syzbot


assert "map->limit == rtmap_limit" failed in rtable.c (2)

Status: upstream: reported on 2025/02/06 18:09
Reported-by: syzbot+4b7aca0368015987c9cc@syzkaller.appspotmail.com
First crash: 16d, last: 7h58m
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "map->limit == rtmap_limit" failed in rtable.c 77 94d 225d 0/3 auto-obsoleted due to no activity on 2025/01/09 07:35

Sample crash report:
login: panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 131
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*145864  66691      0           0  0x4000000    0K syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8343fe55) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833ea525,ffffffff8330f9d6,83,ffffffff8342f907) at __assert+0x29
rtable_init() at rtable_init
rtable_add(2) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
rtable_add(2) at rtable_add+0x2d9 sys/net/rtable.c:222
route_output(fffffd807d44c300,ffff8000014c15b8) at route_output+0x520 sys/net/rtsock.c:786
route_send(ffff8000014c15b8,fffffd807d44c300,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff8000014c15b8,0,ffff80003acd0fa8,0,0,0) at sosend+0x804
sendit(ffff80003c4e1c60,3,ffff80003acd10a0,0,ffff80003acd1150) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003c4e1c60,ffff80003acd1200,ffff80003acd1150) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff80003acd1200) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003acd1200) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x565f85d61a0, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 131
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8343fe55) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833ea525,ffffffff8330f9d6,83,ffffffff8342f907) at __assert+0x29
rtable_init() at rtable_init
rtable_add(2) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
rtable_add(2) at rtable_add+0x2d9 sys/net/rtable.c:222
route_output(fffffd807d44c300,ffff8000014c15b8) at route_output+0x520 sys/net/rtsock.c:786
route_send(ffff8000014c15b8,fffffd807d44c300,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff8000014c15b8,0,ffff80003acd0fa8,0,0,0) at sosend+0x804
sendit(ffff80003c4e1c60,3,ffff80003acd10a0,0,ffff80003acd1150) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003c4e1c60,ffff80003acd1200,ffff80003acd1150) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff80003acd1200) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003acd1200) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x565f85d61a0, count: -12
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003acd0bc0
rbx               0xffffffff837e5dc7    cpu_info_full_primary+0x2dc7
rdx                                0
rcx               0xffff80003c4e1c60
rax               0xffffffff837e4ff0    cpu_info_full_primary+0x1ff0
r8                                 0
r9                0x8080808080808080
r10               0xe1fa04bed7adaf5d
r11               0xdd9283213010aa40
r12               0xffffffff837e5bc8    cpu_info_full_primary+0x2bc8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff8136a795    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003acd0bb0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=145864 pid=66691 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=82, usrpri=82, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4e14b0,0xffff80003c4e02d0
    process=0xffff80003c4ed718 user=0xffff80003accc000, vmspace=0xfffffd806a624020
    estcpu=32, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 70102   73826  67856      0  3           0  futex         syz-executor
 70102  105181  67856      0  3   0x4000080  fsleep        syz-executor
 70102  258991  67856      0  2   0x4000000                syz-executor
 13437   39665   6590      0  2           0                syz-executor
 13437  239255   6590      0  3   0x4000080  fsleep        syz-executor
 13437   45151   6590      0  2   0x4000000                syz-executor
 48059  411049  93758      0  2           0                syz-executor
 48059  216403  93758      0  2   0x4000000                syz-executor
 48059  298838  93758      0  2   0x4000000                syz-executor
 48059  216474  93758      0  2   0x4000000                syz-executor
 66691  330653  33846      0  2           0                syz-executor
*66691  145864  33846      0  7   0x4000000                syz-executor
 66691  395826  33846      0  3   0x4000080  fsleep        syz-executor
 19726  189624  77782      0  3        0x80  nanoslp       syz-executor
 19726  406060  77782      0  2   0x4000000                syz-executor
 46241  243494  48222      0  2           0                syz-executor
 46241  141398  48222      0  3   0x4000080  fsleep        syz-executor
 46241  359275  48222      0  2   0x4000000                syz-executor
 82444  170756  16986      0  2           0                syz-executor
 82444  175173  16986      0  3   0x4000080  fsleep        syz-executor
 82444  390250  16986      0  2   0x4000000                syz-executor
 58937  160400      1      0  3    0x100083  ttyin         getty
 43190  349739      0      0  3     0x14200  acct          acct
 92527  457007      0      0  3     0x14280  nfsidl        nfsio
 26690  239448      0      0  3     0x14280  nfsidl        nfsio
 53012  517596      0      0  3     0x14280  nfsidl        nfsio
 86678  516942      0      0  3     0x14280  nfsidl        nfsio
 97817  505370      0      0  3     0x14280  nfsidl        nfsio
 44183  292681      0      0  3     0x14280  nfsidl        nfsio
 72281  174639      0      0  3     0x14280  nfsidl        nfsio
 36601  102692      0      0  3     0x14280  nfsidl        nfsio
 70460  142279      0      0  3     0x14280  nfsidl        nfsio
 67253   27986      0      0  3     0x14280  nfsidl        nfsio
 21040   45749      0      0  3     0x14280  nfsidl        nfsio
  1845  221348      0      0  3     0x14280  nfsidl        nfsio
 46310  493301      0      0  3     0x14280  nfsidl        nfsio
 33211  182777      0      0  3     0x14280  nfsidl        nfsio
 72820   50758      0      0  3     0x14280  nfsidl        nfsio
 34043  262126      0      0  3     0x14280  nfsidl        nfsio
 13719    7061      0      0  3     0x14280  nfsidl        nfsio
  9203   12834      0      0  3     0x14280  nfsidl        nfsio
 62802  501000      0      0  3     0x14280  nfsidl        nfsio
 11952  250211      0      0  3     0x14280  nfsidl        nfsio
 33846  130580  81412      0  2       0x482                syz-executor
 77782   11303  81412      0  2       0x482                syz-executor
 54937   36718      0      0  3     0x14200  bored         sosplice
 16986  489241  81412      0  2       0x482                syz-executor
 93758  420405  81412      0  2         0x3                syz-executor
 67856  264463  81412      0  2         0x3                syz-executor
  6590  186118  81412      0  2         0x3                syz-executor
 15873  521951  81412      0  2         0x3                syz-executor
 48222  471888  81412      0  2       0x482                syz-executor
 81412   87721  25441      0  3        0x82  kqread        syz-executor
 25441  142978  28743      0  3    0x10008a  sigsusp       ksh
 28743  496879  11060      0  3        0x98  kqread        sshd-session
 11060  284773   9337      0  3        0x92  kqread        sshd-session
  9337  444980      1      0  3        0x88  kqread        sshd
 44912   67139  60660     74  3   0x1100092  bpf           pflogd
 60660  490521      1      0  3        0x80  sbwait        pflogd
 47345  360607  38514     73  3   0x1100090  kqread        syslogd
 38514  192713      1      0  3    0x100082  sbwait        syslogd
 91827   75156      1      0  3    0x100080  kqread        resolvd
  3109  414048  52752     77  3    0x100092  kqread        dhcpleased
 99320  318546  52752     77  3    0x100092  kqread        dhcpleased
 52752  281016      1      0  3        0x80  kqread        dhcpleased
 30707  285988      0      0  3     0x14200  bored         smr
  6542  461249      0      0  2     0x14200                zerothread
 43115  139290      0      0  3     0x14200  aiodoned      aiodoned
 34927  284284      0      0  2     0x14600                update
 43042  360301      0      0  3     0x14200  cleaner       cleaner
 62737  390987      0      0  3     0x14200  reaper        reaper
 41509  515225      0      0  3     0x14200  pgdaemon      pagedaemon
 87867  304533      0      0  3     0x14200  bored         viomb
 63309  220685      0      0  3  0x40014200  acpi0         acpi0
 59006  216350      0      0  7  0x40014200                idle1
 43478  521735      0      0  3     0x14200  bored         softnet3
 35798  409692      0      0  3     0x14200  bored         softnet2
 23851  285029      0      0  3     0x14200  bored         softnet1
 73693  163789      0      0  3     0x14200  bored         softnet0
 90695  228973      0      0  3     0x14200  bored         systqmp
 10062  334856      0      0  3     0x14200  bored         systq
 75417  443665      0      0  3     0x14200  tmoslp        softclockmp
 19621  406531      0      0  2  0x40014200                softclock
 24576  382770      0      0  3  0x40014200                idle0
     1  493090      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
Process 13437 (syz-executor) thread 0xffff80003c4e1220 (45151)
exclusive rwlock vmmaplk r = 0 (0xfffffd806a624bd0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5250
#3  uvmfault_lookup+0xe8 sys/uvm/uvm_fault.c:1858
#4  uvm_fault_check+0x987 uvmfault_amapcopy sys/uvm/uvm_fault.c:235 [inline]
#4  uvm_fault_check+0x987 sys/uvm/uvm_fault.c:774
#5  uvm_fault+0x106 sys/uvm/uvm_fault.c:668
#6  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#7  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#8  recall_trap+0x8
Process 48059 (syz-executor) thread 0xffff80003c4e07e0 (298838)
exclusive rwlock futex r = 0 (0xffffffff83801b48)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  sys_futex+0x69 sys/kern/sys_futex.c:98
#3  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#4  Xsyscall+0x128
Process 66691 (syz-executor) thread 0xffff80003c4e1c60 (145864)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8398f708)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  __mp_acquire_count+0x58
#2  mi_switch+0x4b7 sys/kern/sched_bsd.c:441
#3  yield+0x6a sys/kern/sched_bsd.c:320
#4  malloc+0xe5 sys/kern/kern_malloc.c:174
#5  rtmap_grow+0xb2 sys/net/rtable.c:126
#6  rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
#6  rtable_add+0x2d9 sys/net/rtable.c:222
#7  route_output+0x520 sys/net/rtsock.c:786
#8  route_send+0xd7 sys/net/rtsock.c:342
#9  sosend+0x804
#10 sendit+0x721 sys/kern/uipc_syscalls.c:779
#11 sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
#12 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#12 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#13 Xsyscall+0x128
exclusive rwlock sbufsnd r = 0 (0xffff8000014c1778)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  sblock+0xb7 sys/kern/uipc_socket2.c:536
#3  sosend+0x2e2 sys/kern/uipc_socket.c:631
#4  sendit+0x721 sys/kern/uipc_syscalls.c:779
#5  sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
#6  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
Process 19726 (syz-executor) thread 0xffff80003c4e0f90 (406060)
exclusive rwlock sbufsnd r = 0 (0xffff8000014c0f68)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  sblock+0xb7 sys/kern/uipc_socket2.c:536
#3  sosend+0x2e2 sys/kern/uipc_socket.c:631
#4  sendit+0x721 sys/kern/uipc_syscalls.c:779
#5  sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
#6  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
Process 46241 (syz-executor) thread 0xffff8000338bfc70 (359275)
exclusive rwlock vmmaplk r = 0 (0xfffffd806a624a08)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5250
#3  uvmfault_lookup+0xe8 sys/uvm/uvm_fault.c:1858
#4  uvm_fault_check+0x987 uvmfault_amapcopy sys/uvm/uvm_fault.c:235 [inline]
#4  uvm_fault_check+0x987 sys/uvm/uvm_fault.c:774
#5  uvm_fault+0x106 sys/uvm/uvm_fault.c:668
#6  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#7  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#8  recall_trap+0x8
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10190  11084K   11369K 166960K     12317        0
            pcb    17     12K      12K 166960K       134        0
         rtable   172      7K       7K 166960K       478        0
             pf    28     16K      19K 166960K        97        0
         ifaddr    27      4K       8K 166960K        79        0
        ifgroup    39      1K       2K 166960K       116        0
         sysctl     3      1K       1K 166960K         3        0
       counters    56     35K      37K 166960K       126        0
       ioctlops     0      0K       4K 166960K      1609        0
            iov     0      0K      16K 166960K       116        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1332     84K      85K 166960K      1859        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K      13K 166960K        14        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       104        0
        dirhash    12      2K       2K 166960K        36        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       840        0
          sigio     0      0K       0K 166960K         4        0
           proc    72     91K     140K 166960K       651        0
        subproc    72      4K       4K 166960K        90        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       164        0
       in_multi    55      4K       7K 166960K       140        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     1      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       553        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   233     73K      82K 166960K      9378        0
       UVM aobj    85      5K       5K 166960K        86        0
     pinsyscall    42     84K     104K 166960K      2008        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        58        0
            NDP     8      0K       2K 166960K        52        0
           temp    55   8638K    8704K 166960K     30776        0
         kqueue    15     24K      34K 166960K       163        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      220    0      215     3     2     1     3     0     8    0
rtentry    112      144    0       72     4     0     4     4     0     8    0
unpcb      144      615    0      597     5     3     2     4     0     8    0
syncache   336       13    0       13     1     1     0     1     0     8    0
tcpqe       32        6    0        6     1     1     0     1     0     8    0
tcpcb      808      266    0      255     8     6     2     8     0     8    0
arp        120       24    0       12     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40        2    0        2     1     1     0     1     0     8    0
inpcb      376      975    0      957    11     8     3    10     0     8    0
nd6        136       32    0       18     1     0     1     1     0     8    0
pkpcb       40       43    0       43     1     1     0     1     0     8    0
kcovpl      48       10    0        2     1     0     1     1     0     8    0
mppekey    1024       2    0        2     2     2     0     1     0     8    0
ppxss      1168      23    0       23     3     2     1     2     0     8    1
pppxif     1472       4    0        4     2     1     1     1     0     8    1
pffrag     232        5    0        0     1     0     1     1     0   482    0
pffrnode    88        5    0        0     1     0     1     1     0     8    0
pffrent     40        5    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       70    0       18     1     0     1     1     0     8    0
pfstkey    128       70    0       18     3     0     3     3     0     8    0
pfstate    376       69    0       18     7     0     7     7     0     8    0
pfrule     1344      22    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      584    0      300    29     4    25    29     0     8    0
art_table   32      585    0      300     4     0     4     4     0     8    0
art_node    16      142    0       79     1     0     1     1     0     8    0
sysvmsgpl   40        8    0        4     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112      101    0       91     1     0     1     1     0     8    0
shmpl      112       83    0        1     3     0     3     3     0     8    0
dirhash    1024      33    0       16     3     0     3     3     0     8    0
dino2pl    256     2843    0     1343    95     0    95    95     0     8    0
ffsino     280     2843    0     1343   109     0   109   109     0     8    0
nchpl      144     3977    0     2285    65     1    64    64     0     8    0
rtmask      32        3    0        3     1     1     0     1     0     8    0
uvmvnodes   80     3196    0        0    66     0    66    66     0     8    0
vnodes     216     3196    0        0   178     0   178   178     0     8    0
namei      1024   14235    0    14235     3     2     1     2     0     8    1
percpumem   16       77    0       35     1     0     1     1     0     8    0
kstatmem   264       64    0       48     3     1     2     3     0     8    0
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216    13028    0    13028    10     9     1     8     1     8    1
plimitpl   152      111    0       94     1     0     1     1     0     8    0
sigapl     424     1165    0     1094    11     2     9     9     0     8    0
futexpl     64    10995    0    10989     1     0     1     1     0     8    0
knotepl    120      810    0        0    25     0    25    25     0     8    0
kqueuepl   216      398    0      385     8     6     2     7     0     8    1
pipepl     328      272    0      244     8     5     3     8     0     8    0
fdescpl    504     1124    0     1093     5     0     5     5     0     8    0
filepl     152     7368    0     7145    17     5    12    14     0     8    2
lockfpl    104      181    0      178     1     0     1     1     0     8    0
lockfspl    48       86    0       83     1     0     1     1     0     8    0
sessionpl  144       32    0       23     1     0     1     1     0     8    0
pgrppl      48       54    0       37     1     0     1     1     0     8    0
ucredpl    104      644    0      630     1     0     1     1     0     8    0
zombiepl   144     1160    0     1160     1     0     1     1     0     8    1
processpl  1176    1165    0     1094     6     0     6     6     0     8    0
procpl     656     2281    0     2196     9     1     8     8     0     8    0
srpgc       96       12    0       12     2     2     0     1     0     8    0
sosppl     168        6    0        6     1     1     0     1     0     8    0
sockpl     688     1860    0     1820    11     6     5    11     0     8    0
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     111    0        0    14     0    14    14     0     8    0
mcl2k      2048      22    0        0     3     0     3     3     0     8    0
mtagpl      96       36    0        0     1     0     1     1     0     8    0
mbufpl     256      251    0        0    16     0    16    16     0     8    0
bufpl      280     4013    0      132   278     0   278   278     0     8    0
anonpl      24   176933    0   173441    62    36    26    59     0   184    0
amapchunkpl 152   30063    0    29547    34    10    24    29     0   158    1
amappl16   200     3509    0     3475    24    21     3    15     0     8    0
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184      132    0      120     1     0     1     1     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     1814    0     1783     3     1     2     2     0     8    0
amappl11   160       48    0       34     1     0     1     1     0     8    0
amappl10   152        7    0        7     1     1     0     1     0     8    0
amappl9    144      248    0      248     1     1     0     1     0     8    0
amappl8    136       33    0       30     1     0     1     1     0     8    0
amappl7    128      130    0      118     1     0     1     1     0     8    0
amappl6    120      211    0      207     1     0     1     1     0     8    0
amappl5    112      132    0      122     1     0     1     1     0     8    0
amappl4    104      361    0      339     1     0     1     1     0     8    0
amappl3     96     6007    0     5889     4     0     4     4     0     8    0
amappl2     88      727    0      664     2     0     2     2     0     8    0
amappl1     80    11522    0    10937    14     0    14    14     0     8    0
amappl      88     8921    0     8744     5     0     5     5     0    92    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma2048    2048       1    0        1     1     1     0     1     0     8    0
dma1024    1024       2    0        1     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       85    0        1     2     0     2     2     0     8    0
uaddrrnd    24     1124    0     1093     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1124    0     1093     1     0     1     1     0     8    0
vmmpekpl   168    11385    0    11337     3     0     3     3     0     8    0
vmmpepl    168    75639    0    73739    95     7    88    95     0   357    1
vmsppl     456     1123    0     1093     5     0     5     5     0     8    0
rwobjpl     64    26258    0    22022    69     0    69    69     0     8    0
pdppl      4096    2256    0     2186   106    34    72    86     0     8    2
pvpl        32    18089    0        0   146     0   146   146     0   265    0
pmappl     248     1123    0     1093     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      296    0       55     8     0     8     8     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8343fe55) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833ea525,ffffffff8330f9d6,83,ffffffff8342f907) at __assert+0x29
rtable_init() at rtable_init
rtable_add(2) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:373 [inline]
rtable_add(2) at rtable_add+0x2d9 sys/net/rtable.c:222
route_output(fffffd807d44c300,ffff8000014c15b8) at route_output+0x520 sys/net/rtsock.c:786
route_send(ffff8000014c15b8,fffffd807d44c300,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff8000014c15b8,0,ffff80003acd0fa8,0,0,0) at sosend+0x804
sendit(ffff80003c4e1c60,3,ffff80003acd10a0,0,ffff80003acd1150) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003c4e1c60,ffff80003acd1200,ffff80003acd1150) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff80003acd1200) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003acd1200) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x565f85d61a0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff800029aabff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu.c:1218
sched_idle(ffff800029aabff0) at sched_idle+0x558 sys/kern/kern_sched.c:182
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff800029aabff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu.c:1218
sched_idle(ffff800029aabff0) at sched_idle+0x558 sys/kern/kern_sched.c:182
end trace frame: 0x0, count: -5

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/22 13:24 openbsd 45a541306066 d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/15 04:16 openbsd 8d2464095911 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/13 09:59 openbsd eb8501b6f1f9 2afad16e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/13 09:56 openbsd eb8501b6f1f9 2afad16e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/12 14:52 openbsd 705b70e045d6 b27c2402 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/11 09:36 openbsd c7df606a226b 43f51a00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/11 06:36 openbsd c7df606a226b 43f51a00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/07 04:13 openbsd 3dd691bf9970 53657d1b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
2025/02/06 18:08 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "map->limit == rtmap_limit" failed in rtable.c
* Struck through repros no longer work on HEAD.