syzbot


assert "cifp != NULL" failed in route.c (5)

Status: upstream: reported on 2025/07/18 02:40
Reported-by: syzbot+fc1ac0e84ae2b49a13c5@syzkaller.appspotmail.com
First crash: 227d, last: 22d
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "cifp != NULL" failed in route.c (2) -1 18 970d 1199d 0/3 auto-obsoleted due to no activity on 2023/10/03 20:27
openbsd assert "cifp != NULL" failed in route.c (4) -1 3 369d 379d 0/3 auto-obsoleted due to no activity on 2025/05/27 08:33
openbsd assert "cifp != NULL" failed in route.c (3) -1 203 479d 746d 0/3 auto-obsoleted due to no activity on 2024/12/27 21:04
openbsd assert "cifp != NULL" failed in route.c -1 89 2307d 2362d 0/3 auto-closed as invalid on 2020/01/08 16:33

Sample crash report:
panic: kernel diagnostic assertion "cifp != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1089
Starting stack trace...
panic(ffffffff833af0e0) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833f1725,ffffffff8337696b,441,ffffffff83420d3d) at __assert+0x29 sys/kern/subr_prf.c:-1
rt_hash(1,ffff80002a300718,8) at rt_hash
rt_ifa_add(ffff8000015cbf00,40004,ffff8000015cbf78,0) at rt_ifa_add+0x22e sys/net/route.c:1284
in_ifinit(ffff80003c411dc0,ffff8000015cbf00,ffff80002a3008e0,1) at in_ifinit+0x540 sys/netinet/in.c:-1
pppx_add_session(ffff80000002c200,ffff800001610400) at pppx_add_session+0x47b sys/net/if_pppx.c:717
VOP_IOCTL(fffffd800e1349a0,82907003,ffff800001610400,81,fffffd80097fd478,ffff80002a261ca0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d1b8b60,82907003,ffff800001610400,ffff80002a261ca0) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80002a261ca0,ffff80002a300cf0,ffff80002a300c40) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80002a300cf0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a300cf0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb46c3b1fab0, count: 246
End of stack trace.

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/08 12:54 openbsd 3c0af00218ea 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2026/01/26 20:43 openbsd 4c8dfe351ad4 a4c52dd6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2026/01/07 19:46 openbsd b6bc6e61f2e3 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/12/02 04:27 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/10/21 10:25 openbsd 243c12c31b60 9832ed61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/25 07:24 openbsd a25aeda82389 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/09 06:22 openbsd 1b1dd04c9634 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/07/20 15:09 openbsd 33fc78536c1f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/07/18 02:40 openbsd aa829d585f3f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
* Struck through repros no longer work on HEAD.