panic: kernel diagnostic assertion "(rt->rt_flags & RTF_MPATH) || mrt->rt_priority != prio" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 569 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *459206 30596 0 0 0x4000000 0 syz-executor.1 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:212 __assert(ffffffff81f7aa47,ffffffff81f39f83,239,ffffffff81f1656f) at __assert+0x2e sys/kern/subr_prf.c:159 rtable_insert(0,ffff80000099c240,0,ffff800000a13090,38,fffffd8030397468) at rtable_insert+0x66b sys/net/rtable.c:569 rtrequest(1,ffff800015a10870,38,ffff800015a107e8,0) at rtrequest+0x875 sys/net/route.c:928 rtm_output(ffff800000a13000,ffff800015a10918,ffff800015a10870,38,0) at rtm_output+0x6e5 sys/net/rtsock.c:896 route_output(fffffd803b82c600,fffffd80390de048,0,0) at route_output+0x7d7 sys/net/rtsock.c:814 route_usrreq(fffffd80390de048,9,fffffd803b82c600,0,0,ffff800014950018) at route_usrreq+0x363 sys/net/rtsock.c:271 sosend(fffffd80390de048,0,ffff800015a10b10,0,0,80) at sosend+0x660 sys/kern/uipc_socket.c:513 sendit(ffff800014950018,3,ffff800015a10bf0,0,ffff800015a10d00) at sendit+0x53c sys/kern/uipc_syscalls.c:662 sys_sendto(ffff800014950018,ffff800015a10c98,ffff800015a10d00) at sys_sendto+0x80 sys/kern/uipc_syscalls.c:527 syscall(ffff800015a10d70) at syscall+0x511 Xsyscall(6,0,ffffffffffffffd8,0,6,f9a27eb010) at Xsyscall+0x128 end of kernel end trace frame: 0xfbd7a3edc0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel diagnostic assertion "(rt->rt_flags & RTF_MPATH) || mrt->rt_priority != prio" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 569 ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:212 __assert(ffffffff81f7aa47,ffffffff81f39f83,239,ffffffff81f1656f) at __assert+0x2e sys/kern/subr_prf.c:159 rtable_insert(0,ffff80000099c240,0,ffff800000a13090,38,fffffd8030397468) at rtable_insert+0x66b sys/net/rtable.c:569 rtrequest(1,ffff800015a10870,38,ffff800015a107e8,0) at rtrequest+0x875 sys/net/route.c:928 rtm_output(ffff800000a13000,ffff800015a10918,ffff800015a10870,38,0) at rtm_output+0x6e5 sys/net/rtsock.c:896 route_output(fffffd803b82c600,fffffd80390de048,0,0) at route_output+0x7d7 sys/net/rtsock.c:814 route_usrreq(fffffd80390de048,9,fffffd803b82c600,0,0,ffff800014950018) at route_usrreq+0x363 sys/net/rtsock.c:271 sosend(fffffd80390de048,0,ffff800015a10b10,0,0,80) at sosend+0x660 sys/kern/uipc_socket.c:513 sendit(ffff800014950018,3,ffff800015a10bf0,0,ffff800015a10d00) at sendit+0x53c sys/kern/uipc_syscalls.c:662 sys_sendto(ffff800014950018,ffff800015a10c98,ffff800015a10d00) at sys_sendto+0x80 sys/kern/uipc_syscalls.c:527 syscall(ffff800015a10d70) at syscall+0x511 Xsyscall(6,0,ffffffffffffffd8,0,6,f9a27eb010) at Xsyscall+0x128 end of kernel end trace frame: 0xfbd7a3edc0, count: -13 ddb> show registers rdi 0xffffffff81e3dd87 db_enter+0x17 rsi 0x4f4b __ALIGN_SIZE+0x3f4b rbp 0xffff800015a10530 rbx 0xffff800015a105e0 rdx 0x4f4c __ALIGN_SIZE+0x3f4c rcx 0xffff8000149bd000 rax 0xffff8000149bd000 r8 0xffff800015a104f0 r9 0x1 r10 0xffff8000009eb4c0 r11 0xee44b8ebb56be7aa r12 0x3000000008 r13 0xffff800015a10540 r14 0x100 r15 0x1 rip 0xffffffff81e3dd88 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800015a10520 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.1) pid=459206 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800014951080,0xffffffff822b6920 process=0xffff800014953080 user=0xffff800015a0b000, vmspace=0xfffffd803f00c108 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 30596 124809 98371 0 2 0 syz-executor.1 *30596 459206 98371 0 7 0x4000000 syz-executor.1 94976 309539 18593 0 2 0x480 syz-executor.0 94976 202013 18593 0 3 0x4000080 poll syz-executor.0 94976 428300 18593 0 3 0x4000080 fsleep syz-executor.0 18593 428288 42812 0 2 0x482 syz-executor.0 98371 218084 42812 0 3 0x82 nanosleep syz-executor.1 89606 384735 1 0 3 0x100083 ttyin getty 39576 333214 0 0 3 0x14200 bored sosplice 42812 10416 38737 0 3 0x82 thrsleep syz-fuzzer 42812 215217 38737 0 3 0x4000082 thrsleep syz-fuzzer 42812 198833 38737 0 3 0x4000082 thrsleep syz-fuzzer 42812 491697 38737 0 2 0x4000482 syz-fuzzer 42812 488193 38737 0 3 0x4000082 kqread syz-fuzzer 42812 226386 38737 0 3 0x4000082 thrsleep syz-fuzzer 42812 203885 38737 0 3 0x4000082 thrsleep syz-fuzzer 42812 432577 38737 0 3 0x4000082 thrsleep syz-fuzzer 38737 24847 12229 0 3 0x10008a pause ksh 12229 443426 26719 0 3 0x92 select sshd 26719 465292 1 0 3 0x80 select sshd 42821 69629 93066 73 3 0x100090 kqread syslogd 93066 167433 1 0 3 0x100082 netio syslogd 95277 195347 1 77 3 0x100090 poll dhclient 36529 231779 1 0 3 0x80 poll dhclient 12689 476838 0 0 2 0x14200 zerothread 96537 357528 0 0 3 0x14200 aiodoned aiodoned 18737 498348 0 0 3 0x14200 syncer update 39566 422547 0 0 3 0x14200 cleaner cleaner 19592 236664 0 0 3 0x14200 reaper reaper 55854 447649 0 0 3 0x14200 pgdaemon pagedaemon 53157 190976 0 0 3 0x14200 bored crynlk 82898 380983 0 0 3 0x14200 bored crypto 98278 87999 0 0 3 0x40014200 acpi0 acpi0 30652 260771 0 0 3 0x14200 bored softnet 44408 327698 0 0 2 0x14200 systqmp 21451 29356 0 0 3 0x14200 bored systq 36189 274857 0 0 3 0x40014200 bored softclock 99274 193184 0 0 3 0x40014200 idle0 75263 359791 0 0 3 0x14200 bored smr 1 175154 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9530 6539K 7370K 78643K 21654 0 0 pcb 24 9K 11K 78643K 3213 0 0 rtable 120 5K 5K 78643K 1551 0 0 ifaddr 59 16K 17K 78643K 647 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 290 0 0 iov 0 0K 24K 78643K 869 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1194 75K 77K 78643K 6349 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 80 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 0K 0K 78643K 384 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 6 17K 25K 78643K 6498 0 0 sigio 0 0K 0K 78643K 130 0 0 proc 42 30K 54K 78643K 1236 0 0 subproc 32 2K 2K 78643K 138 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 634 0 0 in_multi 33 2K 2K 78643K 319 0 0 ether_multi 1 0K 0K 78643K 43 0 0 mrt 0 0K 0K 78643K 13 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 108 477K 477K 78643K 108 0 0 exec 0 0K 1K 78643K 746 0 0 pfkey data 0 0K 0K 78643K 4 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 96 21K 30K 78643K 16379 0 0 UVM aobj 130 6K 6K 78643K 136 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 234 0 0 NDP 12 0K 0K 78643K 178 0 0 temp 171 2715K 3355K 78643K 22416 0 0 kqueue 0 0K 0K 78643K 45 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 18 0 12 1 0 1 1 0 8 0 inpcbpl 280 2569 0 2561 1 0 1 1 0 8 0 plimitpl 152 146 0 139 1 0 1 1 0 8 0 rtentry 112 126 0 80 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpcb 544 933 0 928 1 0 1 1 0 8 0 nd6 48 24 0 18 3 2 1 1 0 8 0 swfcl 56 1 0 0 1 0 1 1 0 8 0 ppxss 1128 120 0 120 26 25 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 482 0 285 17 4 13 13 0 8 0 art_table 32 483 0 285 2 0 2 2 0 8 0 art_node 16 112 0 70 1 0 1 1 0 8 0 sysvmsgpl 40 20 0 8 1 0 1 1 0 8 0 semapl 112 380 0 370 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 12339 0 10841 49 0 49 49 0 8 0 ffsino 240 12339 0 10841 89 0 89 89 0 8 0 nchpl 144 21626 0 20006 61 0 61 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 200 5926 0 0 312 0 312 312 0 8 0 namei 1024 68859 0 68859 7 6 1 1 0 8 1 scsiplug 64 11 0 11 6 6 0 1 0 8 0 scxspl 192 78482 0 78482 38 37 1 6 0 8 1 sigapl 432 6654 0 6640 2 0 2 2 0 8 0 futexpl 56 100474 0 100473 7 6 1 1 0 8 0 knotepl 112 1286 0 1267 2 1 1 2 0 8 0 kqueuepl 104 1587 0 1585 1 0 1 1 0 8 0 pipepl 112 3826 0 3807 11 10 1 2 0 8 0 fdescpl 424 6655 0 6640 2 0 2 2 0 8 0 filepl 120 40104 0 40007 7 3 4 5 0 8 1 lockfpl 104 2475 0 2475 6 5 1 1 0 8 1 lockfspl 48 802 0 802 6 5 1 1 0 8 1 sessionpl 112 26 0 16 1 0 1 1 0 8 0 pgrppl 48 98 0 88 1 0 1 1 0 8 0 ucredpl 96 9813 0 9806 1 0 1 1 0 8 0 zombiepl 144 6640 0 6640 3 2 1 1 0 8 1 processpl 840 6670 0 6640 4 0 4 4 0 8 0 procpl 600 15124 0 15084 4 0 4 4 0 8 0 sosppl 128 83 0 83 18 18 0 1 0 8 0 sockpl 384 5422 0 5403 10 7 3 4 0 8 0 mcl64k 65536 2436 0 2436 256 255 1 65 0 8 1 mcl16k 16384 18 0 18 15 15 0 1 0 8 0 mcl12k 12288 106 0 106 22 21 1 1 0 8 1 mcl9k 9216 98 0 98 27 26 1 1 0 8 1 mcl8k 8192 90 0 90 23 23 0 1 0 8 0 mcl4k 4096 267 0 267 17 16 1 1 0 8 1 mcl2k2 2112 33 0 33 17 17 0 1 0 8 0 mcl2k 2048 62234 0 62190 27 20 7 11 0 8 1 mtagpl 80 10 0 10 4 4 0 1 0 8 0 mbufpl 256 134489 0 134393 134 126 8 38 0 8 0 bufpl 256 23641 0 17937 357 0 357 357 0 8 0 anonpl 16 596784 0 587389 225 182 43 57 0 62 0 amapchunkpl 152 28739 0 28625 75 69 6 19 0 158 0 amappl16 192 36563 0 36061 231 205 26 38 0 8 0 amappl15 184 318 0 318 1 1 0 1 0 8 0 amappl14 176 70 0 69 2 1 1 1 0 8 0 amappl13 168 1224 0 1223 3 2 1 1 0 8 0 amappl12 160 1698 0 1693 1 0 1 1 0 8 0 amappl11 152 1263 0 1249 1 0 1 1 0 8 0 amappl10 144 1888 0 1886 2 1 1 1 0 8 0 amappl9 136 814 0 809 1 0 1 1 0 8 0 amappl8 128 366 0 349 1 0 1 1 0 8 0 amappl7 120 1856 0 1850 1 0 1 1 0 8 0 amappl6 112 1253 0 1246 1 0 1 1 0 8 0 amappl5 104 1905 0 1892 1 0 1 1 0 8 0 amappl4 96 7863 0 7843 1 0 1 1 0 8 0 amappl3 88 567 0 555 1 0 1 1 0 8 0 amappl2 80 52791 0 52717 4 2 2 3 0 8 0 amappl1 72 123541 0 123112 26 17 9 19 0 8 0 amappl 80 15500 0 15458 3 2 1 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 135 0 6 3 0 3 3 0 8 0 uaddrrnd 24 6655 0 6640 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 6655 0 6640 1 0 1 1 0 8 0 vmmpekpl 168 42328 0 42305 2 0 2 2 0 8 0 vmmpepl 168 667865 0 666293 239 168 71 86 0 357 0 vmsppl 264 6654 0 6640 5 4 1 2 0 8 0 pdppl 4096 13317 0 13280 8 3 5 6 0 8 0 pvpl 32 1696843 0 1684206 565 362 203 248 0 265 94 pmappl 200 6654 0 6640 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 957 0 470 17 3 14 15 0 8 0