syzbot


assert "cifp != NULL" failed in route.c (5)

Status: upstream: reported on 2025/07/18 02:40
Reported-by: syzbot+fc1ac0e84ae2b49a13c5@syzkaller.appspotmail.com
First crash: 180d, last: 7d05h
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "cifp != NULL" failed in route.c (2) -1 18 924d 1152d 0/3 auto-obsoleted due to no activity on 2023/10/03 20:27
openbsd assert "cifp != NULL" failed in route.c (4) -1 3 322d 333d 0/3 auto-obsoleted due to no activity on 2025/05/27 08:33
openbsd assert "cifp != NULL" failed in route.c (3) -1 203 433d 699d 0/3 auto-obsoleted due to no activity on 2024/12/27 21:04
openbsd assert "cifp != NULL" failed in route.c -1 89 2260d 2315d 0/3 auto-closed as invalid on 2020/01/08 16:33

Sample crash report:
panic: kernel diagnostic assertion "cifp != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1089
Starting stack trace...
panic(ffffffff833b58bb) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833f2a4a,ffffffff83371f4d,441,ffffffff8341c73a) at __assert+0x29 sys/kern/subr_prf.c:-1
rt_hash(1,ffff80002a2f9c58,4) at rt_hash
rt_ifa_add(ffff800000c4ac00,840100,ffff800000c4ac68,0) at rt_ifa_add+0x22e sys/net/route.c:1284
in_ifinit(ffff8000015af000,ffff800000c4ac00,ffff80002a2f9f70,1) at in_ifinit+0x4bb in_insert_prefix sys/netinet/in.c:789 [inline]
in_ifinit(ffff8000015af000,ffff800000c4ac00,ffff80002a2f9f70,1) at in_ifinit+0x4bb sys/netinet/in.c:722
in_ioctl_change_ifaddr(8040691a,ffff80002a2f9f60,ffff8000015af000) at in_ioctl_change_ifaddr+0x91c sys/netinet/in.c:523
ifioctl(ffff800010fdfa80,8040691a,ffff80002a2f9f60,ffff80003c408fc0) at ifioctl+0x1714 pru_control sys/sys/protosw.h:353 [inline]
ifioctl(ffff800010fdfa80,8040691a,ffff80002a2f9f60,ffff80003c408fc0) at ifioctl+0x1714 sys/net/if.c:2553
sys_ioctl(ffff80003c408fc0,ffff80002a2fa140,ffff80002a2fa090) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80002a2fa140) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2fa140) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7c1db51f4d70, count: 247
End of stack trace.


Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/07 19:46 openbsd b6bc6e61f2e3 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/12/02 04:27 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/10/21 10:25 openbsd 243c12c31b60 9832ed61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/25 07:24 openbsd a25aeda82389 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/09 06:22 openbsd 1b1dd04c9634 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/07/20 15:09 openbsd 33fc78536c1f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/07/18 02:40 openbsd aa829d585f3f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
* Struck through repros no longer work on HEAD.