:scsibus_config+0x349 sys/dev/scsipi/scsiconf.c:325
scsibus_discover_thread() at netbsd:scsibus_discover_thread+0x28 sys/dev/scsipi/scsiconf.c:291
ds          a918
es          ba33
fs          8470
gs          0
rdi         5
rsi         0
rbp         ffff97806f0b8480
rbx         0
rdx         1
rcx         ffff9780117ff6c0
--db_more--