syzbot


assert "sc->sc_dev == NUM" failed in if_tun.c (6)

Status: upstream: reported on 2025/02/10 06:39
Reported-by: syzbot+171f3fbee35ba6030ee9@syzkaller.appspotmail.com
First crash: 409d, last: 2d15h
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c -1 24 1500d 1533d 3/3 fixed on 2022/02/16 17:50
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (2) -1 1 1496d 1496d 3/3 fixed on 2022/02/26 07:36
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (5) -1 358 492d 763d 0/3 auto-obsoleted due to no activity on 2025/01/08 15:50
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (3) -1 68 999d 1488d 0/3 auto-obsoleted due to no activity on 2023/09/29 16:10
openbsd assert "sc->sc_dev == NUM" failed in if_tun.c (4) -1 1 899d 899d 0/3 auto-obsoleted due to no activity on 2024/01/09 18:17

Sample crash report:
panic: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/net/if_tun.c", line 323
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*311976  27613      0         0x2          0    1K ifconfig
 498745  65484      0      0x1000  0x4080000    0  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834492d9) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8348a601,ffffffff834d3481,143,ffffffff833c961c) at __assert+0x29 sys/kern/subr_prf.c:-1
tun_clone_destroy(ffff8000015f5000) at tun_clone_destroy+0x38a
if_clone_destroy(ffff80002a2d24e0) at if_clone_destroy+0x205 sys/net/if.c:1479
ifioctl(ffff800001640440,80206979,ffff80002a2d24e0,ffff80003a7f67f0) at ifioctl+0x59d sys/net/if.c:2160
sys_ioctl(ffff80003a7f67f0,ffff80002a2d26c0,ffff80002a2d2610) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80002a2d26c0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2d26c0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7d497a3d3d30, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (115):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/24 12:24 openbsd 7348976a6ac6 74e70d19 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/03/23 03:11 openbsd 33c7e43e4e2f 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/03/21 05:52 openbsd a71bcab410b6 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/03/17 14:07 openbsd 7b59c65f5490 0737c18f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/02/01 20:57 openbsd 455fdbe5e703 6b8752f2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/01/30 08:29 openbsd b822cddf2b35 bfa73b7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/01/24 10:40 openbsd 652212f689da 40acda8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2026/01/15 05:08 openbsd ac9e191703f1 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2026/01/10 20:57 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/12/28 09:21 openbsd d9ef728109ec 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "sc->sc_dev == NUM" failed in if_tun.c
2025/11/15 20:50 openbsd 42d4ce758e42 f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/11/15 07:01 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/11/15 05:56 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/11/15 03:40 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/13 22:48 openbsd 13656af3a292 b6605ba8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/13 21:46 openbsd 13656af3a292 b6605ba8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/12 18:37 openbsd d388a6109664 ff1712fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/11 07:28 openbsd 4cb29f8dafd8 ff1712fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/11 06:10 openbsd 4cb29f8dafd8 ff1712fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/11 03:18 openbsd 4cb29f8dafd8 ff1712fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/10 07:34 openbsd f02b280c025a ff1712fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/10 01:07 openbsd f02b280c025a ff1712fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/09 09:32 openbsd 42468faed836 7e2882b3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/09 02:01 openbsd 42468faed836 7e2882b3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 21:51 openbsd f4db8a7c3d37 8ef35d49 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 20:21 openbsd 005f30971033 91305dbe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 19:01 openbsd 005f30971033 91305dbe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 15:56 openbsd 005f30971033 91305dbe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 11:50 openbsd 005f30971033 91305dbe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 10:32 openbsd 005f30971033 91305dbe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/06 09:13 openbsd 005f30971033 91305dbe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/05 17:40 openbsd f5a48fab3694 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/05 16:07 openbsd f5a48fab3694 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/04 21:11 openbsd cda73d07f20e 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/04 17:26 openbsd cda73d07f20e 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/04 14:50 openbsd cda73d07f20e 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/04 05:04 openbsd 467d022937bc 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/04 01:26 openbsd 467d022937bc 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/03 16:10 openbsd c4a497a8c849 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/10/03 14:16 openbsd c4a497a8c849 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/29 23:30 openbsd 33176f4338fa 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/29 21:25 openbsd 33176f4338fa 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/29 14:43 openbsd 33176f4338fa 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/29 13:08 openbsd 33176f4338fa 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/29 11:31 openbsd 33176f4338fa 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/28 21:35 openbsd 60d0eea3175a 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/09/28 17:38 openbsd 60d0eea3175a 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
2025/02/10 06:38 openbsd 275cd30cffcd ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "sc->sc_dev == NUM" failed in if_tun.c
* Struck through repros no longer work on HEAD.