syzbot


assert "cifp != NULL" failed in route.c (5)

Status: upstream: reported on 2025/07/18 02:40
Reported-by: syzbot+fc1ac0e84ae2b49a13c5@syzkaller.appspotmail.com
First crash: 124d, last: 29d
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "cifp != NULL" failed in route.c (2) -1 18 868d 1096d 0/3 auto-obsoleted due to no activity on 2023/10/03 20:27
openbsd assert "cifp != NULL" failed in route.c (4) -1 3 266d 277d 0/3 auto-obsoleted due to no activity on 2025/05/27 08:33
openbsd assert "cifp != NULL" failed in route.c (3) -1 203 377d 643d 0/3 auto-obsoleted due to no activity on 2024/12/27 21:04
openbsd assert "cifp != NULL" failed in route.c -1 89 2204d 2259d 0/3 auto-closed as invalid on 2020/01/08 16:33

Sample crash report:
panic: kernel diagnostic assertion "cifp != NULL" failed: file "/syzkaller/managers/main/kernel/sys/net/route.c", line 1089
Starting stack trace...
panic(ffffffff83353058) at panic+0x1ba sys/kern/subr_prf.c:229
__assert(ffffffff83390f0e,ffffffff833d2cff,441,ffffffff833bef52) at __assert+0x29 sys/kern/subr_prf.c:-1
rtrequest(1,ffff80002a7eb338,8,ffff80002a7eb400,0) at rtrequest+0x115a
rt_ifa_add(ffff8000014fd500,40004,ffff8000014fd568,0) at rt_ifa_add+0x38f sys/net/route.c:1284
in_ifinit(ffff80002a8760c0,ffff8000014fd500,ffff80002a7eb530,1) at in_ifinit+0x53d sys/netinet/in.c:-1
pppx_add_session(ffff8000014fdc00,ffff8000014fc000) at pppx_add_session+0x472 sys/net/if_pppx.c:717
VOP_IOCTL(fffffd806c692620,82907003,ffff8000014fc000,41,fffffd8007bfb7b8,ffff80002a823cb8) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806c203620,82907003,ffff8000014fc000,ffff80002a823cb8) at vn_ioctl+0xea sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80002a823cb8,ffff80002a7eb930,ffff80002a7eb880) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff80002a7eb930) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a7eb930) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x25a13f20c20, count: 246
End of stack trace.
syncing disks...

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/21 10:25 openbsd 243c12c31b60 9832ed61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/25 07:24 openbsd a25aeda82389 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/09 06:22 openbsd 1b1dd04c9634 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/07/20 15:09 openbsd 33fc78536c1f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/07/18 02:40 openbsd aa829d585f3f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
* Struck through repros no longer work on HEAD.