panic: kernel diagnostic assertion "bpfilter_lookup(unit) == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/bpf.c", line 379 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 183589 76876 0 0 0 0 syz-executor * 9093 50444 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834c3bdc) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff834ff3ab,ffffffff8350e90e,17b,ffffffff83518795) at __assert+0x29 sys/kern/subr_prf.c:-1 bpfopen(11700,101,2000,ffff80002f3847f8) at bpfopen+0x2bd bpfilter_lookup sys/net/bpf.c:1832 [inline] bpfopen(11700,101,2000,ffff80002f3847f8) at bpfopen+0x2bd sys/net/bpf.c:379 spec_open_clone(ffff80003c3c4618) at spec_open_clone+0x277 sys/kern/spec_vnops.c:722 spec_open(ffff80003c3c4618) at spec_open+0x319 sys/kern/spec_vnops.c:148 VOP_OPEN(fffffb806a669600,101,fffffb80097fd270,ffff80002f3847f8) at VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 vn_open(ffff80003c3c4868,101,0) at vn_open+0x7a5 sys/kern/vfs_vnops.c:183 doopenat(ffff80002f3847f8,ffffff9c,200000000080,100,0,0,edd92f39ddc2468d) at doopenat+0x35b sys/kern/vfs_syscalls.c:1163 sys_openat(ffff80002f3847f8,ffff80003c3c4b20,ffff80003c3c4a70) at sys_openat+0x58 sys/kern/vfs_syscalls.c:1102 syscall(ffff80003c3c4b20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3c4b20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xca476178d90, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "bpfilter_lookup(unit) == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/bpf.c", line 379 ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834c3bdc) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff834ff3ab,ffffffff8350e90e,17b,ffffffff83518795) at __assert+0x29 sys/kern/subr_prf.c:-1 bpfopen(11700,101,2000,ffff80002f3847f8) at bpfopen+0x2bd bpfilter_lookup sys/net/bpf.c:1832 [inline] bpfopen(11700,101,2000,ffff80002f3847f8) at bpfopen+0x2bd sys/net/bpf.c:379 spec_open_clone(ffff80003c3c4618) at spec_open_clone+0x277 sys/kern/spec_vnops.c:722 spec_open(ffff80003c3c4618) at spec_open+0x319 sys/kern/spec_vnops.c:148 VOP_OPEN(fffffb806a669600,101,fffffb80097fd270,ffff80002f3847f8) at VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 vn_open(ffff80003c3c4868,101,0) at vn_open+0x7a5 sys/kern/vfs_vnops.c:183 doopenat(ffff80002f3847f8,ffffff9c,200000000080,100,0,0,edd92f39ddc2468d) at doopenat+0x35b sys/kern/vfs_syscalls.c:1163 sys_openat(ffff80002f3847f8,ffff80003c3c4b20,ffff80003c3c4a70) at sys_openat+0x58 sys/kern/vfs_syscalls.c:1102 syscall(ffff80003c3c4b20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3c4b20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xca476178d90, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3c43f0 rbx 0xffff80002999ee07 rdx 0 rcx 0xffff80002f3847f8 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x222e4fbfaa0c9c84 r11 0x75624f3fce63c2bf r12 0xffff80002999ec08 r13 0 r14 0 r15 0x1 rip 0xffffffff831e4cc5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3c43e0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=9093 pid=50444 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f385788,0xffff80002f385a30 process=0xffff800045ff21c0 user=0xffff80003c3bf000, vmspace=0xfffffb806cf02d70 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 5116 15759 45204 0 2 0 0 syz-executor 76876 183589 77698 0 7 0 0 syz-executor 76876 218544 77698 0 2 0 0x4000000 syz-executor 93614 496882 5286 0 2 0 0 syz-executor 55868 126684 59304 0 2 0 0 syz-executor 55868 204789 59304 0 3 0 0x4000080 fsleep syz-executor 55868 446788 59304 0 2 0 0x4000000 syz-executor 57086 74094 53030 0 2 0 0 syz-executor 57086 239038 53030 0 3 0 0x4000080 fsleep syz-executor 57086 312066 53030 0 2 0 0x4000000 syz-executor 47920 165702 84208 0 2 0 0 syz-executor 47920 190265 84208 0 3 0 0x4000080 fsleep syz-executor 94033 407763 5829 0 2 0 0x1 syz-executor 94033 177925 5829 0 3 0 0x4000080 fsleep syz-executor 94033 66539 5829 0 3 0 0x4000080 fsleep syz-executor 50444 497706 44310 0 2 0 0 syz-executor *50444 9093 44310 0 7 0 0x4000000 syz-executor 78391 387726 1 0 3 0 0x80 nanoslp init 84208 507281 13084 0 2 0x2 0x1 syz-executor 53030 265568 13084 0 3 0x2 0x80 nanoslp syz-executor 59304 456554 13084 0 3 0x2 0x80 nanoslp syz-executor 44310 40724 13084 0 3 0x2 0x80 nanoslp syz-executor 77698 39728 13084 0 3 0x2 0x80 nanoslp syz-executor 5286 407710 13084 0 3 0x2 0x80 nanoslp syz-executor 5829 451951 13084 0 3 0x2 0x80 nanoslp syz-executor 45204 321585 13084 0 3 0x2 0x80 nanoslp syz-executor 13084 77317 1 0 2 0x2 0x1 syz-executor 75840 295298 0 0 3 0x14000 0x200 bored smr 27715 171596 0 0 2 0x14000 0x200 zerothread 24522 206184 0 0 3 0x14000 0x200 aiodoned aiodoned 71589 385113 0 0 3 0x14000 0x200 syncer update 33016 129965 0 0 3 0x14000 0x200 cleaner cleaner 16849 320112 0 0 3 0x14000 0x200 reaper reaper 46239 401746 0 0 3 0x14000 0x200 pgdaemon pagedaemon 402 351493 0 0 3 0x14000 0x200 bored viomb 42339 165438 0 0 3 0x14000 0x40000200 acpi0 acpi0 89235 276323 0 0 3 0x14000 0x40000200 idle1 57663 58168 0 0 3 0x14000 0x200 bored softnet1 34240 231826 0 0 3 0x14000 0x200 bored softnet0 44889 464259 0 0 3 0x14000 0x200 bored systqmp 57952 281428 0 0 3 0x14000 0x200 bored systq 16762 178600 0 0 3 0x14000 0x200 tmoslp softclockmp 61596 363360 0 0 3 0x14000 0x40000200 tmoslp softclock 10463 265011 0 0 3 0x14000 0x40000200 idle0 1 437639 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 93614 (syz-executor) thread 0xffff80002a2234d0 (496882) exclusive rwlock vmmaplk r = 0 (0xfffffb806cf02c88) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880 #3 uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693 #4 uvm_fault+0x106 sys/uvm/uvm_fault.c:627 #5 upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192 #6 usertrap+0x430 sys/arch/amd64/amd64/trap.c:640 #7 recall_trap+0x8 Process 57086 (syz-executor) thread 0xffff80002a223768 (312066) exclusive rrwlock inode r = 0 (0xfffffb805f3b6c58) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x12b sys/kern/vfs_lookup.c:431 #6 namei+0x7c5 sys/kern/vfs_lookup.c:250 #7 vn_open+0x178 sys/kern/vfs_vnops.c:146 #8 doopenat+0x35b sys/kern/vfs_syscalls.c:1163 #9 sys_open+0x59 sys/kern/vfs_syscalls.c:1065 #10 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 Process 50444 (syz-executor) thread 0xffff80002f3847f8 (9093) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a3ce40) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 #2 malloc+0xe3 sys/kern/kern_malloc.c:175 #3 checkalias+0x261 sys/kern/vfs_subr.c:600 #4 cdevvp+0xd2 getdevvp sys/kern/vfs_subr.c:-1 [inline] #4 cdevvp+0xd2 sys/kern/vfs_subr.c:517 #5 spec_open_clone+0x1e2 sys/kern/spec_vnops.c:713 #6 spec_open+0x319 sys/kern/spec_vnops.c:148 #7 VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 #8 vn_open+0x7a5 sys/kern/vfs_vnops.c:183 #9 doopenat+0x35b sys/kern/vfs_syscalls.c:1163 #10 sys_openat+0x58 sys/kern/vfs_syscalls.c:1102 #11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #12 Xsyscall+0x128 ddb{1}>