syzbot


assert "rdomain == rtable_l2(rdomain)" failed in route.c (2)

Status: upstream: reported on 2025/02/10 16:55
Reported-by: syzbot+e60005b4a2f1a8010050@syzkaller.appspotmail.com
First crash: 219d, last: 11d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "rdomain == rtable_l2(rdomain)" failed in route.c -1 2 316d 348d 0/3 auto-obsoleted due to no activity on 2025/02/04 00:03

Sample crash report:
panic: kernel diagnostic assertion "rdomain == rtable_l2(rdomain)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1259
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  62642  47058      0           0  0x4000000    0K syz-executor
*  7096  56154      0           0  0x4000000    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8336e176) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833ae1da,ffffffff83336dbf,4eb,ffffffff834116f8) at __assert+0x29 sys/kern/subr_prf.c:-1
rt_ifa_add(ffff800001491b00,240404,ffff800001491b40,16) at rt_ifa_add+0x32d
rt_ifa_addlocal(ffff800001491b00) at rt_ifa_addlocal+0x1d8 sys/net/route.c:1395
in6_update_ifa(ffff800001493800,ffff80003c53f620,0) at in6_update_ifa+0x186f sys/netinet6/in6.c:722
in6_ifattach_linklocal(ffff800001493800,0) at in6_ifattach_linklocal+0x324 sys/netinet6/in6_ifattach.c:264
in6_ifattach(ffff800001493800) at in6_ifattach+0x2d0 sys/netinet6/in6_ifattach.c:382
ifioctl(ffff800010fe1a80,8020699d,ffff80003c53f810,ffff80003641b788) at ifioctl+0x1f1a sys/net/if.c:2145
sys_ioctl(ffff80003641b788,ffff80003c53f9f0,ffff80003c53f940) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c53f9f0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c53f9f0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1c7085bacc0, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/06 13:14 openbsd b4ad0bfa6c70 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/08/30 20:55 openbsd 4b2601e5b4e0 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/08/21 10:14 openbsd 70b219c460a6 0b9605c8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/08/08 11:21 openbsd ca647cfa4ec3 6a893178 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/06/08 15:41 openbsd 394c376d8c51 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/05/13 22:38 openbsd 6405849dc70d 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/02/27 00:45 openbsd 141662745973 6a8fcbc4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
2025/02/10 16:54 openbsd 4f6ac7630c0c 43f51a00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "rdomain == rtable_l2(rdomain)" failed in route.c
* Struck through repros no longer work on HEAD.