panic: kernel diagnostic assertion "bpfilter_lookup(unit) == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/bpf.c", line 379 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 442767 84643 0 0 0 0 syz-executor * 90988 84643 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8344cb14) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8348ca0b,ffffffff8349f6c0,17b,ffffffff834a9cf0) at __assert+0x29 sys/kern/subr_prf.c:-1 bpfopen(11700,8001,2000,ffff80002a243768) at bpfopen+0x2bd bpfilter_lookup sys/net/bpf.c:1832 [inline] bpfopen(11700,8001,2000,ffff80002a243768) at bpfopen+0x2bd sys/net/bpf.c:379 spec_open_clone(ffff80002a2ac7e8) at spec_open_clone+0x277 sys/kern/spec_vnops.c:722 spec_open(ffff80002a2ac7e8) at spec_open+0x319 sys/kern/spec_vnops.c:148 VOP_OPEN(fffffd8064ed15f8,8001,fffffd80097fd8f0,ffff80002a243768) at VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 vn_open(ffff80002a2aca28,8001,0) at vn_open+0x6a0 sys/kern/vfs_vnops.c:177 doopenat(ffff80002a243768,ffffff9c,200000000000,8000,0,0,2990d01d65c00889) at doopenat+0x35b sys/kern/vfs_syscalls.c:1155 sys_open(ffff80002a243768,ffff80002a2acce0,ffff80002a2acc30) at sys_open+0x59 sys/kern/vfs_syscalls.c:1063 syscall(ffff80002a2acce0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a2acce0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x365ec3f85c0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "bpfilter_lookup(unit) == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/bpf.c", line 379 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8344cb14) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8348ca0b,ffffffff8349f6c0,17b,ffffffff834a9cf0) at __assert+0x29 sys/kern/subr_prf.c:-1 bpfopen(11700,8001,2000,ffff80002a243768) at bpfopen+0x2bd bpfilter_lookup sys/net/bpf.c:1832 [inline] bpfopen(11700,8001,2000,ffff80002a243768) at bpfopen+0x2bd sys/net/bpf.c:379 spec_open_clone(ffff80002a2ac7e8) at spec_open_clone+0x277 sys/kern/spec_vnops.c:722 spec_open(ffff80002a2ac7e8) at spec_open+0x319 sys/kern/spec_vnops.c:148 VOP_OPEN(fffffd8064ed15f8,8001,fffffd80097fd8f0,ffff80002a243768) at VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 vn_open(ffff80002a2aca28,8001,0) at vn_open+0x6a0 sys/kern/vfs_vnops.c:177 doopenat(ffff80002a243768,ffffff9c,200000000000,8000,0,0,2990d01d65c00889) at doopenat+0x35b sys/kern/vfs_syscalls.c:1155 sys_open(ffff80002a243768,ffff80002a2acce0,ffff80002a2acc30) at sys_open+0x59 sys/kern/vfs_syscalls.c:1063 syscall(ffff80002a2acce0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a2acce0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x365ec3f85c0, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a2ac5c0 rbx 0xffff8000299bee07 rdx 0xffff8000015f1700 rcx 0xffff80002a243768 rax 0xffff8000299bdff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x63111b66a6a3df69 r11 0xf6b5affb642b6d36 r12 0xffff8000299bec08 r13 0 r14 0 r15 0x1 rip 0xffffffff82f568f5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a2ac5b0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=90988 pid=84643 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a243238,0xffff80002a2427e8 process=0xffff8000fffec9b8 user=0xffff80002a2a7000, vmspace=0xfffffd806c6ac9a8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 77970 349991 90106 0 2 0 syz-executor 77970 252803 90106 0 3 0x4000080 fsleep syz-executor 84643 442767 77664 0 7 0 syz-executor *84643 90988 77664 0 7 0x4000000 syz-executor 83154 273589 1256 0 2 0 syz-executor 83154 175476 1256 0 3 0x4000080 fsleep syz-executor 83154 419110 1256 0 3 0x4000080 fsleep syz-executor 83454 449395 40627 0 3 0 vmmaplk syz-executor 83454 135308 40627 0 3 0x4000000 vmmaplk syz-executor 83454 484467 40627 0 2 0x4000000 syz-executor 83454 503828 40627 0 3 0x4000000 vmmaplk syz-executor 33080 325214 77017 0 2 0 syz-executor 33080 29750 77017 0 3 0x4000080 fsleep syz-executor 33080 138811 77017 0 2 0x4000000 syz-executor 7691 386533 72084 0 2 0 syz-executor 7691 31566 72084 0 3 0x4000080 fsleep syz-executor 96601 287605 0 0 3 0x14280 nfsidl nfsio 36088 270818 0 0 3 0x14280 nfsidl nfsio 93550 284189 0 0 3 0x14280 nfsidl nfsio 24733 353462 0 0 3 0x14280 nfsidl nfsio 66305 169845 0 0 3 0x14280 nfsidl nfsio 31317 453168 0 0 3 0x14280 nfsidl nfsio 11789 398520 0 0 3 0x14280 nfsidl nfsio 44762 316798 0 0 3 0x14280 nfsidl nfsio 35819 29170 0 0 3 0x14280 nfsidl nfsio 23219 375436 0 0 3 0x14280 nfsidl nfsio 91899 435258 0 0 3 0x14280 nfsidl nfsio 35447 489271 0 0 3 0x14280 nfsidl nfsio 56053 500753 0 0 3 0x14280 nfsidl nfsio 18531 260307 0 0 3 0x14280 nfsidl nfsio 89499 479484 0 0 3 0x14280 nfsidl nfsio 14308 283607 0 0 3 0x14280 nfsidl nfsio 39986 40608 0 0 3 0x14280 nfsidl nfsio 34945 92011 0 0 3 0x14280 nfsidl nfsio 41659 31284 0 0 3 0x14280 nfsidl nfsio 50696 404447 0 0 3 0x14280 nfsidl nfsio 20814 148877 1 0 3 0x80 nanoslp init 22384 381023 23828 0 3 0x2 biowait syz-executor 77664 18582 23828 0 3 0x82 nanoslp syz-executor 1256 123058 23828 0 3 0x82 nanoslp syz-executor 90106 189542 23828 0 3 0x82 nanoslp syz-executor 31504 157680 23828 0 3 0x82 nanoslp syz-executor 77017 380788 23828 0 3 0x82 nanoslp syz-executor 40627 455560 23828 0 3 0x82 nanoslp syz-executor 72084 71912 23828 0 3 0x82 nanoslp syz-executor 23828 70818 1 0 3 0x82 kqread syz-executor 6635 226963 0 0 3 0x14200 bored smr 3958 114960 0 0 2 0x14200 zerothread 14665 292595 0 0 3 0x14200 aiodoned aiodoned 13260 392532 0 0 3 0x14200 syncer update 79260 427642 0 0 3 0x14200 cleaner cleaner 14994 157228 0 0 3 0x14200 reaper reaper 84419 108610 0 0 3 0x14200 pgdaemon pagedaemon 42773 377237 0 0 3 0x14200 bored viomb 72095 450607 0 0 3 0x40014200 acpi0 acpi0 67189 282437 0 0 3 0x40014200 idle1 72041 307083 0 0 3 0x14200 bored softnet1 53886 142300 0 0 3 0x14200 bored softnet0 68409 68944 0 0 3 0x14200 bored systqmp 51737 198445 0 0 3 0x14200 bored systq 84258 283357 0 0 3 0x14200 tmoslp softclockmp 51785 127014 0 0 3 0x40014200 tmoslp softclock 23024 415685 0 0 3 0x40014200 idle0 1 308884 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 84643 (syz-executor) thread 0xffff80002a243768 (90988) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a18d80) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 #2 malloc+0xe3 sys/kern/kern_malloc.c:175 #3 checkalias+0x21c sys/kern/vfs_subr.c:594 #4 cdevvp+0xd2 getdevvp sys/kern/vfs_subr.c:-1 [inline] #4 cdevvp+0xd2 sys/kern/vfs_subr.c:517 #5 spec_open_clone+0x1e2 sys/kern/spec_vnops.c:713 #6 spec_open+0x319 sys/kern/spec_vnops.c:148 #7 VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 #8 vn_open+0x6a0 sys/kern/vfs_vnops.c:177 #9 doopenat+0x35b sys/kern/vfs_syscalls.c:1155 #10 sys_open+0x59 sys/kern/vfs_syscalls.c:1063 #11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #12 Xsyscall+0x128 Process 83454 (syz-executor) thread 0xffff80003b7e6a98 (484467) exclusive rwlock vmmaplk r = 0 (0xfffffd806c6ac308) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880 #3 uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693 #4 uvm_fault+0x106 sys/uvm/uvm_fault.c:627 #5 upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192 #6 usertrap+0x430 sys/arch/amd64/amd64/trap.c:640 #7 recall_trap+0x8 Process 33080 (syz-executor) thread 0xffff80002a243a00 (138811) exclusive rwlock fdlock r = 0 (0xffff8000fffeb930) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 doopenat+0x179 sys/kern/vfs_syscalls.c:1122 #3 sys_open+0x59 sys/kern/vfs_syscalls.c:1063 #4 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #5 Xsyscall+0x128 Process 22384 (syz-executor) thread 0xffff80002a241240 (381023) exclusive rrwlock inode r = 0 (0xfffffd806e840238) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline] #4 ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:159 #5 ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232 #6 ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394 #9 domkdirat+0x179 sys/kern/vfs_syscalls.c:3143 #10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c6027b8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1 #6 namei+0x7ca sys/kern/vfs_lookup.c:250 #7 domkdirat+0x8b sys/kern/vfs_syscalls.c:3128 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11070 12032K 12411K 166960K 12484 0 pcb 17 12K 12K 166960K 86 0 rtable 178 16K 17K 166960K 495 0 pf 42 19K 22K 166960K 93 0 ifaddr 34 5K 8K 166960K 69 0 ifgroup 59 2K 2K 166960K 95 0 sysctl 4 1K 9K 166960K 9 0 counters 72 37K 38K 166960K 116 0 ioctlops 0 0K 4K 166960K 1543 0 iov 0 0K 16K 166960K 12 0 mount 1 1K 1K 166960K 1 0 log 1 0K 0K 166960K 5 0 vnodes 1326 83K 84K 166960K 1634 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 61K 93K 166960K 461 0 sigio 0 0K 0K 166960K 7 0 proc 12 17K 196K 166960K 620 0 subproc 72 4K 4K 166960K 84 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 26 0 in_multi 67 4K 7K 166960K 124 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 423 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 132 78K 202K 166960K 6240 0 UVM aobj 14 4K 4K 166960K 16 0 pinsyscall 18 36K 105K 166960K 1679 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 20 0 NDP 13 0K 2K 166960K 45 0 temp 41 9075K 9143K 166960K 13960 0 kqueue 1 2K 28K 166960K 100 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}>