syzbot


assert "cifp != NULL" failed in route.c (5)

Status: upstream: reported on 2025/07/18 02:40
Reported-by: syzbot+fc1ac0e84ae2b49a13c5@syzkaller.appspotmail.com
First crash: 339d, last: 7d05h
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "cifp != NULL" failed in route.c (2) -1 18 1083d 1311d 0/3 auto-obsoleted due to no activity on 2023/10/03 20:27
openbsd assert "cifp != NULL" failed in route.c (4) -1 3 481d 492d 0/3 auto-obsoleted due to no activity on 2025/05/27 08:33
openbsd assert "cifp != NULL" failed in route.c (3) -1 203 592d 858d 0/3 auto-obsoleted due to no activity on 2024/12/27 21:04
openbsd assert "cifp != NULL" failed in route.c -1 89 2419d 2474d 0/3 auto-closed as invalid on 2020/01/08 16:33

Sample crash report:
panic: kernel diagnostic assertion "cifp != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1089
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 77987  88135      0           0  0x4000000    0K syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834b75bd) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff834f735b,ffffffff8347c795,441,ffffffff83524ec9) at __assert+0x29 sys/kern/subr_prf.c:-1
rt_hash(1,ffff80003c3efa08,4) at rt_hash
rt_ifa_add(ffff800001616300,840100,ffff800001616368,0) at rt_ifa_add+0x22e sys/net/route.c:1284
in_ifinit(ffff80000160f000,ffff800001616300,ffff80003c3efd00,0) at in_ifinit+0x4bb in_insert_prefix sys/netinet/in.c:789 [inline]
in_ifinit(ffff80000160f000,ffff800001616300,ffff80003c3efd00,0) at in_ifinit+0x4bb sys/netinet/in.c:722
in_ioctl_set_ifaddr(8020690c,ffff80003c3efcf0,ffff80000160f000) at in_ioctl_set_ifaddr+0x349 sys/netinet/in.c:405
ifioctl(ffff8000015a7a80,8020690c,ffff80003c3efcf0,ffff80003c3d2028) at ifioctl+0x1714 pru_control sys/sys/protosw.h:353 [inline]
ifioctl(ffff8000015a7a80,8020690c,ffff80003c3efcf0,ffff80003c3d2028) at ifioctl+0x1714 sys/net/if.c:2554
sys_ioctl(ffff80003c3d2028,ffff80003c3efed0,ffff80003c3efe20) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c3efed0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c3efed0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2a8162b8960, count: 4
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> 

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/15 19:31 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2026/05/08 11:57 openbsd d1081477e0e5 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2026/04/18 21:34 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2026/02/08 12:54 openbsd 3c0af00218ea 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2026/01/26 20:43 openbsd 4c8dfe351ad4 a4c52dd6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2026/01/07 19:46 openbsd b6bc6e61f2e3 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/12/02 04:27 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/10/21 10:25 openbsd 243c12c31b60 9832ed61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/25 07:24 openbsd a25aeda82389 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/09/09 06:22 openbsd 1b1dd04c9634 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
2025/07/20 15:09 openbsd 33fc78536c1f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "cifp != NULL" failed in route.c
2025/07/18 02:40 openbsd aa829d585f3f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "cifp != NULL" failed in route.c
* Struck through repros no longer work on HEAD.