syzbot


uvm_fault: rtable_l2

Status: upstream: reported on 2026/07/14 16:48
Reported-by: syzbot+90fd80835bd8f1c44ee3@syzkaller.appspotmail.com
First crash: 3d05h, last: 4h37m

Sample crash report:
uvm_fault(0xffffee806fbeab78, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      rtable_l2+0x7f: movzbl  0(%rax,%rcx,4),%r14d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 372938  93478      0        0x10          0    0  syz-executor
*519049  93478      0        0x10  0x4000000    1  syz-executor
rtable_l2(0) at rtable_l2+0x7f sys/net/rtable.c:315
in_pcbhash_insert(ffffee806441acd8) at in_pcbhash_insert+0x197 sys/netinet/in_pcb.c:-1
in_pcballoc(ffff800001642030,ffffffff83a1d8b0,1) at in_pcballoc+0x24c sys/netinet/in_pcb.c:269
udp_attach(ffff800001642030,0,1) at udp_attach+0xde sys/netinet/udp_usrreq.c:1135
socreate(18,ffff800035b91cd0,2,0) at socreate+0x238 pru_attach sys/sys/protosw.h:275 [inline]
socreate(18,ffff800035b91cd0,2,0) at socreate+0x238 sys/kern/uipc_socket.c:220
sys_socket(ffff800035b9d780,ffff800035b91e20,ffff800035b91d70) at sys_socket+0x124 sys/kern/uipc_syscalls.c:102
syscall(ffff800035b91e20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800035b91e20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xec51ce68960, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/17 17:42 openbsd 94b919120046 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: rtable_l2
2026/07/15 19:06 openbsd af68cf7bb0f1 a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: rtable_l2
2026/07/15 17:36 openbsd af68cf7bb0f1 a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: rtable_l2
2026/07/14 16:47 openbsd ddde2be8d3c6 2130f682 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: rtable_l2
* Struck through repros no longer work on HEAD.