panic: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/net/if_tun.c", line 315 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 141891 44869 32767 0x10 0 1 syz-executor *349289 86504 0 0x2 0 0K ifconfig db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830e661a) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8309a8f6,ffffffff830e8249,13b,ffffffff8307efe7) at __assert+0x29 tun_clone_destroy(ffff8000012ab800) at tun_clone_destroy+0x38a sys/net/if_tun.c:315 if_clone_destroy(ffff8000332c1660) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000013e5258,80206979,ffff8000332c1660,ffff8000371c2538) at ifioctl+0x5c5 sys_ioctl(ffff8000371c2538,ffff8000332c1840,ffff8000332c1790) at sys_ioctl+0x67c syscall(ffff8000332c1840) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff8000332c1840) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7eae33c593f0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/net/if_tun.c", line 315 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830e661a) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8309a8f6,ffffffff830e8249,13b,ffffffff8307efe7) at __assert+0x29 tun_clone_destroy(ffff8000012ab800) at tun_clone_destroy+0x38a sys/net/if_tun.c:315 if_clone_destroy(ffff8000332c1660) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000013e5258,80206979,ffff8000332c1660,ffff8000371c2538) at ifioctl+0x5c5 sys_ioctl(ffff8000371c2538,ffff8000332c1840,ffff8000332c1790) at sys_ioctl+0x67c syscall(ffff8000332c1840) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff8000332c1840) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7eae33c593f0, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000332c1410 rbx 0xffffffff834eedcf cpu_info_full_primary+0x2dcf rdx 0 rcx 0xffff8000371c2538 rax 0xffffffff834edff0 cpu_info_full_primary+0x1ff0 r8 0 r9 0x8080808080808080 r10 0x2c68fad2ca719ec7 r11 0x589950131dde0a4a r12 0xffffffff834eebd0 cpu_info_full_primary+0x2bd0 r13 0 r14 0 r15 0x1 rip 0xffffffff81482bf5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000332c1400 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (ifconfig) tid=349289 pid=86504 tcnt=1 stat=onproc flags process=2 proc=0 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000371c3c00,0xffff8000371c2ce0 process=0xffff8000371c68e8 user=0xffff8000332bc000, vmspace=0xfffffd8074f1a1c8 estcpu=0, cpticks=1, pctcpu=0.41, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 44869 141891 2824 32767 7 0x10 syz-executor *86504 349289 81142 0 7 0x2 ifconfig 81142 416187 77427 0 3 0x10008a sigsusp sh 77427 126940 87696 0 3 0x80 wait syz-executor 30850 179036 19090 32767 2 0x10 syz-executor 30850 86703 19090 32767 3 0x4000090 ttyin syz-executor 59221 261429 26516 32767 2 0x10 syz-executor 59221 101746 26516 32767 3 0x4000090 fsleep syz-executor 22705 318082 7013 32767 2 0x10 syz-executor 22705 130507 7013 32767 3 0x4000090 fsleep syz-executor 77965 14723 9229 0 2 0x40 syz-executor 87696 113857 31821 0 3 0x82 wait syz-executor 9229 208930 58277 0 3 0x80 ppwait syz-executor 47884 105793 79810 32767 2 0x10 syz-executor 26516 137557 37080 32767 2 0x490 syz-executor 58277 434801 31821 0 3 0x82 wait syz-executor 79810 286201 31821 0 3 0x82 wait syz-executor 19090 76819 16877 32767 2 0x490 syz-executor 7013 492858 92120 32767 2 0x490 syz-executor 37080 257300 31821 0 3 0x82 wait syz-executor 16877 225751 31821 0 3 0x82 wait syz-executor 92120 509975 31821 0 3 0x82 wait syz-executor 2824 220811 28114 32767 3 0x90 nanoslp syz-executor 28114 230900 31821 0 3 0x82 wait syz-executor 92662 506989 31287 32767 2 0x10 syz-executor 31287 306129 31821 0 3 0x82 wait syz-executor 74480 39255 2879 32767 4 0x82010 syz-executor 74480 271151 2879 32767 2 0x4082010 syz-executor 74480 71626 2879 32767 3 0x4002010 suspend syz-executor 2879 461863 1 32767 3 0x90 wait syz-executor 7289 370563 18390 0 3 0x100082 sbwait arp 18390 490635 77757 0 3 0x10008a sigsusp sh 77757 346716 1 0 3 0x80 wait syz-executor 36000 192583 75610 0 3 0x100082 sbwait arp 75610 203517 56721 0 3 0x10008a sigsusp sh 56721 432154 1 0 3 0x80 wait syz-executor 9846 247278 2961 0 3 0x100082 sbwait ndp 2961 210200 83189 0 3 0x10008a sigsusp sh 83189 462394 1 0 3 0x80 wait syz-executor 14108 188002 5043 0 3 0x100082 sbwait arp 35617 291177 65539 0 2 0x100082 arp 65539 486667 66543 0 3 0x10008a sigsusp sh 5043 105528 95577 0 3 0x10008a sigsusp sh 95577 350864 1 0 3 0x80 wait syz-executor 66543 86966 1 0 3 0x80 wait syz-executor 62274 177612 0 0 3 0x14200 bored sosplice 31821 67203 425 0 3 0x82 kqread syz-executor 425 191433 20870 0 3 0x10008a sigsusp ksh 20870 360078 6382 0 3 0x98 kqread sshd-session 6382 210776 61182 0 3 0x92 kqread sshd-session 19928 497762 1 0 3 0x100083 ttyin getty 61182 134619 1 0 3 0x88 kqread sshd 72055 443994 32859 73 3 0x1100090 kqread syslogd 32859 155311 1 0 3 0x100082 sbwait syslogd 53015 215633 1 0 3 0x100080 kqread resolvd 16803 478300 27292 77 2 0x100092 dhcpleased 49391 484663 27292 77 3 0x100092 kqread dhcpleased 27292 485519 1 0 3 0x80 kqread dhcpleased 22937 2522 0 0 3 0x14200 bored smr 36269 88418 0 0 2 0x14200 zerothread 14260 383036 0 0 3 0x14200 aiodoned aiodoned 54584 301352 0 0 3 0x14200 syncer update 3655 480004 0 0 3 0x14200 cleaner cleaner 63347 461850 0 0 3 0x14200 reaper reaper 68674 432227 0 0 3 0x14200 pgdaemon pagedaemon 33876 438683 0 0 3 0x14200 bored viomb 28828 378527 0 0 3 0x40014200 acpi0 acpi0 24856 225180 0 0 3 0x40014200 idle1 29327 282438 0 0 3 0x14200 bored softnet3 78878 438808 0 0 3 0x14200 bored softnet2 75678 120570 0 0 3 0x14200 bored softnet1 92788 41214 0 0 3 0x14200 bored softnet0 66645 284927 0 0 3 0x14200 bored systqmp 23586 191815 0 0 3 0x14200 bored systq 58870 419340 0 0 3 0x14200 tmoslp softclockmp 59550 104544 0 0 3 0x40014200 tmoslp softclock 25456 235905 0 0 3 0x40014200 idle0 1 488213 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 86504 (ifconfig) thread 0xffff8000371c2538 (349289) exclusive rwlock clonelk r = 0 (0xffffffff83435e40) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 if_clone_destroy+0x67 #2 ifioctl+0x5c5 #3 sys_ioctl+0x67c #4 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #4 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #5 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8361ffd0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 ifioctl+0x5b4 sys/net/if.c:2061 #2 sys_ioctl+0x67c #3 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #3 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #4 Xsyscall+0x128 Process 47884 (syz-executor) thread 0xffff8000371c31e0 (105793) exclusive rrwlock inode r = 0 (0xfffffd80481372c8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:169 #5 ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230 #6 ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0x113 sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x102 sys/kern/vfs_vops.c:394 #9 domkdirat+0x179 sys/kern/vfs_syscalls.c:3099 #10 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #10 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd805b4dfa30) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0x109 sys/kern/vfs_lookup.c:418 #6 namei+0x7aa sys/kern/vfs_lookup.c:250 #7 domkdirat+0x8b sys/kern/vfs_syscalls.c:3084 #8 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #8 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 Process 92662 (syz-executor) thread 0xffff8000331d9490 (506989) exclusive rrwlock inode r = 0 (0xfffffd805feed4e8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vget+0x2bd sys/kern/vfs_subr.c:676 #6 ufs_ihashget+0x192 sys/ufs/ufs/ufs_ihash.c:98 #7 ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1201 #8 ufs_lookup+0x19f8 sys/ufs/ufs/ufs_lookup.c:478 #9 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566 #11 namei+0x7aa sys/kern/vfs_lookup.c:250 #12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1852 #13 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #13 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8051f51920) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0x109 sys/kern/vfs_lookup.c:418 #6 namei+0x7aa sys/kern/vfs_lookup.c:250 #7 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1852 #8 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #8 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10219 11050K 11059K 166960K 12763 0 pcb 17 20K 22K 166960K 25 0 rtable 194 5K 7K 166960K 16414 0 pf 29 16K 16K 166960K 1015 0 ifaddr 35 9K 12K 166960K 1991 0 ifgroup 46 2K 2K 166960K 2008 0 sysctl 4 1K 5K 166960K 82 0 counters 62 36K 36K 166960K 1038 0 ioctlops 0 0K 2K 166960K 878 0 iov 0 0K 34K 166960K 1908 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1546 97K 97K 166960K 13950 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 13K 166960K 346 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 732 0 dirhash 24 4K 5K 166960K 468 0 ACPI 1690 195K 286K 166960K 12418 0 file desc 42 161K 241K 166960K 23944 0 sigio 0 0K 0K 166960K 863 0 proc 65 91K 176K 166960K 15862 0 subproc 182 11K 17K 166960K 9737 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 5063 0 in_multi 77 5K 8K 166960K 6135 0 ether_multi 1 0K 0K 166960K 110 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 271 1208K 1208K 166960K 271 0 exec 0 0K 1K 166960K 10513 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 334 126K 191K 166960K 193612 0 UVM aobj 131 5K 7K 166960K 151 0 pinsyscall 68 136K 182K 166960K 38315 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 1K 166960K 1347 0 NDP 10 0K 2K 166960K 1478 0 temp 99 6825K 6953K 166960K 181564 0 kqueue 13 20K 36K 166960K 3431 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 3449 0 3441 26 25 1 3 0 8 0 rtentry 112 5674 0 5584 13 9 4 4 0 8 0 unpcb 144 20695 0 20677 126 125 1 10 0 8 0 syncache 336 380 0 380 51 51 0 1 0 8 0 tcpqe 32 176 0 176 46 46 0 1 0 8 0 tcpcb 808 13941 0 13917 186 178 8 20 0 8 0 arp 120 1001 0 987 1 0 1 1 0 8 0 ipq 40 119 0 119 11 11 0 1 0 8 0 ipqe 40 3137 0 3137 11 11 0 1 0 8 0 inpcb 336 31460 0 31430 219 210 9 20 0 8 0 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 2 0 2 1 1 0 1 0 8 0 nd6 136 1702 0 1683 6 5 1 2 0 8 0 kcovpl 48 749 0 735 1 0 1 1 0 8 0 rttmr 136 2 0 1 2 1 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 23096 0 22704 178 153 25 32 0 8 0 art_table 32 23097 0 22704 8 4 4 5 0 8 0 art_node 16 5673 0 5591 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 17 2 1 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 722 0 712 1 0 1 1 0 8 0 shmpl 112 148 0 20 4 0 4 4 0 8 0 dirhash 1024 336 0 303 18 13 5 5 0 8 0 dino2pl 256 27526 0 24297 202 0 202 202 0 8 0 ffsino 272 27526 0 24297 216 0 216 216 0 8 0 nchpl 144 49905 0 46873 114 1 113 113 0 8 0 uvmvnodes 80 10168 0 0 208 0 208 208 0 8 0 vnodes 216 10168 0 0 565 0 565 565 0 8 0 namei 1024 234313 0 234312 54 53 1 2 0 8 0 percpumem 16 533 0 488 1 0 1 1 0 8 0 kstatmem 264 996 0 976 2 0 2 2 0 8 0 scxspl 216 286394 0 286394 76 75 1 8 1 8 1 plimitpl 152 6717 0 6685 2 0 2 2 0 8 0 sigapl 424 22889 0 22816 15 4 11 11 0 8 0 futexpl 64 240287 0 240285 35 34 1 1 0 8 0 knotepl 120 1520 0 0 20 0 20 20 0 8 0 kqueuepl 216 7672 0 7663 72 71 1 8 0 8 0 pipepl 320 5432 0 5387 37 30 7 10 0 8 0 fdescpl 496 22870 0 22816 22 12 10 10 0 8 0 filepl 152 157108 0 156751 125 106 19 24 0 8 0 lockfpl 104 5664 0 5662 2 1 1 2 0 8 0 lockfspl 48 1639 0 1637 1 0 1 1 0 8 0 sessionpl 144 662 0 640 3 1 2 2 0 8 0 pgrppl 48 2007 0 1977 1 0 1 1 0 8 0 ucredpl 104 28338 0 28320 1 0 1 1 0 8 0 zombiepl 144 22816 0 22816 1 0 1 1 0 8 1 processpl 1160 22889 0 22816 17 10 7 7 0 8 0 procpl 648 50146 0 50068 12 3 9 9 0 8 0 srpgc 96 35 0 35 11 10 1 1 0 8 1 sosppl 168 226 0 224 25 24 1 1 0 8 0 sockpl 664 56101 0 56039 339 327 12 28 0 8 0 mcl64k 65536 34 0 0 4 0 4 4 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 13 0 0 2 0 2 2 0 8 0 mcl4k 4096 268 0 0 19 4 15 19 0 8 0 mcl2k2 2112 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 492 0 0 13 8 5 10 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 7433 0 0 421 0 421 421 0 8 0 bufpl 280 39138 0 28969 727 0 727 727 0 8 0 anonpl 24 2933704 0 2920138 314 201 113 131 0 185 0 amapchunkpl 152 629944 0 629076 269 227 42 57 0 158 2 amappl16 200 65184 0 64816 155 123 32 44 0 8 0 amappl15 192 18 0 18 8 8 0 1 0 8 0 amappl14 184 1465 0 1450 2 1 1 2 0 8 0 amappl13 176 24 0 23 9 8 1 1 0 8 0 amappl12 168 31556 0 31500 4 0 4 4 0 8 0 amappl11 160 45 0 34 1 0 1 1 0 8 0 amappl10 152 15 0 14 3 2 1 1 0 8 0 amappl9 144 138 0 137 2 1 1 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 1281 0 1265 1 0 1 1 0 8 0 amappl6 120 5016 0 5007 1 0 1 1 0 8 0 amappl5 112 2246 0 2235 1 0 1 1 0 8 0 amappl4 104 2347 0 2324 1 0 1 1 0 8 0 amappl3 96 126325 0 126173 6 0 6 6 0 8 0 amappl2 88 9278 0 9197 4 1 3 3 0 8 0 amappl1 80 145694 0 144985 22 2 20 21 0 8 0 amappl 88 187507 0 187250 8 0 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 150 0 20 3 0 3 3 0 8 0 uaddrrnd 24 22870 0 22816 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 22870 0 22816 1 0 1 1 0 8 0 vmmpekpl 168 213319 0 213244 5 0 5 5 0 8 0 vmmpepl 168 1563548 0 1560617 553 373 180 181 0 357 19 vmsppl 440 22869 0 22816 19 10 9 9 0 8 0 rwobjpl 56 389663 0 377796 205 30 175 176 0 8 1 pdppl 4096 45747 0 45632 1543 1426 117 157 0 8 2 pvpl 32 39655 0 0 312 0 312 312 0 265 0 pmappl 248 22869 0 22816 15 10 5 5 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 3131 0 2098 32 1 31 31 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830e661a) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8309a8f6,ffffffff830e8249,13b,ffffffff8307efe7) at __assert+0x29 tun_clone_destroy(ffff8000012ab800) at tun_clone_destroy+0x38a sys/net/if_tun.c:315 if_clone_destroy(ffff8000332c1660) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000013e5258,80206979,ffff8000332c1660,ffff8000371c2538) at ifioctl+0x5c5 sys_ioctl(ffff8000371c2538,ffff8000332c1840,ffff8000332c1790) at sys_ioctl+0x67c syscall(ffff8000332c1840) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff8000332c1840) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7eae33c593f0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8361fdc8) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff8361fdc8) at __mp_lock+0x192 sys/kern/kern_lock.c:144 sys_mmap(ffff8000371c2cd0,ffff8000332bb7e0,ffff8000332bb730) at sys_mmap+0x62f sys/uvm/uvm_mmap.c:287 syscall(ffff8000332bb7e0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff8000332bb7e0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72a176b253e0, count: 8 ddb{1}> trace x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8361fdc8) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff8361fdc8) at __mp_lock+0x192 sys/kern/kern_lock.c:144 sys_mmap(ffff8000371c2cd0,ffff8000332bb7e0,ffff8000332bb730) at sys_mmap+0x62f sys/uvm/uvm_mmap.c:287 syscall(ffff8000332bb7e0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff8000332bb7e0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72a176b253e0, count: -7