panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 117175 49722 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8344a9d8) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8348ba64,ffffffff8349651e,3bb,ffffffff834bebc1) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80002a7c34f0,ffffffff83441679) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(285b9a,ffff80002a7c34e8) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(285b9a,41,2000,ffff8000fffee548) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80002a388aa0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8077145440,41,fffffd80097fd3a8,ffff8000fffee548) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd807e59b660,ffff8000fffee548) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd807e59b660,ffff8000fffee548) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000fffee548) at fdfree+0x116 sys/kern/kern_descrip.c:1196 exit1(ffff8000fffee548,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff8000fffee548,ffff80002a388e10,ffff80002a388d60) at sys_exit+0x1a sys/kern/kern_exit.c:-1 end trace frame: 0xffff80002a388e00, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8344a9d8) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8348ba64,ffffffff8349651e,3bb,ffffffff834bebc1) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80002a7c34f0,ffffffff83441679) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(285b9a,ffff80002a7c34e8) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(285b9a,41,2000,ffff8000fffee548) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80002a388aa0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8077145440,41,fffffd80097fd3a8,ffff8000fffee548) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd807e59b660,ffff8000fffee548) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd807e59b660,ffff8000fffee548) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000fffee548) at fdfree+0x116 sys/kern/kern_descrip.c:1196 exit1(ffff8000fffee548,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff8000fffee548,ffff80002a388e10,ffff80002a388d60) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a388e10) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a388e10) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c6af1525f70, count: -16 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a388870 rbx 0xffff8000299aee07 rdx 0 rcx 0xffff8000fffee548 rax 0xffff8000299adff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x959426de55fa3001 r11 0x2c51abc2f3cf4772 r12 0xffff8000299aec08 r13 0 r14 0 r15 0x1 rip 0xffffffff8167ba25 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a388860 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=429303 pid=51111 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000fffee548 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff8000fffeefa8,0xffff8000fffe67f8 process=0xffff80003c3fab78 user=0xffff80002a383000, vmspace=0xfffffd80797bab88 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 28465 444442 75037 0 3 0x80 fsleep syz-executor 28465 506935 75037 0 3 0x4000080 sbwait syz-executor 36509 463961 49440 0 3 0x80 fsleep syz-executor 36509 457383 49440 0 2 0x4000000 syz-executor 36509 306196 49440 0 3 0x4000080 fsleep syz-executor 49722 382204 1440 0 3 0x80 fsleep syz-executor 49722 117175 1440 0 7 0x4000000 syz-executor 3349 260248 15586 0 3 0x80 fsleep syz-executor 3349 265759 15586 0 3 0x4000080 wsevent_read syz-executor 10657 226914 62748 0 3 0x80 fsleep syz-executor 10657 283477 62748 0 3 0x4000080 bell syz-executor 72458 8222 77931 -1 3 0x90 fsleep syz-executor 72458 145330 77931 -1 3 0x4000090 kqread syz-executor 30628 125820 46460 0 3 0x80 fsleep syz-executor 30628 68651 46460 0 3 0x4000080 ttyout syz-executor 77931 25721 63564 0 3 0x82 nanoslp syz-executor 19016 134803 63564 0 3 0x82 nanoslp syz-executor 13438 280686 1 0 3 0x100083 ttyin getty 15586 281469 63564 0 3 0x82 nanoslp syz-executor 1440 502205 63564 0 3 0x82 nanoslp syz-executor 46460 406136 63564 0 2 0x2 syz-executor 62748 37816 63564 0 3 0x82 nanoslp syz-executor 68801 26770 11304 0 3 0x100082 sbwait ndp 11304 488809 1 0 3 0x10008a sigsusp sh 49440 239371 63564 0 3 0x82 nanoslp syz-executor 75037 455205 63564 0 3 0x82 nanoslp syz-executor 63564 258788 51765 0 3 0x82 kqread syz-executor 51765 284724 13723 0 3 0x10008a sigsusp ksh 13723 157850 61253 0 3 0x98 kqread sshd-session 61253 480638 38531 0 3 0x92 kqread sshd-session 38531 468933 1 0 3 0x88 kqread sshd 24846 385733 46312 74 3 0x1100092 bpf pflogd 46312 180025 1 0 3 0x80 sbwait pflogd 97549 286010 27282 73 3 0x1100090 kqread syslogd 27282 398411 1 0 3 0x100082 sbwait syslogd 74830 141494 1 0 3 0x100080 kqread resolvd 87858 20200 10053 77 3 0x100092 kqread dhcpleased 63637 393170 10053 77 3 0x100092 kqread dhcpleased 10053 304775 1 0 3 0x80 kqread dhcpleased 27859 430759 0 0 3 0x14200 bored smr 46365 27630 0 0 3 0x14200 pgzero zerothread 73745 251072 0 0 3 0x14200 aiodoned aiodoned 86153 323224 0 0 3 0x14200 syncer update 43662 15039 0 0 3 0x14200 cleaner cleaner 51570 296041 0 0 3 0x14200 reaper reaper 32769 310785 0 0 3 0x14200 pgdaemon pagedaemon 83590 204173 0 0 3 0x14200 bored viomb 19242 518278 0 0 3 0x40014200 acpi0 acpi0 76159 45460 0 0 3 0x40014200 idle1 29288 286032 0 0 3 0x14200 bored softnet1 91847 285327 0 0 3 0x14200 bored softnet0 95912 245309 0 0 3 0x14200 bored systqmp 41354 494168 0 0 3 0x14200 bored systq 282 163610 0 0 3 0x14200 tmoslp softclockmp 82532 214979 0 0 3 0x40014200 tmoslp softclock 32601 57367 0 0 3 0x40014200 idle0 1 479035 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11098 12210K 12329K 166960K 13707 0 pcb 17 15K 16K 166960K 376 0 rtable 228 11K 11K 166960K 835 0 pf 46 19K 22K 166960K 195 0 ifaddr 44 8K 9K 166960K 147 0 ifgroup 67 2K 2K 166960K 216 0 sysctl 4 1K 9K 166960K 14 0 counters 80 38K 38K 166960K 230 0 ioctlops 0 0K 8K 166960K 1853 0 iov 0 0K 16K 166960K 58 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1375 87K 87K 166960K 2637 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 20 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 61 0 dirhash 12 2K 3K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 20 73K 85K 166960K 1359 0 sigio 0 0K 0K 166960K 27 0 proc 73 115K 147K 166960K 935 0 subproc 81 5K 5K 166960K 144 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 113 0 in_multi 84 6K 7K 166960K 241 0 ether_multi 1 0K 0K 166960K 12 0 mrt 1 0K 0K 166960K 48 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 627 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 257 172K 191K 166960K 13519 0 UVM aobj 108 13K 13K 166960K 110 0 pinsyscall 46 92K 102K 166960K 2761 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 97 0 NDP 15 0K 2K 166960K 102 0 temp 71 9082K 9147K 166960K 87197 0 kqueue 15 24K 28K 166960K 232 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 181 0 176 3 2 1 3 0 8 0 rtentry 176 264 0 176 6 1 5 6 0 8 0 unpcb 144 602 0 584 3 1 2 2 0 8 1 syncache 336 11 0 11 6 5 1 1 0 8 1 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 484 0 478 14 12 2 7 0 8 1 arp 136 36 0 21 1 0 1 1 0 8 0 inpcb 328 1470 0 1461 19 17 2 7 0 8 1 nd6 152 53 0 30 1 0 1 1 0 8 0 pkpcb 40 3 0 3 3 2 1 1 0 8 1 kcovpl 48 16 0 7 1 0 1 1 0 8 0 mppekey 1024 2 0 1 2 1 1 1 0 8 0 ppxss 1192 59 0 56 3 2 1 1 0 8 0 pppxif 1504 7 0 6 2 1 1 1 0 8 0 pfstscr 40 33 0 33 1 1 0 1 0 8 0 pffrag 232 12 0 2 1 0 1 1 0 482 0 pffrnode 88 12 0 2 1 0 1 1 0 8 0 pffrent 40 18 0 8 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 3 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstitem 24 86 0 43 1 0 1 1 0 8 0 pfstkey 128 280 0 237 2 0 2 2 0 8 0 pfstate 448 182 0 140 5 0 5 5 0 8 0 pfrule 1360 31 0 24 2 1 1 2 0 8 0 rttmr 136 3 0 3 3 2 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1281 0 890 43 15 28 40 0 8 1 art_table 40 1283 0 890 7 2 5 7 0 8 0 art_node 32 264 0 187 1 0 1 1 0 8 0 sysvmsgpl 40 13 0 7 1 0 1 1 0 8 0 semupl 112 5 0 5 2 2 0 1 0 8 0 semapl 112 55 0 45 1 0 1 1 0 8 0 shmpl 112 102 0 2 3 0 3 3 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 4051 0 2579 93 0 93 93 0 8 0 ffsino 296 4051 0 2579 114 0 114 114 0 8 0 nchpl 144 5815 0 4075 65 0 65 65 0 8 0 rtmask 32 8 0 8 5 4 1 1 0 8 1 vnodes 216 4756 0 0 265 0 265 265 0 8 0 namei 1024 19418 0 19418 3 2 1 1 0 8 1 percpumem 16 130 0 75 1 0 1 1 0 8 0 vcpupl 3968 5 0 0 1 0 1 1 0 8 0 vmpool 848 5 0 0 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 138 0 104 5 2 3 3 0 8 0 scsiplug 72 7 0 7 3 3 0 1 0 8 0 scxspl 216 47170 0 47170 13 11 2 8 1 8 2 plimitpl 152 333 0 314 1 0 1 1 0 8 0 sigapl 424 1689 0 1639 8 2 6 8 0 8 0 knotepl 120 548 0 0 16 0 16 16 0 8 0 kqueuepl 224 454 0 439 7 5 2 5 0 8 1 pipepl 344 258 0 227 7 3 4 6 0 8 1 fdescpl 528 1651 0 1617 3 0 3 3 0 8 0 filepl 160 9354 0 9106 24 12 12 16 0 8 0 lockfpl 104 502 0 500 1 0 1 1 0 8 0 lockfspl 48 226 0 224 1 0 1 1 0 8 0 sessionpl 144 36 0 27 1 0 1 1 0 8 0 pgrppl 48 62 0 44 1 0 1 1 0 8 0 ucredpl 104 1641 0 1627 1 0 1 1 0 8 0 zombiepl 144 1749 0 1748 2 1 1 1 0 8 0 processpl 1232 1689 0 1639 6 1 5 6 0 8 0 procpl 664 3518 0 3460 8 2 6 8 0 8 0 sosppl 176 7 0 7 3 3 0 1 0 8 0 sockpl 752 2289 0 2257 21 16 5 11 0 8 1 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 124 0 0 16 0 16 16 0 8 0 mcl2k 2048 88 0 0 9 0 9 9 0 8 1 mtagpl 96 6 0 0 1 0 1 1 0 8 0 mbufpl 256 1788 0 0 112 0 112 112 0 8 0 bufpl 280 20130 0 14001 439 1 438 439 0 8 0 anonpl 32 16649 0 0 135 0 135 135 0 246 0 amapchunkpl 152 44793 0 44144 48 20 28 38 0 158 0 amappl16 200 7831 0 7574 95 68 27 39 0 8 0 amappl15 192 6 0 6 2 2 0 1 0 8 0 amappl14 184 528 0 526 1 0 1 1 0 8 0 amappl13 176 157 0 144 1 0 1 1 0 8 0 amappl12 168 1959 0 1926 2 0 2 2 0 8 0 amappl11 160 4 0 4 2 2 0 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 269 0 269 1 1 0 1 0 8 0 amappl8 136 139 0 136 1 0 1 1 0 8 0 amappl7 128 174 0 159 1 0 1 1 0 8 0 amappl6 120 236 0 234 1 0 1 1 0 8 0 amappl5 112 105 0 94 1 0 1 1 0 8 0 amappl4 104 347 0 324 1 0 1 1 0 8 0 amappl3 96 9262 0 9144 4 0 4 4 0 8 0 amappl2 88 657 0 594 2 0 2 2 0 8 0 amappl1 80 17311 0 16661 19 2 17 17 0 8 0 amappl 88 12427 0 12249 5 0 5 5 0 92 0 uvmvnodes 80 137 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 257 0 257 3 3 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 40 0 40 2 1 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 109 0 2 2 0 2 2 0 8 0 uaddrrnd 24 1651 0 1617 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1651 0 1617 1 0 1 1 0 8 0 vmmpekpl 168 14763 0 14713 3 0 3 3 0 8 0 vmmpepl 168 115666 0 113368 145 34 111 119 0 357 2 vmsppl 488 1650 0 1617 5 0 5 5 0 8 0 rwobjpl 80 35043 0 33568 46 9 37 40 0 8 0 pdppl 4096 3319 0 3239 125 45 80 84 0 8 0 pvpl 32 24042 0 0 194 0 194 194 0 265 0 pmappl 256 1655 0 1617 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 444 0 83 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83869ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 kd_curproc sys/dev/kcov.c:580 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 sys/dev/kcov.c:153 softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83 dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83a55c40) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83a55c40) at __mp_lock+0x192 sys/kern/kern_lock.c:173 __mp_acquire_count(ffffffff83a55c40,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 sys/kern/kern_synch.c:369 cond_wait(ffff80003c3e8b1c,ffffffff8346de73) at cond_wait+0x7b sys/kern/kern_synch.c:999 smr_barrier_impl(0) at smr_barrier_impl+0x102 sys/kern/kern_smr.c:295 if_idxmap_remove(ffff80000161b800) at if_idxmap_remove+0x11b if_put sys/net/if.c:-1 [inline] if_idxmap_remove(ffff80000161b800) at if_idxmap_remove+0x11b sys/net/if.c:479 if_remove(ffff80000161b800) at if_remove+0xbe net_tq_barriers sys/net/if.c:-1 [inline] if_remove(ffff80000161b800) at if_remove+0xbe sys/net/if.c:1223 end trace frame: 0xffff80003c3e8de0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff83869ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 kd_curproc sys/dev/kcov.c:580 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 sys/dev/kcov.c:153 softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83 dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83a55c40) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83a55c40) at __mp_lock+0x192 sys/kern/kern_lock.c:173 __mp_acquire_count(ffffffff83a55c40,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 sys/kern/kern_synch.c:369 cond_wait(ffff80003c3e8b1c,ffffffff8346de73) at cond_wait+0x7b sys/kern/kern_synch.c:999 smr_barrier_impl(0) at smr_barrier_impl+0x102 sys/kern/kern_smr.c:295 if_idxmap_remove(ffff80000161b800) at if_idxmap_remove+0x11b if_put sys/net/if.c:-1 [inline] if_idxmap_remove(ffff80000161b800) at if_idxmap_remove+0x11b sys/net/if.c:479 if_remove(ffff80000161b800) at if_remove+0xbe net_tq_barriers sys/net/if.c:-1 [inline] if_remove(ffff80000161b800) at if_remove+0xbe sys/net/if.c:1223 if_detach(ffff80000161b800) at if_detach+0x80 sys/net/if.c:1276 pppacclose(637e,1,2000,ffff8000fffee2b0) at pppacclose+0x118 sys/net/if_pppx.c:1329 spec_close(ffff80003c3e8eb0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8075d960e8,1,fffffd80097fd3a8,ffff8000fffee2b0) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805d025800,ffff8000fffee2b0) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805d025800,ffff8000fffee2b0) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805d025800,ffff8000fffee2b0) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd805d025800,ffff8000fffee2b0) at closef+0x192 sys/kern/kern_descrip.c:1265 syscall(ffff80003c3e9110) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3e9110) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8dff0da10e0, count: -23 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8344a9d8) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8348ba64,ffffffff8349651e,3bb,ffffffff834bebc1) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80002a7c34f0,ffffffff83441679) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(285b9a,ffff80002a7c34e8) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(285b9a,41,2000,ffff8000fffee548) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80002a388aa0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8077145440,41,fffffd80097fd3a8,ffff8000fffee548) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd807e59b660,ffff8000fffee548) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd807e59b660,ffff8000fffee548) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000fffee548) at fdfree+0x116 sys/kern/kern_descrip.c:1196 exit1(ffff8000fffee548,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff8000fffee548,ffff80002a388e10,ffff80002a388d60) at sys_exit+0x1a sys/kern/kern_exit.c:-1 end trace frame: 0xffff80002a388e00, count: 0 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8344a9d8) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8348ba64,ffffffff8349651e,3bb,ffffffff834bebc1) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80002a7c34f0,ffffffff83441679) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(285b9a,ffff80002a7c34e8) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(285b9a,41,2000,ffff8000fffee548) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80002a388aa0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8077145440,41,fffffd80097fd3a8,ffff8000fffee548) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd807e59b660,ffff8000fffee548) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd807e59b660,ffff8000fffee548) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd807e59b660,ffff8000fffee548) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000fffee548) at fdfree+0x116 sys/kern/kern_descrip.c:1196 exit1(ffff8000fffee548,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff8000fffee548,ffff80002a388e10,ffff80002a388d60) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a388e10) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a388e10) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c6af1525f70, count: -16