panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 163401 87608 0 0 0 0 syz-executor *366507 87608 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346421f) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83413467,ffffffff83415830,3b7,ffffffff834158b3) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c44a950,ffffffff8335ae4b) at refcnt_finalize+0x1db sys/kern/kern_synch.c:952 pppx_if_destroy(ffff80002cbd1000,ffff80003c44a948) at pppx_if_destroy+0x3d sys/net/if_pppx.c:806 pppxclose(205b9a,1,2000,ffff8000fffe34a8) at pppxclose+0xa0 sys/net/if_pppx.c:553 spec_close(ffff80002a3beb20) at spec_close+0x412 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806b0bd130,1,fffffd80097fb8f0,ffff8000fffe34a8) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805c919530,ffff8000fffe34a8) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd805c919530,ffff8000fffe34a8) at closef+0x192 sys/kern/kern_descrip.c:1251 syscall(ffff80002a3bed80) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3bed80) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbccf1e557a0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346421f) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83413467,ffffffff83415830,3b7,ffffffff834158b3) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c44a950,ffffffff8335ae4b) at refcnt_finalize+0x1db sys/kern/kern_synch.c:952 pppx_if_destroy(ffff80002cbd1000,ffff80003c44a948) at pppx_if_destroy+0x3d sys/net/if_pppx.c:806 pppxclose(205b9a,1,2000,ffff8000fffe34a8) at pppxclose+0xa0 sys/net/if_pppx.c:553 spec_close(ffff80002a3beb20) at spec_close+0x412 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806b0bd130,1,fffffd80097fb8f0,ffff8000fffe34a8) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805c919530,ffff8000fffe34a8) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd805c919530,ffff8000fffe34a8) at closef+0x192 sys/kern/kern_descrip.c:1251 syscall(ffff80002a3bed80) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3bed80) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbccf1e557a0, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a3be8f0 rbx 0xffff8000299dedd7 rdx 0xffff8000014530c0 rcx 0xffff8000fffe34a8 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x7e2c4e737f7ba0ac r11 0x5b07c331405760f7 r12 0xffff8000299debd8 r13 0 r14 0 r15 0x1 rip 0xffffffff81c778d5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a3be8e0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=366507 pid=87608 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a38d220,0xffff8000fffe39d8 process=0xffff8000fffdf578 user=0xffff80002a3b9000, vmspace=0xfffffd806ef2e5a8 estcpu=34, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 81860 426492 43347 0 2 0 syz-executor 81860 392863 43347 0 2 0x4000000 syz-executor 90495 12024 51312 0 2 0 syz-executor 50707 87671 8279 -1 3 0x10 vmmaplk syz-executor 50707 175958 8279 -1 2 0x4000010 syz-executor 50707 470914 8279 -1 3 0x4000090 fsleep syz-executor 87608 163401 157 0 7 0 syz-executor 87608 81714 157 0 3 0x4000000 smrbar syz-executor *87608 366507 157 0 7 0x4000000 syz-executor 23534 174026 39605 0 3 0x80 nanoslp syz-executor 23534 379419 39605 0 3 0x4000080 kqsel syz-executor 23534 299842 39605 0 3 0x4000080 fsleep syz-executor 80724 152717 94865 0 3 0x80 nanoslp syz-executor 80724 355276 94865 0 3 0x4000080 netcon syz-executor 80724 134461 94865 0 3 0x4000080 fsleep syz-executor 80724 241665 94865 0 3 0x4000080 fsleep syz-executor 59251 499710 1 0 3 0x100083 ttyin getty 8279 110384 44400 0 2 0x3 syz-executor 51312 106272 44400 0 2 0x3 syz-executor 6388 286128 0 0 3 0x14280 nfsidl nfsio 6993 208623 0 0 3 0x14280 nfsidl nfsio 79326 215904 0 0 3 0x14280 nfsidl nfsio 72718 207284 0 0 3 0x14280 nfsidl nfsio 63155 128165 0 0 3 0x14280 nfsidl nfsio 71619 237174 0 0 3 0x14280 nfsidl nfsio 59279 518628 0 0 3 0x14280 nfsidl nfsio 73507 246512 0 0 3 0x14280 nfsidl nfsio 30498 351752 0 0 3 0x14280 nfsidl nfsio 16831 264908 0 0 3 0x14280 nfsidl nfsio 48923 267115 0 0 3 0x14280 nfsidl nfsio 23677 74606 0 0 3 0x14280 nfsidl nfsio 70597 156809 0 0 3 0x14280 nfsidl nfsio 14785 495478 0 0 3 0x14280 nfsidl nfsio 52084 191279 0 0 3 0x14280 nfsidl nfsio 59571 457630 0 0 3 0x14280 nfsidl nfsio 23000 43428 0 0 3 0x14280 nfsidl nfsio 13780 308531 0 0 3 0x14280 nfsidl nfsio 42313 353091 0 0 3 0x14280 nfsidl nfsio 37048 394491 0 0 3 0x14280 nfsidl nfsio 39605 464833 44400 0 3 0x82 nanoslp syz-executor 94023 228723 44400 0 2 0x3 syz-executor 94865 335438 44400 0 2 0x3 syz-executor 76260 96400 0 0 3 0x14200 bored sosplice 47742 408622 44400 0 2 0x2 syz-executor 157 184026 44400 0 3 0x82 nanoslp syz-executor 43347 361656 44400 0 3 0x82 nanoslp syz-executor 44400 300453 13644 0 3 0x82 kqread syz-executor 13644 181572 51672 0 3 0x10008a sigsusp ksh 51672 501529 29616 0 3 0x98 kqread sshd-session 29616 223371 81624 0 3 0x92 kqread sshd-session 81624 24561 1 0 3 0x88 kqread sshd 67710 37517 7042 74 3 0x1100092 bpf pflogd 7042 367410 1 0 3 0x80 sbwait pflogd 2721 164471 32728 73 3 0x1100090 kqread syslogd 32728 487215 1 0 3 0x100082 sbwait syslogd 16577 214119 1 0 3 0x100080 kqread resolvd 91197 344544 28243 77 3 0x100092 kqread dhcpleased 24786 53479 28243 77 3 0x100092 kqread dhcpleased 28243 93051 1 0 3 0x80 kqread dhcpleased 52769 134874 0 0 3 0x14200 bored smr 89371 270189 0 0 2 0x14200 zerothread 94851 253308 0 0 3 0x14200 aiodoned aiodoned 32856 474175 0 0 3 0x14200 syncer update 51141 437947 0 0 3 0x14200 cleaner cleaner 87196 388559 0 0 3 0x14200 reaper reaper 46662 276102 0 0 3 0x14200 pgdaemon pagedaemon 62440 66257 0 0 3 0x14200 bored viomb 57946 440067 0 0 3 0x40014200 acpi0 acpi0 70542 197642 0 0 3 0x40014200 idle1 26830 519974 0 0 3 0x14200 bored softnet3 42407 465824 0 0 3 0x14200 bored softnet2 46188 344147 0 0 3 0x14200 bored softnet1 93298 150817 0 0 3 0x14200 bored softnet0 34007 267024 0 0 3 0x14200 bored systqmp 11059 336690 0 0 3 0x14200 bored systq 87111 420264 0 0 3 0x14200 tmoslp softclockmp 49234 322532 0 0 3 0x40014200 tmoslp softclock 841 47659 0 0 3 0x40014200 idle0 1 121979 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 81860 (syz-executor) thread 0xffff8000ffff0540 (392863) Process 90495 (syz-executor) thread 0xffff8000fffe2548 (12024) Process 50707 (syz-executor) thread 0xffff80002a38dc60 (175958) Process 87608 (syz-executor) thread 0xffff8000fffe34a8 (366507) Process 47742 (syz-executor) thread 0xffff8000ffffdc38 (408622) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10237 11193K 11691K 166960K 17832 0 pcb 17 18K 20K 166960K 895 0 rtable 171 11K 11K 166960K 1094 0 pf 46 19K 83K 166960K 317 0 ifaddr 36 6K 8K 166960K 217 0 ifgroup 73 3K 3K 166960K 398 0 sysctl 4 1K 9K 166960K 27 0 counters 76 37K 38K 166960K 416 0 ioctlops 0 0K 4K 166960K 2082 0 iov 0 0K 20K 166960K 321 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1485 93K 94K 166960K 5085 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 54 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 257 0 dirhash 12 2K 3K 166960K 120 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 236K 166960K 3802 0 sigio 0 0K 0K 166960K 81 0 proc 72 91K 116K 166960K 1125 0 subproc 72 4K 4K 166960K 126 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 476 0 in_multi 44 3K 7K 166960K 296 0 ether_multi 1 0K 0K 166960K 30 0 mrt 0 0K 0K 166960K 21 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 971 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 10 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 160K 181K 166960K 36240 0 UVM aobj 131 4K 5K 166960K 137 0 pinsyscall 42 84K 106K 166960K 5090 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 239 0 NDP 15 0K 2K 166960K 154 0 temp 80 8696K 8824K 166960K 182268 0 kqueue 15 24K 43K 166960K 672 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 401 0 398 5 2 3 3 0 8 2 rtentry 176 342 0 279 6 2 4 6 0 8 0 unpcb 144 2753 0 2736 21 19 2 6 0 8 1 syncache 336 14 0 14 7 6 1 1 0 8 1 tcpqe 32 11 0 11 4 4 0 1 0 8 0 tcpcb 808 1543 0 1535 32 24 8 8 0 8 6 arp 128 38 0 27 1 0 1 1 0 8 0 inpcb 384 4871 0 4858 73 64 9 18 0 8 6 nd6 144 67 0 51 2 1 1 2 0 8 0 pkpcb 40 70 0 70 6 5 1 1 0 8 1 kcovpl 48 14 0 6 1 0 1 1 0 8 0 mppekey 1024 4 0 4 4 4 0 1 0 8 0 ppxss 1192 129 0 128 4 3 1 1 0 8 0 pppxif 1504 22 0 21 6 5 1 1 0 8 0 pffrag 232 19 0 12 1 0 1 1 0 482 0 pffrnode 88 17 0 10 1 0 1 1 0 8 0 pffrent 40 80 0 72 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 272 0 128 1 0 1 1 0 8 0 pfstkey 128 272 0 128 5 0 5 5 0 8 0 pfstate 384 272 0 128 15 0 15 15 0 8 0 pfrule 1344 28 0 21 2 1 1 2 0 8 0 rttmr 136 3 0 3 3 3 0 1 0 8 0 art_heap8 4096 41 0 36 7 2 5 6 0 8 0 art_heap4 256 1514 0 1180 38 14 24 32 0 8 0 art_table 32 1555 0 1216 5 0 5 5 0 8 0 art_node 16 323 0 270 1 0 1 1 0 8 0 sysvmsgpl 40 21 0 10 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 248 0 238 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 90 0 73 3 0 3 3 0 8 0 dino2pl 256 8572 0 7045 97 1 96 96 0 8 0 ffsino 288 8572 0 7045 110 0 110 110 0 8 0 nchpl 144 13837 0 12129 64 0 64 64 0 8 0 rtmask 32 14 0 14 5 5 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 52189 0 52188 2 1 1 1 0 8 0 percpumem 16 223 0 170 1 0 1 1 0 8 0 kstatmem 264 254 0 218 4 1 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 14 0 14 8 7 1 1 0 8 1 scxspl 216 43764 0 43764 18 17 1 8 1 8 1 plimitpl 152 761 0 743 1 0 1 1 0 8 0 sigapl 424 4136 0 4066 11 2 9 9 0 8 0 knotepl 120 753 0 0 23 0 23 23 0 8 0 kqueuepl 224 1450 0 1437 19 14 5 5 0 8 4 pipepl 336 667 0 640 14 9 5 9 0 8 0 fdescpl 520 4071 0 4040 3 0 3 3 0 8 0 filepl 160 30791 0 30573 45 28 17 19 0 8 4 lockfpl 104 1602 0 1598 4 3 1 2 0 8 0 lockfspl 48 515 0 511 1 0 1 1 0 8 0 sessionpl 144 42 0 33 1 0 1 1 0 8 0 pgrppl 48 103 0 86 1 0 1 1 0 8 0 ucredpl 104 5730 0 5714 1 0 1 1 0 8 0 zombiepl 144 4265 0 4265 1 0 1 1 0 8 1 processpl 1240 4136 0 4066 7 1 6 6 0 8 0 procpl 656 10295 0 10215 8 0 8 8 0 8 0 srpgc 96 22 0 22 5 5 0 1 0 8 0 sosppl 168 26 0 26 5 4 1 1 0 8 1 sockpl 728 8214 0 8181 85 72 13 19 0 8 8 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 151 0 0 19 2 17 19 0 8 0 mtagpl 96 151 0 0 4 0 4 4 0 8 0 mbufpl 256 3551 0 0 220 0 220 220 0 8 0 bufpl 280 11469 0 5326 440 0 440 440 0 8 0 anonpl 32 13680 0 0 110 0 110 110 0 246 0 amapchunkpl 152 124670 0 124117 59 25 34 34 0 158 5 amappl16 200 10142 0 10054 105 90 15 28 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 225 0 213 1 0 1 1 0 8 0 amappl13 176 3 0 3 1 1 0 1 0 8 0 amappl12 168 4818 0 4788 3 1 2 3 0 8 0 amappl11 160 51 0 37 1 0 1 1 0 8 0 amappl10 152 10 0 10 1 1 0 1 0 8 0 amappl9 144 240 0 240 1 1 0 1 0 8 0 amappl8 136 32 0 29 1 0 1 1 0 8 0 amappl7 128 134 0 121 1 0 1 1 0 8 0 amappl6 120 252 0 249 1 0 1 1 0 8 0 amappl5 112 153 0 143 1 0 1 1 0 8 0 amappl4 104 384 0 362 1 0 1 1 0 8 0 amappl3 96 25868 0 25761 4 0 4 4 0 8 0 amappl2 88 811 0 747 2 0 2 2 0 8 0 amappl1 80 26446 0 25835 16 1 15 15 0 8 0 amappl 88 34706 0 34539 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 256 0 256 3 3 0 1 0 8 0 dma64 64 10 0 10 4 3 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 22 0 21 1 0 1 1 0 8 0 aobjpl 72 136 0 6 3 0 3 3 0 8 0 uaddrrnd 24 4071 0 4040 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4071 0 4040 1 0 1 1 0 8 0 vmmpekpl 168 31958 0 31893 4 0 4 4 0 8 0 vmmpepl 168 255873 0 253813 155 42 113 113 0 357 15 vmsppl 480 4070 0 4040 5 0 5 5 0 8 0 rwobjpl 72 67204 0 60143 147 10 137 137 0 8 4 pdppl 4096 8150 0 8080 146 74 72 86 0 8 2 pvpl 32 22014 0 0 176 0 176 176 0 265 0 pmappl 256 4070 0 4040 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 730 0 146 17 0 17 17 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837e5ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a08e00) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:129 [inline] __mp_lock(ffffffff83a08e00) at __mp_lock+0x192 sys/kern/kern_lock.c:160 softintr_dispatch(0) at softintr_dispatch+0x12a sys/kern/kern_softintr.c:83 dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:840 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7104e23350e0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff837e5ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a08e00) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:129 [inline] __mp_lock(ffffffff83a08e00) at __mp_lock+0x192 sys/kern/kern_lock.c:160 softintr_dispatch(0) at softintr_dispatch+0x12a sys/kern/kern_softintr.c:83 dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:840 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7104e23350e0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346421f) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83413467,ffffffff83415830,3b7,ffffffff834158b3) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c44a950,ffffffff8335ae4b) at refcnt_finalize+0x1db sys/kern/kern_synch.c:952 pppx_if_destroy(ffff80002cbd1000,ffff80003c44a948) at pppx_if_destroy+0x3d sys/net/if_pppx.c:806 pppxclose(205b9a,1,2000,ffff8000fffe34a8) at pppxclose+0xa0 sys/net/if_pppx.c:553 spec_close(ffff80002a3beb20) at spec_close+0x412 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806b0bd130,1,fffffd80097fb8f0,ffff8000fffe34a8) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805c919530,ffff8000fffe34a8) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd805c919530,ffff8000fffe34a8) at closef+0x192 sys/kern/kern_descrip.c:1251 syscall(ffff80002a3bed80) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3bed80) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbccf1e557a0, count: 2 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8346421f) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83413467,ffffffff83415830,3b7,ffffffff834158b3) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c44a950,ffffffff8335ae4b) at refcnt_finalize+0x1db sys/kern/kern_synch.c:952 pppx_if_destroy(ffff80002cbd1000,ffff80003c44a948) at pppx_if_destroy+0x3d sys/net/if_pppx.c:806 pppxclose(205b9a,1,2000,ffff8000fffe34a8) at pppxclose+0xa0 sys/net/if_pppx.c:553 spec_close(ffff80002a3beb20) at spec_close+0x412 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806b0bd130,1,fffffd80097fb8f0,ffff8000fffe34a8) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805c919530,ffff8000fffe34a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805c919530,ffff8000fffe34a8) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd805c919530,ffff8000fffe34a8) at closef+0x192 sys/kern/kern_descrip.c:1251 syscall(ffff80002a3bed80) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3bed80) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbccf1e557a0, count: -13