panic: kernel diagnostic assertion "bpfilter_lookup(unit) == NULL" failed: file "/syzkaller/managers/main/kernel/sys/net/bpf.c", line 379 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *217608 87354 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834155d9) at panic+0x1cf sys/kern/subr_prf.c:198 __assert(ffffffff834523c8,ffffffff8343e2d3,17b,ffffffff8346de33) at __assert+0x29 sys/kern/subr_prf.c:-1 bpfopen(11700,21,2000,ffff8000364d74e8) at bpfopen+0x27d spec_open_clone(ffff80003c8f6ac8) at spec_open_clone+0x277 sys/kern/spec_vnops.c:722 spec_open(ffff80003c8f6ac8) at spec_open+0x316 sys/kern/spec_vnops.c:148 VOP_OPEN(fffffd806ea4d7b0,21,fffffd8007ffd6e8,ffff8000364d74e8) at VOP_OPEN+0x82 sys/kern/vfs_vops.c:138 vn_open(ffff80003c8f6d10,21,0) at vn_open+0x6a0 sys/kern/vfs_vnops.c:177 doopenat(ffff8000364d74e8,ffffff9c,200000000000,20,0,0,d32b0e71782f8742) at doopenat+0x352 sys/kern/vfs_syscalls.c:1155 sys_open(ffff8000364d74e8,ffff80003c8f6fb0,ffff80003c8f6f00) at sys_open+0x59 sys/kern/vfs_syscalls.c:1063 syscall(ffff80003c8f6fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c8f6fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcd6adeaf6d0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "bpfilter_lookup(unit) == NULL" failed: file "/syzkaller/managers/main/kernel/sys/net/bpf.c", line 379 ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834155d9) at panic+0x1cf sys/kern/subr_prf.c:198 __assert(ffffffff834523c8,ffffffff8343e2d3,17b,ffffffff8346de33) at __assert+0x29 sys/kern/subr_prf.c:-1 bpfopen(11700,21,2000,ffff8000364d74e8) at bpfopen+0x27d spec_open_clone(ffff80003c8f6ac8) at spec_open_clone+0x277 sys/kern/spec_vnops.c:722 spec_open(ffff80003c8f6ac8) at spec_open+0x316 sys/kern/spec_vnops.c:148 VOP_OPEN(fffffd806ea4d7b0,21,fffffd8007ffd6e8,ffff8000364d74e8) at VOP_OPEN+0x82 sys/kern/vfs_vops.c:138 vn_open(ffff80003c8f6d10,21,0) at vn_open+0x6a0 sys/kern/vfs_vnops.c:177 doopenat(ffff8000364d74e8,ffffff9c,200000000000,20,0,0,d32b0e71782f8742) at doopenat+0x352 sys/kern/vfs_syscalls.c:1155 sys_open(ffff8000364d74e8,ffff80003c8f6fb0,ffff80003c8f6f00) at sys_open+0x59 sys/kern/vfs_syscalls.c:1063 syscall(ffff80003c8f6fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c8f6fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcd6adeaf6d0, count: -12 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c8f68b0 rbx 0 rdx 0xffff8000015d8500 rcx 0 rax 0xffff8000364d74e8 r8 0x101010101010101 r9 0x8080808080808080 r10 0x77ded8aadfa6a44d r11 0x8e10d75a6bd16e3f r12 0 r13 0x2 r14 0 r15 0x1 rip 0xffffffff82c71ac5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c8f68a0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=217608 pid=87354 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=79, usrpri=79, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a746a68,0xffff80002a788d18 process=0xffff8000ffffa898 user=0xffff80003c8f2000, vmspace=0xfffffd806ccec180 estcpu=29, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 31479 452710 87541 0 2 0xc80 syz-executor 31479 82247 87541 0 3 0x4000080 lockf syz-executor 31479 35697 87541 0 3 0x4000080 lockf syz-executor 31479 74402 87541 0 3 0x4000080 fsleep syz-executor 31479 135561 87541 0 3 0x4000080 fsleep syz-executor 29433 275722 99325 0 4 0x82000 syz-executor 29433 130807 99325 0 2 0x4002000 syz-executor 29433 265446 99325 0 4 0x4082000 syz-executor 77543 90909 25269 0 2 0 syz-executor 77543 158054 25269 0 3 0x4000080 fsleep syz-executor 60899 234447 24512 0 2 0 syz-executor 60899 398235 24512 0 3 0x4000080 fsleep syz-executor 60899 34519 24512 0 2 0x4000000 syz-executor 43553 29320 3289 0 2 0 syz-executor 43553 313551 3289 0 3 0x4000080 msgwait syz-executor 43553 259323 3289 0 2 0x4000000 syz-executor 5545 150702 1 0 3 0x80 nanoslp init 87354 494030 42022 0 2 0 syz-executor 87354 271804 42022 0 2 0x4000000 syz-executor *87354 217608 42022 0 7 0x4000000 syz-executor 87354 211196 42022 0 3 0x4000080 fsleep syz-executor 87541 432903 73355 0 2 0xc82 syz-executor 667 447936 73355 0 2 0x2 syz-executor 99325 401887 73355 0 2 0xc82 syz-executor 24512 36926 73355 0 3 0x82 nanoslp syz-executor 42022 162631 73355 0 3 0x82 nanoslp syz-executor 3289 212224 73355 0 2 0xc82 syz-executor 25269 269769 73355 0 2 0xc82 syz-executor 88112 261365 73355 0 3 0x82 nanoslp syz-executor 73355 256983 1 0 3 0x82 kqread syz-executor 10678 227526 1 73 3 0x1100090 kqread syslogd 42373 467167 0 0 3 0x14200 bored smr 70855 386912 0 0 2 0x14200 zerothread 40503 223561 0 0 3 0x14200 aiodoned aiodoned 95492 77997 0 0 3 0x14200 syncer update 88789 44429 0 0 3 0x14200 cleaner cleaner 34726 273264 0 0 3 0x14200 reaper reaper 13112 147396 0 0 3 0x14200 pgdaemon pagedaemon 95191 292999 0 0 3 0x14200 bored viomb 31278 8494 0 0 3 0x40014200 acpi0 acpi0 11934 507950 0 0 3 0x14200 bored softnet0 77150 55664 0 0 3 0x14200 bored systqmp 28269 132702 0 0 3 0x14200 bored systq 70432 244812 0 0 3 0x40014200 tmoslp softclock 60856 212524 0 0 3 0x40014200 idle0 1 56113 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11036 12165K 12245K 166960K 12342 0 pcb 17 12K 12K 166960K 42 0 rtable 236 8K 8K 166960K 385 0 pf 32 13K 13K 166960K 56 0 ifaddr 41 7K 7K 166960K 53 0 ifgroup 49 2K 2K 166960K 68 0 sysctl 2 1K 9K 166960K 6 0 counters 34 17K 18K 166960K 41 0 ioctlops 0 0K 4K 166960K 55 0 iov 0 0K 12K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1300 82K 82K 166960K 1469 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 257 0 proc 11 17K 91K 166960K 523 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 10 0 in_multi 89 6K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 370 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 155 83K 160K 166960K 4187 0 UVM aobj 7 2K 2K 166960K 9 0 pinsyscall 20 40K 96K 166960K 1340 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 12 0K 2K 166960K 33 0 temp 42 9067K 9131K 166960K 4364 0 kqueue 3 4K 28K 166960K 55 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 49 0 49 1 0 1 1 0 8 1 rtentry 136 114 0 9 4 0 4 4 0 8 0 unpcb 144 103 0 95 2 0 2 2 0 8 1 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 45 0 42 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 0 1 0 1 1 0 8 0 inpcb 328 151 0 147 2 0 2 2 0 8 1 nd6 112 25 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 6 0 5 1 0 1 1 0 8 0 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 1 0 0 1 0 1 1 0 8 0 pfstkey 128 1 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 pfrule 1360 3 0 3 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 466 0 46 29 0 29 29 0 8 2 art_table 40 468 0 46 5 0 5 5 0 8 0 art_node 32 114 0 18 1 0 1 1 0 8 0 sysvmsgpl 40 42 0 42 1 0 1 1 0 8 1 semapl 112 5 0 2 1 0 1 1 0 8 0 shmpl 112 6 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1795 0 333 92 0 92 92 0 8 0 ffsino 256 1796 0 333 92 0 92 92 0 8 0 nchpl 144 2149 0 454 63 0 63 63 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 1938 0 0 108 0 108 108 0 8 0 namei 1024 6668 0 6666 3 2 1 2 0 8 0 kstatmem 264 34 0 10 2 0 2 2 0 8 0 scxspl 216 7281 0 7281 10 2 8 8 1 8 8 plimitpl 152 107 0 96 1 0 1 1 0 8 0 sigapl 424 548 0 515 6 0 6 6 0 8 1 knotepl 120 8732 0 8710 17 7 10 17 0 8 8 kqueuepl 184 75 0 72 1 0 1 1 0 8 0 pipepl 304 128 0 100 3 0 3 3 0 8 0 fdescpl 448 535 0 515 5 0 5 5 0 8 1 filepl 120 2347 0 2157 11 0 11 11 0 8 4 lockfpl 104 135 0 131 1 0 1 1 0 8 0 lockfspl 48 32 0 30 1 0 1 1 0 8 0 sessionpl 144 28 0 25 1 0 1 1 0 8 0 pgrppl 48 36 0 25 1 0 1 1 0 8 0 ucredpl 104 211 0 206 1 0 1 1 0 8 0 zombiepl 144 635 0 634 2 1 1 1 0 8 0 processpl 1152 548 0 515 4 0 4 4 0 8 0 procpl 664 813 0 765 7 0 7 7 0 8 2 sockpl 552 308 0 296 4 0 4 4 0 8 3 mcl64k 65536 6 0 5 1 0 1 1 0 8 0 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 6 0 6 2 1 1 1 0 8 1 mcl4k 4096 2657 0 2602 15 6 9 15 0 8 1 mcl2k 2048 239 0 238 2 0 2 2 0 8 1 mtagpl 96 72 0 4 3 1 2 2 0 8 0 mbufpl 256 5484 0 5221 23 1 22 22 0 8 2 bufpl 280 2503 0 103 172 0 172 172 0 8 0 anonpl 24 99077 0 97209 46 2 44 44 0 187 21 amapchunkpl 152 12329 0 11923 25 0 25 25 0 158 7 amappl16 200 1400 0 1383 17 6 11 14 0 8 8 amappl15 192 30 0 30 1 1 0 1 0 8 0 amappl14 184 407 0 407 1 0 1 1 0 8 1 amappl13 176 113 0 112 1 0 1 1 0 8 0 amappl12 168 770 0 752 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 83 0 80 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 1 0 1 0 8 0 amappl8 136 97 0 96 1 0 1 1 0 8 0 amappl7 128 138 0 133 1 0 1 1 0 8 0 amappl6 120 148 0 148 1 0 1 1 0 8 1 amappl5 112 84 0 83 1 0 1 1 0 8 0 amappl4 104 252 0 245 1 0 1 1 0 8 0 amappl3 96 2238 0 2153 4 0 4 4 0 8 1 amappl2 88 497 0 482 2 0 2 2 0 8 0 amappl1 80 9410 0 9279 13 1 12 13 0 8 2 amappl 88 3484 0 3347 5 0 5 5 0 92 1 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 2 1 0 1 1 0 8 0 uaddrrnd 24 535 0 515 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr