syzbot


assert "sc->sc_dev == NUM" failed in if_tun.c (6)

Status: upstream: reported on 2025/02/10 06:39
Reported-by: syzbot+171f3fbee35ba6030ee9@syzkaller.appspotmail.com
First crash: 118d, last: 9h24m
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c 24 1209d 1241d 3/3 fixed on 2022/02/16 17:50
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (2) 1 1205d 1205d 3/3 fixed on 2022/02/26 07:36
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (5) 358 201d 471d 0/3 auto-obsoleted due to no activity on 2025/01/08 15:50
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (3) 68 708d 1197d 0/3 auto-obsoleted due to no activity on 2023/09/29 16:10
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (4) 1 608d 608d 0/3 auto-obsoleted due to no activity on 2024/01/09 18:17

Sample crash report:
panic: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/net/if_tun.c", line 322
Starting stack trace...
panic(ffffffff8346c940) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff83415621,ffffffff833ec695,142,ffffffff833f5d30) at __assert+0x29 sys/kern/subr_prf.c:-1
tun_clone_destroy(ffff800001492000) at tun_clone_destroy+0x38a sys/net/if_tun.c:322
if_clone_destroy(ffff80003c459960) at if_clone_destroy+0x1d7 sys/net/if.c:1401
ifioctl(ffff8000014e76f0,80206979,ffff80003c459960,ffff80002a2bb208) at ifioctl+0x5c5 sys/net/if.c:-1
sys_ioctl(ffff80002a2bb208,ffff80003c459b40,ffff80003c459a90) at sys_ioctl+0x5c3 sys/kern/sys_generic.c:-1
syscall(ffff80003c459b40) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c459b40) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7838eb5a5d30, count: 249
End of stack trace.

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/08 10:43 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/22 22:33 openbsd ba45935f401b 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/19 13:07 openbsd 2fc058fc36e6 27f68995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/16 13:32 openbsd 84d74105a289 cfde8269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/12 06:10 openbsd 1d7d4b26237d 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/09 14:18 openbsd 0dc0a232ede0 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/24 01:48 openbsd 9244c012979b 9882047a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/21 22:10 openbsd e8eeea37c7e6 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/17 03:22 openbsd 96fb1b485f5f a95239b1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/17 00:11 openbsd 4c8bb6464990 a95239b1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/14 14:27 openbsd c5a62f9c39e8 0bd6db41 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/12 11:09 openbsd ade9dbe6546b 0bd6db41 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/09 02:19 openbsd d4602f96699d b133e63a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/06 15:04 openbsd c16771e8b440 1c65791e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/31 21:41 openbsd 6cbbb384a28a e2826670 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/15 22:31 openbsd d50894551f06 e2826670 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/09 04:29 openbsd 147d2ad00d69 163f510d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/08 16:41 openbsd aa707e2a580f 7e3bd60d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/05 13:26 openbsd 4053394b61c7 60f5d8d9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/24 02:17 openbsd a5c838d89587 d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/20 21:27 openbsd e17cfef6a95f 0808a665 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/14 07:55 openbsd 88a67239acef d9a046cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/13 04:48 openbsd eb8501b6f1f9 2afad16e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/10 06:38 openbsd 275cd30cffcd ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
* Struck through repros no longer work on HEAD.