[   1.7989455] panic: kernel diagnostic assertion "len <= map->dm_mapsize - offset" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/arch/x86/x86/bus_dma.c", line 813 bad length 0x20004 + 4000 > 22000
[   1.7989455] cpu0: Begin traceback...
[   1.7989455] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291
[   1.7989455] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[   1.7989455] bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x61a _bus_dmamap_sync sys/arch/x86/x86/bus_dma.c:813 [inline]
[   1.7989455] bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x61a sys/arch/x86/x86/bus_dma.c:1373
[   1.7989455] virtio_enqueue_commit() at netbsd:virtio_enqueue_commit+0x506 sys/dev/pci/virtio.c:1174
[   1.7989455] vioscsi_scsipi_request() at netbsd:vioscsi_scsipi_request+0xa3d sys/dev/pci/vioscsi.c:426
[   1.7989455] scsipi_adapter_request() at netbsd:scsipi_adapter_request+0xd9 sys/dev/scsipi/scsipi_base.c:2834
[   1.7989455] scsipi_run_queue() at netbsd:scsipi_run_queue+0x5ea sys/dev/scsipi/scsipi_base.c:2090
[   1.7989455] scsipi_execute_xs() at netbsd:scsipi_execute_xs+0x7f2 sys/dev/scsipi/scsipi_base.c:2310
[   1.7989455] scsipi_command() at netbsd:scsipi_command+0x1e6 sys/dev/scsipi/scsipiconf.c:107
[   1.7989455] scsipi_inquire() at netbsd:scsipi_inquire+0x94 sys/dev/scsipi/scsipi_base.c:1221
[   1.7989455] scsi_probe_bus() at netbsd:scsi_probe_bus+0x442 scsi_report_luns sys/dev/scsipi/scsiconf.c:358 [inline]
[   1.7989455] scsi_probe_bus() at netbsd:scsi_probe_bus+0x442 scsi_discover_luns sys/dev/scsipi/scsiconf.c:435 [inline]
[   1.7989455] scsi_probe_bus() at netbsd:scsi_probe_bus+0x442 sys/dev/scsipi/scsiconf.c:494
[   1.7989455] scsibus_discover_thread() at netbsd:scsibus_discover_thread+0x110 scsibus_config sys/dev/scsipi/scsiconf.c:268 [inline]
[   1.7989455] scsibus_discover_thread() at netbsd:scsibus_discover_thread+0x110 sys/dev/scsipi/scsiconf.c:233
[   1.7989455] cpu0: End traceback...
[   1.7989455] fatal breakpoint trap in supervisor mode
[   1.7989455] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0 ilevel 0x8 rsp 0xffffa1022f8ea9f0
[   1.7989455] curlwp 0xffff812d2b0a1b00 pid 0.96 lowest kstack 0xffffa1022f8e62c0
Stopped in pid 0.96 (system) at netbsd:breakpoint+0x5:  leave
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x61a _bus_dmamap_sync sys/arch/x86/x86/bus_dma.c:813 [inline]
bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x61a sys/arch/x86/x86/bus_dma.c:1373
virtio_enqueue_commit() at netbsd:virtio_enqueue_commit+0x506 sys/dev/pci/virtio.c:1174
vioscsi_scsipi_request() at netbsd:vioscsi_scsipi_request+0xa3d sys/dev/pci/vioscsi.c:426
scsipi_adapter_request() at netbsd:scsipi_adapter_request+0xd9 sys/dev/scsipi/scsipi_base.c:2834
scsipi_run_queue() at netbsd:scsipi_run_queue+0x5ea sys/dev/scsipi/scsipi_base.c:2090
scsipi_execute_xs() at netbsd:scsipi_execute_xs+0x7f2 sys/dev/scsipi/scsipi_base.c:2310
scsipi_command() at netbsd:scsipi_command+0x1e6 sys/dev/scsipi/scsipiconf.c:107
scsipi_inquire() at netbsd:scsipi_inquire+0x94 sys/dev/scsipi/scsipi_base.c:1221
scsi_probe_bus() at netbsd:scsi_probe_bus+0x442 scsi_report_luns sys/dev/scsipi/scsiconf.c:358 [inline]
scsi_probe_bus() at netbsd:scsi_probe_bus+0x442 scsi_discover_luns sys/dev/scsipi/scsiconf.c:435 [inline]
scsi_probe_bus() at netbsd:scsi_probe_bus+0x442 sys/dev/scsipi/scsiconf.c:494
scsibus_discover_thread() at netbsd:scsibus_discover_thread+0x110 scsibus_config sys/dev/scsipi/scsiconf.c:268 [inline]
scsibus_discover_thread() at netbsd:scsibus_discover_thread+0x110 sys/dev/scsipi/scsiconf.c:233
ds          1
es          a9b0
fs          aa00
gs          10
rdi         5
rsi         0
rbp         ffffa1022f8ea9f0
rbx         1
--db_more--