panic: ASan: Unauthorized Access In ADDR: Addr ADDR [NUM bytes, read, PoolUseAfterFree]

[syzbot <syzbot+f0bc1a7b10d92e4677dd%syzkaller.appspotmail.com@localhost>]

Hello,

syzbot found the following issue on:

HEAD commit:    285735492d5f genfb(4): Make internal parts of struct genfb..
git tree:       netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14149b9a080000
kernel config:  https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=f0bc1a7b10d92e4677dd
compiler:       g++ (Debian 10.2.1-6) 10.2.1 20210110
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=147d8474080000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f0bc1a7b10d92e4677dd%syzkaller.appspotmail.com@localhost

[ 374.5418438] panic: ASan: Unauthorized Access In 0xffffffff8094e83c: Addr 0xffffaf0012cbaaa0 [8 bytes, read, PoolUseAfterFree]

[ 374.5557219] cpu0: Begin traceback...
[ 374.5618339] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293
[ 374.6018331] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1043
[ 374.6418353] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
[ 374.6418353] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
[ 374.6718357] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:370 [inline]
[ 374.6718357] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:420 [inline]
[ 374.6718357] __asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1207
[ 374.7018336] pmap_growkernel() at netbsd:pmap_growkernel+0x74d pmap_alloc_level sys/arch/x86/x86/pmap.c:5500 [inline]
[ 374.7018336] pmap_growkernel() at netbsd:pmap_growkernel+0x74d sys/arch/x86/x86/pmap.c:5612
[ 374.7318374] uvm_map_prepare() at netbsd:uvm_map_prepare+0x7ed sys/uvm/uvm_map.c:1221
[ 374.7618347] uvm_map() at netbsd:uvm_map+0x14d sys/uvm/uvm_map.c:1089
[ 374.7818342] uvm_km_alloc() at netbsd:uvm_km_alloc+0x211 sys/uvm/uvm_km.c:629
[ 374.8218338] pool_grow() at netbsd:pool_grow+0x10a pool_allocator_alloc sys/kern/subr_pool.c:2965 [inline]
[ 374.8218338] pool_grow() at netbsd:pool_grow+0x10a sys/kern/subr_pool.c:1417
[ 374.8518360] pool_get() at netbsd:pool_get+0x957 pool_catchup sys/kern/subr_pool.c:1558 [inline]
[ 374.8518360] pool_get() at netbsd:pool_get+0x957 sys/kern/subr_pool.c:1244
[ 374.8818334] allocbuf() at netbsd:allocbuf+0x167 buf_alloc sys/kern/vfs_bio.c:648 [inline]
[ 374.8818334] allocbuf() at netbsd:allocbuf+0x167 sys/kern/vfs_bio.c:1333
[ 374.9018345] getblk() at netbsd:getblk+0x35b sys/kern/vfs_bio.c:1258
[ 374.9318337] ffs_getblk() at netbsd:ffs_getblk+0x5b sys/ufs/ffs/ffs_subr.c:124
[ 374.9618360] ffs_balloc() at netbsd:ffs_balloc+0x18c8 ffs_balloc_ufs2 sys/ufs/ffs/ffs_balloc.c:772 [inline]
[ 374.9618360] ffs_balloc() at netbsd:ffs_balloc+0x18c8 sys/ufs/ffs/ffs_balloc.c:99
[ 374.9918344] ufs_mkdir() at netbsd:ufs_mkdir+0x88d sys/ufs/ufs/ufs_vnops.c:1331
[ 375.0218339] VOP_MKDIR() at netbsd:VOP_MKDIR+0x122 sys/kern/vnode_if.c:1339
[ 375.0518352] do_sys_mkdirat() at netbsd:do_sys_mkdirat+0x377 sys/kern/vfs_syscalls.c:4768
[ 375.0818357] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 375.0818357] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 375.0818357] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 375.0919241] --- syscall (number 136) ---
[ 375.1031344] netbsd:syscall+0x25a:
[ 375.1124487] cpu0: End traceback...
[ 375.1124487] fatal breakpoint trap in supervisor mode
[ 375.1124487] trap type 1 code 0 rip 0xffffffff80220a4d cs 0x8 rflags 0x286 cr2 0x7dabdfe7cc50 ilevel 0x6 rsp 0xffffaf019db7ee90
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7e9b0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7e4d0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7dff0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7db10
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7d630
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7d150
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7cc70
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7c790
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7c2b0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7bdd0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7b8f0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7b410
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7af30
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf019db7aa50
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
[ 375.1328919] fatal double fault in supervisor mode
[ 375.1328919] trap type 13 code 0 rip 0xffffffff81bac1e1 cs 0x8 rflags 0x10286 cr2 0xffffaf019db79ff8 ilevel 0x8 rsp 0xffffaf019db7a000
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: double fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10083 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184ca1c40
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184ca1760
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184ca1280
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184ca0da0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184ca08c0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184ca03e0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9ff00
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9fa20
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9f540
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9f060
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9eb80
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9e6a0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9e1c0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9dce0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9d800
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9d320
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9ce40
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9c960
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9c480
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9bfa0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9bac0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9b5e0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9b100
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9ac20
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9a740
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c9a260
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c99d80
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c998a0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c993c0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c98ee0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c98a00
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c98520
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c98040
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c97b60
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c97680
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c971a0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c96cc0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c967e0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c96300
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c95e20
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c95940
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c95460
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c94f80
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c94aa0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c945c0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c940e0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c93c00
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c93720
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c93240
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c92d60
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c92880
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c923a0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c91ec0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c919e0
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c91500
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c91020
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
[ 375.1328919] uvm_fault(0xffffaf0013348e40, 0xffff900000000000, 1) -> e
[ 375.1328919] fatal page fault in supervisor mode
[ 375.1328919] trap type 6 code 0 rip 0xffffffff81b8252b cs 0x8 rflags 0x10283 cr2 0xffff90000000003d ilevel 0x8 rsp 0xffffaf0184c90b40
[ 375.1328919] curlwp 0xffffaf0013ccd200 pid 1194.1194 lowest kstack 0xffffaf019db782c0
kernel: page fault trap, code=0
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000200000000 = 8192 MiB
CPUs found: 2     Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 4c614fef-0d9b-71e9-867c-db19c1491eb8
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f2700: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Sending Seabios boot VM event.
Booting from Hard Disk 0...

>> NetBSD/x86 BIOS Boot, Revision 5.11 (Thu Jun 11 19:20:47 UTC 2020) (from NetBSD 9.99.65)
>> Memory: 639/3144640 k

     1. Boot normally
     2. Boot single user
     3. Drop to boot prompt

Choose an option; RETURN for default; SPACE to stop countdown.
Option 1 will be chosen in 5 seconds.            4 seconds.            3 seconds.            2 seconds.            1 seconds.            0 seconds.            0 seconds.     
command(s): rndseed /var/db/entropy-file;boot
default boot twice, skipping...


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller%googlegroups.com@localhost.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches

-- 
You received this message because you are subscribed to the Google Groups "syzkaller-netbsd-bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-netbsd-bugs+unsubscribe%googlegroups.com@localhost.
To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-netbsd-bugs/00000000000006c27805e4060ac8%40google.com.