syzbot


assert "cifp != NULL" failed in route.c (5)

Status: upstream: reported on 2025/07/18 02:40
Reported-by: syzbot+fc1ac0e84ae2b49a13c5@syzkaller.appspotmail.com
First crash: 61d, last: 7d23h
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "cifp != NULL" failed in route.c (2) -1 18 804d 1032d 0/3 auto-obsoleted due to no activity on 2023/10/03 20:27
openbsd assert "cifp != NULL" failed in route.c (4) -1 3 202d 213d 0/3 auto-obsoleted due to no activity on 2025/05/27 08:33
openbsd assert "cifp != NULL" failed in route.c (3) -1 203 313d 579d 0/3 auto-obsoleted due to no activity on 2024/12/27 21:04
openbsd assert "cifp != NULL" failed in route.c -1 89 2140d 2195d 0/3 auto-closed as invalid on 2020/01/08 16:33

Sample crash report:
panic: kernel diagnostic assertion "cifp != NULL" failed: file "/syzkaller/managers/main/kernel/sys/net/route.c", line 1090
Starting stack trace...
panic(ffffffff8333c149) at panic+0x1ba sys/kern/subr_prf.c:229
__assert(ffffffff83377e44,ffffffff833b59a2,442,ffffffff833a1614) at __assert+0x29 sys/kern/subr_prf.c:-1
rtrequest(1,ffff80003ca3d808,8,ffff80003ca3d8d0,0) at rtrequest+0x115a
rt_ifa_add(ffff8000014b7100,40004,ffff8000014b7168,0) at rt_ifa_
add+0x38f
in_ifinit(ffff80003c9beba0,ffff8000014b7100,ffff80003ca3da00,1) at in_ifinit+0x53d sys/netinet/in.c:-1
pppx_add_session(ffff8000016ac600,ffff8000016af800) at pppx_add_session+0x472 sys/net/if_pppx.c:717
VOP_IOCTL(fffffd80657add90,82907003,ffff8000016af800,1,fffffd8007bfb548,ffff80003c9a2558) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806b467f00,82907003,ffff8000016af800,ffff80003c9a2558) at vn_ioctl+0xea sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c9a2558,ffff80003ca3de00,ffff80003ca3dd50) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff80003ca3de00) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003ca3de00) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8a468eef8c0, count: 246
End of stack trace.
set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/09 06:22 openbsd 1b1dd04c9634 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/07/20 15:09 openbsd 33fc78536c1f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/07/18 02:40 openbsd aa829d585f3f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
* Struck through repros no longer work on HEAD.