assert "rdomain == rtable_l2(rdomain)" failed in route.c (3)

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 72466e384590 Refresh copy mode when style changes, from Jo..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1417c25a580000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=a5b13e820472b442b15f

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/99f8dafa52a9/disk-72466e38.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/86deace04b80/bsd-72466e38.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a814645da442/kernel-72466e38.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a5b13e...@syzkaller.appspotmail.com

panic: kernel diagnostic assertion "rdomain == rtable_l2(rdomain)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1258
Starting stack trace...
panic(ffffffff833adc82) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833efd26,ffffffff833737d5,4ea,ffffffff83450405) at __assert+0x29 sys/kern/subr_prf.c:-1
rt_ifa_add(ffff800001601f00,240404,ffff800001601f50,b) at rt_ifa_add+0x32d
rt_ifa_addlocal(ffff800001601f00) at rt_ifa_addlocal+0x1d8 sys/net/route.c:1394
in6_update_ifa(ffff80000158b000,ff
ff80003c4818e0,0) at in6_update_ifa+0x1878 sys/netinet6/in6.c:722
in6_ifattach_linklocal(ffff80000158b000,0) at in6_ifattach_linklocal+0x33b sys/netinet6/in6_ifattach.c:266
in6_ifattach(ffff80000158b000) at in6_ifattach+0x2d0 sys/netinet6/in6_ifattach.c:384
ifioctl(ffff800010fd3b50,8020699d,ffff80003c481ad0,ffff8000fffe74e0) at ifioctl+0x1d77 sys/net/if.c:2238
sys_ioctl(ffff8000fffe74e0,ffff80003c481cb0,ffff80003c481c00) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c481cb0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c481cb0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc74ad2a0670, count: 246
End of stack trace.
syncing disks...set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup