syzbot


assert "sc->sc_dev == NUM" failed in if_tun.c (6)

Status: upstream: reported on 2025/02/10 06:39
Reported-by: syzbot+171f3fbee35ba6030ee9@syzkaller.appspotmail.com
First crash: 217d, last: 7h30m
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c -1 24 1308d 1340d 3/3 fixed on 2022/02/16 17:50
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (2) -1 1 1303d 1303d 3/3 fixed on 2022/02/26 07:36
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (5) -1 358 299d 570d 0/3 auto-obsoleted due to no activity on 2025/01/08 15:50
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (3) -1 68 806d 1295d 0/3 auto-obsoleted due to no activity on 2023/09/29 16:10
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (4) -1 1 707d 707d 0/3 auto-obsoleted due to no activity on 2024/01/09 18:17

Sample crash report:
panic: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/net/if_tun.c", line 316
Starting stack trace...
panic(ffffffff83374ced) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833af0d4,ffffffff833fbbec,13c,ffffffff832f0332) at __assert+0x29 sys/kern/subr_prf.c:-1
tun_clone_destroy(ffff800001462000) at tun_clone_destroy+0x38a
if_clone_destroy(ffff80003c433d60) at if_clone_destroy+0x1d5 sys/net/if.c:1415
ifioctl(f
fff800001715bb8,80206979,ffff80003c433d60,ffff8000367f22b8) at ifioctl+0x59d sys/net/if.c:2092
sys_ioctl(ffff8000367f22b8,ffff80003c433f40,ffff80003c433e90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c433f40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c433f40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71429937ad30, count: 249
End of stack trace.
syncing disks...set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace

Crashes (46):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/15 04:27 openbsd eeb3fa463a89 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/11 17:27 openbsd 260368132975 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/09 00:18 openbsd e09c25ede1d8 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/08 13:57 openbsd e09c25ede1d8 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/08 10:04 openbsd 1c9950446e51 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/02 17:32 openbsd 8a795cbbdb34 96a211bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/28 13:17 openbsd 0f23fd2bd678 bee60a83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/27 23:55 openbsd 95647c95e867 e12e5ba4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/21 16:02 openbsd 418e3d9a7b00 3e79b825 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/19 14:45 openbsd 5f352b01c2c4 254a27c1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/09 11:39 openbsd 86b9fcdd2575 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/09 06:29 openbsd 86b9fcdd2575 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/06 09:33 openbsd f0bae7c1d04d 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/08/02 05:34 openbsd 4c5c4401a4d8 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/07/30 02:25 openbsd b403f214b97b 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/07/24 07:57 openbsd 484d3a4d3e0d 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/07/23 17:32 openbsd ceb7068b172a 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/07/16 08:23 openbsd 86f69b9e7bb3 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/07/16 07:47 openbsd 86f69b9e7bb3 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/06/25 18:17 openbsd 31f40ba00147 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/06/22 04:55 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/06/08 10:43 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/22 22:33 openbsd ba45935f401b 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/19 13:07 openbsd 2fc058fc36e6 27f68995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/16 13:32 openbsd 84d74105a289 cfde8269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/12 06:10 openbsd 1d7d4b26237d 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/05/09 14:18 openbsd 0dc0a232ede0 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/24 01:48 openbsd 9244c012979b 9882047a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/21 22:10 openbsd e8eeea37c7e6 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/17 03:22 openbsd 96fb1b485f5f a95239b1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/17 00:11 openbsd 4c8bb6464990 a95239b1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/14 14:27 openbsd c5a62f9c39e8 0bd6db41 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/12 11:09 openbsd ade9dbe6546b 0bd6db41 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/09 02:19 openbsd d4602f96699d b133e63a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/04/06 15:04 openbsd c16771e8b440 1c65791e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/31 21:41 openbsd 6cbbb384a28a e2826670 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/15 22:31 openbsd d50894551f06 e2826670 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/09 04:29 openbsd 147d2ad00d69 163f510d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/08 16:41 openbsd aa707e2a580f 7e3bd60d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/03/05 13:26 openbsd 4053394b61c7 60f5d8d9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/24 02:17 openbsd a5c838d89587 d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/20 21:27 openbsd e17cfef6a95f 0808a665 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/14 07:55 openbsd 88a67239acef d9a046cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/13 04:48 openbsd eb8501b6f1f9 2afad16e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/10 06:38 openbsd 275cd30cffcd ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
* Struck through repros no longer work on HEAD.