syzbot


assert "!ISSET(inp->inp_flags, INP_IPV6)" failed in in_pcb.c

Status: upstream: reported on 2025/06/12 22:13
Reported-by: syzbot+2a13b27391f4027079c6@syzkaller.appspotmail.com
First crash: 31d, last: 31d

Sample crash report:
login: panic: kernel diagnostic assertion "!ISSET(inp->inp_flags, INP_IPV6)" failed: file "/syzkaller/managers/multicore/kernel/sys/netinet/in_pcb.c", line 1115
Starting stack trace...
panic(ffffffff8346707c) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff83416998,ffffffff83352072,45b,ffffffff83403779) at __assert+0x29 sys/kern/subr_prf.c:-1
in_pcbhash_lookup(ffffffff83a21fe0,c14bfb4a9e232f80,0,ffffffff834f2228,0,ffffffff834f2228,41889a670ef2ef69) at in_pcbhash_lookup+0x33e sys/netinet/in_pcb.c:1111
in_pcblookup_listen(ffffffff83a21fe0,100007f,1600,fffffd80610ad900,0) at in_pcblookup_listen+0x294 sys/netinet/in_pcb.c:-1
tcp_input_solocked(ffff80002a216ae0,ffff80002a216aec,0,2,ffff80002a216ad8) at tcp_input_solocked+0xb67 sys/netinet/tcp_input.c:-1
tcp_input_mlist(ffffffff8394b420,2) at tcp_input_mlist+0x93 sys/netinet/tcp_input.c:-1
if_input_process(ffff800000b2c000,ffff80002a216bb8,1) at if_input_process+0x229 sys/net/if.c:1015
ifiq_process(ffff800000b2d200) at ifiq_process+0xcd sys/net/ifq.c:874
taskq_thread(ffff80000002c100) at taskq_thread+0x157 sys/kern/kern_task.c:446
end trace frame: 0x0, count: 248
End of stack trace.

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/12 23:57 openbsd 97ee8abe534f 98683f8f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "!ISSET(inp->inp_flags, INP_IPV6)" failed in in_pcb.c
2025/06/12 22:12 openbsd 97ee8abe534f 98683f8f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "!ISSET(inp->inp_flags, INP_IPV6)" failed in in_pcb.c
* Struck through repros no longer work on HEAD.