assert "rdomain == rtable_l2(rdomain)" failed in route.c

0 views
Skip to first unread message

syzbot

unread,
Oct 4, 2024, 3:39:26 PM10/4/24
to syzkaller-o...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: ecf90ed7d782 Rework of copy mode commands ("send-keys -X")..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14ed9307980000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=29bd165c3431fc959fff

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a7baa71b5bc0/disk-ecf90ed7.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/6d5544153053/bsd-ecf90ed7.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/9f8414fb5152/kernel-ecf90ed7.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+29bd16...@syzkaller.appspotmail.com

panic: kernel diagnostic assertion "rdomain == rtable_l2(rdomain)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1247
Starting stack trace...
panic(ffffffff830e1d58) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff8309a5a2,ffffffff83012219,4df,ffffffff830caafe) at __assert+0x29
rt_ifa_add(ffff800001319400,240404,ffff800001319440,16) at rt_ifa_add+0x32d sys/net/route.c:1247
rt_ifa_addlocal(ffff800001319400) at rt_ifa_addlocal+0x1d2 sys/net/route.c:1381
in6_update_ifa(ffff8000012bc000,ffff80002a136130,0) at in6_update_ifa+0x1725 sys/netinet6/in6.c:741
in6_ifattach_linklocal(ffff8000012bc000,0) at in6_ifattach_linklocal+0x331 sys/netinet6/in6_ifattach.c:281
in6_ifattach(ffff8000012bc000) at in6_ifattach+0x2b4 sys/netinet6/in6_ifattach.c:405
ifioctl(ffff800010fdb768,8020699d,ffff80002a1365b0,ffff8000ffffd6d8) at ifioctl+0x2436 sys/net/if.c:2140
fifo_ioctl(ffff80002a1363f8) at fifo_ioctl+0xc8 sys/miscfs/fifofs/fifo_vnops.c:310
VOP_IOCTL(fffffd8069a02d00,8020699d,ffff80002a1365b0,3,fffffd807f7d3000,ffff8000ffffd6d8) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806bf9f560,8020699d,ffff80002a1365b0,ffff8000ffffd6d8) at vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff8000ffffd6d8,ffff80002a136790,ffff80002a1366e0) at sys_ioctl+0x67c
syscall(ffff80002a136790) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a136790) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x36bd7d345e0, count: 243
End of stack trace.


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,
Feb 3, 2025, 7:03:21 PM2/3/25
to syzkaller-o...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages