syzbot


assert "map->limit == rtmap_limit" failed in rtable.c

Status: upstream: reported on 2024/07/12 18:30
Reported-by: syzbot+13ac5ef8ac8c36f76765@syzkaller.appspotmail.com
First crash: 97d, last: 4h21m

Sample crash report:
login: panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 131
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  38747  10068      0           0          0    1  syz-executor
*132420  10068      0           0  0x4000000    0K syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830e7a50) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8309d082,ffffffff82fdc0b1,83,ffffffff830dc8d3) at __assert+0x29
rtable_init() at rtable_init
rtable_add(16) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
rtable_add(16) at rtable_add+0x2d9 sys/net/rtable.c:222
if_createrdomain(16,ffff8000012ae000) at if_createrdomain+0x40 sys/net/if.c:1945
ifioctl(ffff800010fda2b0,8020699f,ffff80002a0e0a50,ffff80002f17c2c8) at ifioctl+0x1a1e sys/net/if.c:2294
sys_ioctl(ffff80002f17c2c8,ffff80002a0e0c30,ffff80002a0e0b80) at sys_ioctl+0x67c
syscall(ffff80002a0e0c30) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a0e0c30) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71d56a3e10, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 131
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830e7a50) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8309d082,ffffffff82fdc0b1,83,ffffffff830dc8d3) at __assert+0x29
rtable_init() at rtable_init
rtable_add(16) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
rtable_add(16) at rtable_add+0x2d9 sys/net/rtable.c:222
if_createrdomain(16,ffff8000012ae000) at if_createrdomain+0x40 sys/net/if.c:1945
ifioctl(ffff800010fda2b0,8020699f,ffff80002a0e0a50,ffff80002f17c2c8) at ifioctl+0x1a1e sys/net/if.c:2294
sys_ioctl(ffff80002f17c2c8,ffff80002a0e0c30,ffff80002a0e0b80) at sys_ioctl+0x67c
syscall(ffff80002a0e0c30) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a0e0c30) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71d56a3e10, count: -10
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a0e0770
rbx               0xffffffff834c3dbf    cpu_info_full_primary+0x2dbf
rdx                                0
rcx               0xffff80002f17c2c8
rax               0xffffffff834c2ff0    cpu_info_full_primary+0x1ff0
r8                                 0
r9                0x8080808080808080
r10               0xbb97297f471b515b
r11               0x600d38ced8fadbec
r12               0xffffffff834c3bc0    cpu_info_full_primary+0x2bc0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff817377d5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a0e0760
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=132420 pid=10068 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=50, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002f17cce8,0xffffffff835e13b0
    process=0xffff800037258488 user=0xffff80002a0db000, vmspace=0xfffffd806c793388
    estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 10068   38747  88983      0  7           0                syz-executor
 10068  359540  88983      0  2   0x4000000                syz-executor
*10068  132420  88983      0  7   0x4000000                syz-executor
 17803  289587    318      0  2           0                syz-executor
 17803  400826    318      0  2   0x4000000                syz-executor
 12488  171641  35566      0  2        0x10                syz-executor
 12488  403625  35566      0  2   0x4000010                syz-executor
 12488  287205  35566      0  3   0x4000090  fsleep        syz-executor
 12488   93579  35566      0  3   0x4000090  fsleep        syz-executor
 73814  321375  85264      0  2        0x11                syz-executor
 73814  445594  85264      0  2   0x4000010                syz-executor
 73814  433032  85264      0  3   0x4000090  fsleep        syz-executor
 73814  395805  85264      0  3   0x4000090  fsleep        syz-executor
 87347  470693  88054      0  3        0x80  nanoslp       syz-executor
 87347  470909  88054      0  3   0x4000080  fsleep        syz-executor
 87347  188322  88054      0  3   0x4000080  ttyout        syz-executor
 87347  423449  88054      0  3   0x4000080  fsleep        syz-executor
 96764  174108      1      0  3    0x100083  ttyin         getty
 48274  106457  45411      0  2         0x2                syz-executor
 88054  141306  45411      0  2         0x3                syz-executor
 88983  456210  45411      0  2       0x482                syz-executor
   318  404685  45411      0  2         0x3                syz-executor
 35566  263069  45411      0  2       0x482                syz-executor
 13788  185877  45411      0  2         0x3                syz-executor
 85264   23355  45411      0  2       0x482                syz-executor
 82584   29234  45411      0  3        0x82  nanoslp       syz-executor
 46614  154360      0      0  3     0x14200  bored         sosplice
 28256   81161      0      0  3     0x14280  nfsidl        nfsio
 43759  294764      0      0  3     0x14280  nfsidl        nfsio
 81978  352596      0      0  3     0x14280  nfsidl        nfsio
 42890  509824      0      0  3     0x14280  nfsidl        nfsio
 11915  227061      0      0  3     0x14280  nfsidl        nfsio
 62538  429380      0      0  3     0x14280  nfsidl        nfsio
 52649  186677      0      0  3     0x14280  nfsidl        nfsio
 44410  513480      0      0  3     0x14280  nfsidl        nfsio
 14046  250158      0      0  3     0x14280  nfsidl        nfsio
 70937   70963      0      0  3     0x14280  nfsidl        nfsio
 56787  428425      0      0  3     0x14280  nfsidl        nfsio
 77678  423919      0      0  3     0x14280  nfsidl        nfsio
 67983    2029      0      0  3     0x14280  nfsidl        nfsio
 98990  119198      0      0  3     0x14280  nfsidl        nfsio
 14321  229884      0      0  3     0x14280  nfsidl        nfsio
 68764  322548      0      0  3     0x14280  nfsidl        nfsio
 15296   32564      0      0  3     0x14280  nfsidl        nfsio
 67559  322150      0      0  3     0x14280  nfsidl        nfsio
 94086  136290      0      0  3     0x14280  nfsidl        nfsio
 99116  127761      0      0  3     0x14280  nfsidl        nfsio
 45411  190102  58754      0  3        0x82  kqread        syz-executor
 58754  304542  37857      0  3    0x10008a  sigsusp       ksh
 37857  391709  46049      0  3        0x98  kqread        sshd-session
 46049   68039  88693      0  3        0x92  kqread        sshd-session
 88693  322306      1      0  3        0x88  kqread        sshd
  6456  366996  70050     74  3   0x1100092  bpf           pflogd
 70050  333379      1      0  3        0x80  sbwait        pflogd
 34618  144984  17966     73  3   0x1100090  kqread        syslogd
 17966  457407      1      0  3    0x100082  sbwait        syslogd
 19880  499664      1      0  3    0x100080  kqread        resolvd
 95452  287912  72500     77  3    0x100092  kqread        dhcpleased
 30444  282844  72500     77  3    0x100092  kqread        dhcpleased
 72500  368257      1      0  3        0x80  kqread        dhcpleased
  1044  431647      0      0  3     0x14200  bored         smr
 53417  188659      0      0  2     0x14200                zerothread
 11772  157348      0      0  3     0x14200  aiodoned      aiodoned
 71102  158447      0      0  3     0x14200  syncer        update
 44092   91880      0      0  3     0x14200  cleaner       cleaner
 52728  308208      0      0  3     0x14200  reaper        reaper
 58449  240167      0      0  3     0x14200  pgdaemon      pagedaemon
   691  522042      0      0  3     0x14200  bored         viomb
 99360  396037      0      0  3  0x40014200  acpi0         acpi0
 20410  369797      0      0  3  0x40014200                idle1
 15008   77397      0      0  3     0x14200  bored         softnet3
 23502  111950      0      0  3     0x14200  bored         softnet2
 42825  454366      0      0  3     0x14200  bored         softnet1
 15157  239880      0      0  3     0x14200  bored         softnet0
 89517  376358      0      0  3     0x14200  bored         systqmp
 62914  382241      0      0  3     0x14200  bored         systq
 70260  107773      0      0  3     0x14200  tmoslp        softclockmp
 15083   65325      0      0  3  0x40014200  tmoslp        softclock
 40367  309515      0      0  3  0x40014200                idle0
     1     169      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 10068 (syz-executor) thread 0xffff80002f17c2c8 (132420)
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff8354be68)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  __mp_acquire_count+0x58
#2  mi_switch+0x4b7 sys/kern/sched_bsd.c:441
#3  yield+0x6a sys/kern/sched_bsd.c:320
#4  malloc+0xe5 sys/kern/kern_malloc.c:170
#5  rtmap_grow+0xb2 sys/net/rtable.c:126
#6  rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
#6  rtable_add+0x2d9 sys/net/rtable.c:222
#7  if_createrdomain+0x40 sys/net/if.c:1945
#8  ifioctl+0x1a1e sys/net/if.c:2294
#9  sys_ioctl+0x67c
#10 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#10 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#11 Xsyscall+0x128
Process 12488 (syz-executor) thread 0xffff8000ffff2a40 (403625)
exclusive rwlock vmmaplk r = 0 (0xfffffd806919ceb8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  vm_map_lock_ln+0x143 sys/uvm/uvm_map.c:5252
#3  uvm_map_protect+0xe1 sys/uvm/uvm_map.c:3059
#4  sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585
#5  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#5  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#6  Xsyscall+0x128
Process 48274 (syz-executor) thread 0xffff80002f17c7d8 (106457)
exclusive rrwlock inode r = 0 (0xfffffd8071d90c48)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:169
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0x113 sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x102 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3099
#10 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#10 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd8070e4f5e8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3084
#8  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#8  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10219  11124K   11383K 166960K     12124        0
            pcb    17     18K      23K 166960K       258        0
         rtable   247      8K       8K 166960K       909        0
             pf    36     18K      19K 166960K        96        0
         ifaddr    43      7K       8K 166960K       122        0
        ifgroup    55      2K       2K 166960K       134        0
         sysctl     1      0K       0K 166960K         1        0
       counters    64     36K      36K 166960K       108        0
       ioctlops     0      0K       4K 166960K      1580        0
            iov     0      0K      20K 166960K        44        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1398     88K      88K 166960K      1978        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K      13K 166960K        12        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        32        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    17     61K      93K 166960K       898        0
          sigio     0      0K       0K 166960K         8        0
           proc    72     91K     152K 166960K      1043        0
        subproc   104      6K       6K 166960K       312        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        56        0
       in_multi    99      7K       7K 166960K       298        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   235   1049K    1049K 166960K       235        0
           exec     0      0K       1K 166960K       680        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   250     73K      92K 166960K      9249        0
       UVM aobj    19      2K       2K 166960K        22        0
     pinsyscall    42     84K     104K 166960K      2411        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        29        0
            NDP    12      0K       1K 166960K        85        0
           temp    62   6820K    6899K 166960K     29651        0
         kqueue    13     20K      28K 166960K       112        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       99    0       96     1     0     1     1     0     8    0
rtentry    112      307    0      195     4     0     4     4     0     8    0
unpcb      144      835    0      809    11     5     6     6     0     8    5
syncache   336        5    0        5     2     2     0     1     0     8    0
tcpcb      808      246    0      242    11     6     5     7     0     8    4
arp        120       52    0       34     1     0     1     1     0     8    0
inpcb      336     1075    0     1066    21    12     9    12     0     8    8
nd6        136       77    0       53     1     0     1     1     0     8    0
pkpcb       40        4    0        4     3     2     1     1     0     8    1
kcovpl      48       24    0       16     1     0     1     1     0     8    0
ppxss      1168       5    0        5     2     2     0     1     0     8    0
pfstscr     40        1    0        1     1     1     0     1     0     8    0
pffrag     232        9    0        3     2     1     1     1     0   482    0
pffrnode    88        9    0        3     2     1     1     1     0     8    0
pffrent     40       13    0        7     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       76    0       28     1     0     1     1     0     8    0
pfstkey    128       78    0       30     2     0     2     2     0     8    0
pfstate    376       77    0       29     5     0     5     5     0     8    0
pfrule     1344      26    0       18     2     0     2     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     1248    0      789    33     2    31    31     0     8    2
art_table   32     1250    0      789     4     0     4     4     0     8    0
art_node    16      305    0      203     1     0     1     1     0     8    0
sysvmsgpl   40        5    0        0     1     0     1     1     0     8    0
semapl     112       28    0       18     1     0     1     1     0     8    0
shmpl      112       19    0        3     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2578    0     1044    97     0    97    97     0     8    0
ffsino     272     2578    0     1044   103     0   103   103     0     8    0
nchpl      144     3520    0     1813    64     0    64    64     0     8    0
uvmvnodes   80     3125    0        0    64     0    64    64     0     8    0
vnodes     216     3125    0        0   174     0   174   174     0     8    0
namei      1024   13301    0    13300     4     3     1     2     0     8    0
percpumem   16       68    0       22     1     0     1     1     0     8    0
kstatmem   264       68    0       44     2     0     2     2     0     8    0
scsiplug    72        4    0        4     2     1     1     1     0     8    1
scxspl     216    20045    0    20045    11    10     1     8     1     8    1
plimitpl   152      240    0      222     2     0     2     2     0     8    1
sigapl     424     1193    0     1123     9     0     9     9     0     8    0
futexpl     64     8299    0     8293     2     1     1     1     0     8    0
knotepl    120      379    0        0    12     0    12    12     0     8    0
kqueuepl   216      301    0      291     7     4     3     5     0     8    2
pipepl     320      195    0      168     3     0     3     3     0     8    0
fdescpl    496     1153    0     1122     7     2     5     5     0     8    0
filepl     152     6592    0     6330    27     9    18    19     0     8    7
lockfpl    104      420    0      417     2     1     1     2     0     8    0
lockfspl    48      199    0      196     1     0     1     1     0     8    0
sessionpl  144       42    0       33     1     0     1     1     0     8    0
pgrppl      48       72    0       55     1     0     1     1     0     8    0
ucredpl    104      946    0      929     1     0     1     1     0     8    0
zombiepl   144     1416    0     1414     2     1     1     1     0     8    0
processpl  1160    1193    0     1123     6     0     6     6     0     8    0
procpl     648     2151    0     2069     9     1     8     8     0     8    0
srpgc       96        2    0        2     1     0     1     1     0     8    1
sosppl     168        5    0        5     2     1     1     1     0     8    1
sockpl     664     2024    0     1986    34    23    11    17     0     8    7
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     143    0        0    18     0    18    18     0     8    0
mcl2k      2048      22    0        0     3     0     3     3     0     8    0
mtagpl      96        7    0        0     1     0     1     1     0     8    0
mbufpl     256      242    0        0    15     0    15    15     0     8    0
bufpl      280     7373    0     1199   442     0   442   442     0     8    0
anonpl      24   234500    0   230694    54     5    49    52     0   185    8
amapchunkpl 152   30052    0    29506    37     6    31    35     0   158    8
amappl16   200     5477    0     5438    29    19    10    14     0     8    7
amappl15   192       12    0       12     1     1     0     1     0     8    0
amappl14   184      156    0      144     1     0     1     1     0     8    0
amappl13   176       10    0       10     2     1     1     1     0     8    1
amappl12   168     2059    0     2028     3     1     2     2     0     8    0
amappl11   160       59    0       45     1     0     1     1     0     8    0
amappl10   152       12    0       12     1     1     0     1     0     8    0
amappl9    144      127    0      127     1     1     0     1     0     8    0
amappl8    136       20    0       18     1     0     1     1     0     8    0
amappl7    128      142    0      130     1     0     1     1     0     8    0
amappl6    120      329    0      327     1     0     1     1     0     8    0
amappl5    112      215    0      203     1     0     1     1     0     8    0
amappl4    104      368    0      349     1     0     1     1     0     8    0
amappl3     96     5998    0     5874     5     1     4     4     0     8    0
amappl2     88      927    0      858     2     0     2     2     0     8    0
amappl1     80    11300    0    10724    14     0    14    14     0     8    0
amappl      88     8712    0     8524     5     0     5     5     0    92    0
dma4096    4096       2    0        2     2     1     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       21    0        3     1     0     1     1     0     8    0
uaddrrnd    24     1153    0     1122     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1153    0     1122     1     0     1     1     0     8    0
vmmpekpl   168    10623    0    10573     3     0     3     3     0     8    0
vmmpepl    168    78561    0    76658   105    10    95    95     0   357    9
vmsppl     440     1152    0     1122     6     2     4     5     0     8    0
rwobjpl     56    28892    0    24774    60     1    59    59     0     8    0
pdppl      4096    2313    0     2244   127    56    71    87     0     8    2
pvpl        32    28051    0        0   227     1   226   226     0   265    0
pmappl     248     1152    0     1122     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      448    0       85    11     0    11    11     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830e7a50) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8309d082,ffffffff82fdc0b1,83,ffffffff830dc8d3) at __assert+0x29
rtable_init() at rtable_init
rtable_add(16) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
rtable_add(16) at rtable_add+0x2d9 sys/net/rtable.c:222
if_createrdomain(16,ffff8000012ae000) at if_createrdomain+0x40 sys/net/if.c:1945
ifioctl(ffff800010fda2b0,8020699f,ffff80002a0e0a50,ffff80002f17c2c8) at ifioctl+0x1a1e sys/net/if.c:2294
sys_ioctl(ffff80002f17c2c8,ffff80002a0e0c30,ffff80002a0e0b80) at sys_ioctl+0x67c
syscall(ffff80002a0e0c30) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a0e0c30) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71d56a3e10, count: -10
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7d62024fff10, count: 12
ddb{1}> trace
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7d62024fff10, count: -3

Crashes (59):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/18 02:12 openbsd ef4af84434df 666f77ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/16 16:26 openbsd 3bf609606383 bde2d81c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/15 02:17 openbsd 22b55b0b9cd9 b01b6661 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/12 08:36 openbsd deda38367d8c 084d8178 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/12 02:51 openbsd deda38367d8c 084d8178 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/11 07:13 openbsd 5101d665ac9b cd942402 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/10 04:20 openbsd 53b677a8a339 0278d004 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/07 14:00 openbsd 399bfee8b632 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/07 08:47 openbsd 399bfee8b632 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/07 06:00 openbsd e1668dfc1242 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/06 09:27 openbsd 1b325262a2fb d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/05 23:44 openbsd 502b52cbdf55 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/04 14:26 openbsd ecf90ed7d782 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/04 13:20 openbsd ecf90ed7d782 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/04 09:08 openbsd 3c9ccb50785e d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/04 05:08 openbsd 3c9ccb50785e d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/03 15:57 openbsd 770bc2e5805f d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/03 03:05 openbsd 67e4adbbdf0e a4c7fd36 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/02 14:59 openbsd 9acbf608f1e1 83a2f15f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/01 21:05 openbsd 67526adf6fb7 ea2b66a6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/01 19:35 openbsd 67526adf6fb7 ea2b66a6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/10/01 06:30 openbsd 477ac4f17e6a bbd4e0a4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/29 04:19 openbsd 7eb67ff9a029 ba29ff75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/29 02:11 openbsd 7eb67ff9a029 ba29ff75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/28 11:07 openbsd 352e6c5d7c95 440b26ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/28 09:31 openbsd 352e6c5d7c95 440b26ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/27 19:23 openbsd b985d8243801 2b1784d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/26 05:15 openbsd f8f7dc1f1132 0d19f247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/26 01:16 openbsd f8f7dc1f1132 0d19f247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/26 00:04 openbsd f8f7dc1f1132 0d19f247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/24 22:08 openbsd 208893442c38 5643e0e9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/24 04:16 openbsd 208893442c38 89298aad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/23 07:45 openbsd 208893442c38 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/22 17:20 openbsd 3a06db87a139 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/22 16:13 openbsd 4cda312e06fb 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/21 11:14 openbsd 08948b0a81ee 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/17 16:26 openbsd 3715dbf7b2d1 c673ca06 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/14 00:12 openbsd 3800fc3581d8 ff60e2ca .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/11 13:03 openbsd 4c8569653c0d 9326a104 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/11 10:05 openbsd 4c8569653c0d 9326a104 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/10 15:28 openbsd 6bf665493ecb 784df80e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/10 14:18 openbsd 6bf665493ecb 784df80e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/10 07:32 openbsd d05e5827ac65 784df80e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/09 01:34 openbsd 845086ffb80c 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/07 23:25 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/09/02 00:19 openbsd 24056440d1d6 1eda0d14 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/31 21:36 openbsd 3b38da78bae8 1eda0d14 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/31 16:35 openbsd 3b38da78bae8 1eda0d14 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/26 16:41 openbsd 7a4fa660cb4e 9aee4e0b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/24 23:32 openbsd 9a7d784aa6c4 d7d32352 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/20 01:51 openbsd 80c8bfd3e5af 9f0ab3fb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/18 14:47 openbsd 076a4f8b5857 dbc93b08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/18 13:57 openbsd 076a4f8b5857 dbc93b08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/18 08:39 openbsd 076a4f8b5857 dbc93b08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/17 06:45 openbsd a6d36058f3be dbc93b08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/17 04:32 openbsd a6d36058f3be dbc93b08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/15 03:15 openbsd 9c3f005cd02b e4bacdaf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/08/04 23:42 openbsd 6651361ef667 1786a2a8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
2024/07/12 18:29 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "map->limit == rtmap_limit" failed in rtable.c
* Struck through repros no longer work on HEAD.