panic: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/net/if_tun.c", line 305 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *233730 89380 0 0 0x4000000 1K syz-executor.4 307805 58170 77 0x100012 0x80 0 dhcpleased db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825739a5) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825e91ae,ffffffff82632dac,131,ffffffff825fdeb9) at __assert+0x25 sys/kern/subr_prf.c:161 tun_clone_destroy(ffff800000c01800) at tun_clone_destroy+0x278 sys/net/if_tun.c:305 if_clone_destroy(ffff800026080660) at if_clone_destroy+0x132 sys/net/if.c:1218 soo_ioctl(fffffd806c518ef0,80206979,ffff800026080660,ffff8000260b5500) at soo_ioctl+0x26c sys_ioctl(ffff8000260b5500,ffff800026080778,ffff8000260807d0) at sys_ioctl+0x4a2 syscall(ffff800026080840) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800026080840) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x39509089e60, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "sc->sc_dev == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/net/if_tun.c", line 305 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825739a5) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825e91ae,ffffffff82632dac,131,ffffffff825fdeb9) at __assert+0x25 sys/kern/subr_prf.c:161 tun_clone_destroy(ffff800000c01800) at tun_clone_destroy+0x278 sys/net/if_tun.c:305 if_clone_destroy(ffff800026080660) at if_clone_destroy+0x132 sys/net/if.c:1218 soo_ioctl(fffffd806c518ef0,80206979,ffff800026080660,ffff8000260b5500) at soo_ioctl+0x26c sys_ioctl(ffff8000260b5500,ffff800026080778,ffff8000260807d0) at sys_ioctl+0x4a2 syscall(ffff800026080840) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800026080840) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x39509089e60, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800026080470 rbx 0xffff800020ce9bff rdx 0 rcx 0 rax 0xffff8000260b5500 r8 0x101010101010101 r9 0x8080808080808080 r10 0xca518626be796f31 r11 0xa98e1c0666123f4 r12 0xffff800020ce9a00 r13 0 r14 0 r15 0x1 rip 0xffffffff8147cfe8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800026080460 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.4) pid=233730 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff8000260b4540,0xffff8000260b4fd0 process=0xffff8000fffe6588 user=0xffff80002607b000, vmspace=0xfffffd806ef54b88 estcpu=32, cpticks=2, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 3453 150774 69483 0 2 0 syz-executor.1 3453 155085 69483 0 2 0x4000000 syz-executor.1 22176 388175 35310 0 2 0 syz-executor.6 22176 216220 35310 0 3 0x4000000 biowait syz-executor.6 26900 517026 97408 0 2 0 syz-executor.2 26900 398053 97408 0 2 0x4000000 syz-executor.2 26900 45698 97408 0 2 0x4000000 syz-executor.2 21954 105056 38663 0 2 0 syz-executor.0 89380 145086 19392 0 2 0 syz-executor.4 *89380 233730 19392 0 7 0x4000000 syz-executor.4 80104 110187 26175 0 2 0 syz-executor.7 80104 237097 26175 0 3 0x4000080 fsleep syz-executor.7 80104 321849 26175 0 2 0x4000000 syz-executor.7 35982 169395 37246 0 3 0x80 nanoslp syz-executor.5 35982 338792 37246 0 2 0x4000000 syz-executor.5 35982 289412 37246 0 3 0x4000080 fsleep syz-executor.5 56093 460456 98804 0 2 0 syz-executor.3 56093 514365 98804 0 2 0x4000000 syz-executor.3 38663 258251 59161 0 3 0x82 nanoslp syz-executor.0 98804 286031 59161 0 3 0x82 nanoslp syz-executor.3 97408 64879 59161 0 3 0x82 nanoslp syz-executor.2 69483 66628 59161 0 3 0x82 nanoslp syz-executor.1 35310 8546 59161 0 3 0x82 nanoslp syz-executor.6 26175 476817 59161 0 3 0x82 nanoslp syz-executor.7 81074 479423 1 0 3 0x100083 ttyin getty 19392 238097 59161 0 3 0x82 nanoslp syz-executor.4 37246 474559 59161 0 3 0x82 nanoslp syz-executor.5 69942 1959 0 0 3 0x14200 acct acct 75431 10026 0 0 3 0x14200 bored sosplice 35786 357712 0 0 3 0x14280 nfsidl nfsio 52939 390173 0 0 3 0x14280 nfsidl nfsio 66712 154290 0 0 3 0x14280 nfsidl nfsio 24616 71061 0 0 3 0x14280 nfsidl nfsio 47500 104244 0 0 3 0x14280 nfsidl nfsio 11084 507235 0 0 3 0x14280 nfsidl nfsio 51518 281436 0 0 3 0x14280 nfsidl nfsio 31799 320547 0 0 3 0x14280 nfsidl nfsio 17444 509959 0 0 3 0x14280 nfsidl nfsio 43165 124989 0 0 3 0x14280 nfsidl nfsio 86551 295647 0 0 3 0x14280 nfsidl nfsio 92496 330730 0 0 3 0x14280 nfsidl nfsio 95253 133767 0 0 3 0x14280 nfsidl nfsio 35971 317604 0 0 3 0x14280 nfsidl nfsio 80139 120181 0 0 3 0x14280 nfsidl nfsio 76359 302245 0 0 3 0x14280 nfsidl nfsio 73474 98610 0 0 3 0x14280 nfsidl nfsio 30356 370425 0 0 3 0x14280 nfsidl nfsio 20367 283296 0 0 3 0x14280 nfsidl nfsio 15549 114842 0 0 3 0x14280 nfsidl nfsio 59161 374443 54518 0 3 0x82 thrsleep syz-fuzzer 59161 393077 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 383911 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 277327 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 498159 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 510557 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 45719 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 492436 54518 0 3 0x4000082 thrsleep syz-fuzzer 59161 497127 54518 0 3 0x4000082 kqread syz-fuzzer 54518 203173 44197 0 3 0x10008a sigsusp ksh 44197 72477 31894 0 3 0x9a kqread sshd 31894 120526 1 0 3 0x88 kqread sshd 80764 166296 9054 74 3 0x100092 bpf pflogd 9054 53123 1 0 3 0x80 netio pflogd 96625 334839 19725 73 3 0x100090 kqread syslogd 19725 492254 1 0 3 0x100082 netio syslogd 99523 344550 1 0 3 0x100080 kqread resolvd 58170 307805 87100 77 7 0x100092 dhcpleased 40653 87054 87100 77 3 0x100092 kqread dhcpleased 87100 452122 1 0 3 0x80 kqread dhcpleased 3630 291675 0 0 3 0x14200 bored smr 86791 319244 0 0 2 0x14200 zerothread 82377 4641 0 0 3 0x14200 aiodoned aiodoned 33842 246761 0 0 3 0x14200 syncer update 84909 447547 0 0 3 0x14200 cleaner cleaner 44350 242350 0 0 3 0x14200 reaper reaper 86031 210643 0 0 3 0x14200 pgdaemon pagedaemon 91533 286446 0 0 3 0x14200 bored viomb 11302 239141 0 0 3 0x40014200 acpi0 acpi0 87934 522445 0 0 3 0x40014200 idle1 51104 327370 0 0 3 0x14200 bored softnet 68795 411021 0 0 3 0x14200 bored systqmp 44182 192118 0 0 3 0x14200 bored systq 32487 335370 0 0 3 0x40014200 bored softclock 85269 74511 0 0 3 0x40014200 idle0 1 61303 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 22176 (syz-executor.6) thread 0xffff8000260b4fc0 (216220) exclusive rrwlock inode r = 0 (0xfffffd806f6be5f0) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140 #5 ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347 #6 ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394 #7 ufs_makeinode+0xae sys/ufs/ufs/ufs_vnops.c:1830 #8 ufs_mknod+0x4e sys/ufs/ufs/ufs_vnops.c:172 #9 VOP_MKNOD+0xbf sys/kern/vfs_vops.c:121 #10 domknodat+0x326 sys/kern/vfs_syscalls.c:1629 #11 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #11 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806f6be810) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 domknodat+0x92 sys/kern/vfs_syscalls.c:1581 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 Process 89380 (syz-executor.4) thread 0xffff8000260b5500 (233730) exclusive rwlock clonelk r = 0 (0xffffffff828e4a20) #0 witness_lock+0x44d #1 if_clone_destroy+0x49 #2 soo_ioctl+0x26c #3 sys_ioctl+0x4a2 #4 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #4 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #5 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82a3d4a8) #0 witness_lock+0x44d #1 soo_ioctl+0x25a sys/kern/sys_socket.c:136 #2 sys_ioctl+0x4a2 #3 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #3 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #4 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10219 6513K 7304K 78643K 23442 0 pcb 16 18K 20K 78643K 1131 0 rtable 289 29K 30K 78643K 2429 0 ifaddr 106 23K 25K 78643K 1727 0 sysctl 2 0K 0K 78643K 2 0 counters 58 35K 36K 78643K 270 0 ioctlops 0 0K 8K 78643K 3357 0 iov 0 0K 16K 78643K 815 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1396 87K 88K 78643K 6173 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 87 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 1292 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 18 65K 85K 78643K 8500 0 sigio 0 0K 0K 78643K 492 0 proc 70 87K 124K 78643K 1633 0 subproc 104 6K 6K 78643K 444 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 285 0 in_multi 90 6K 6K 78643K 706 0 ether_multi 1 0K 0K 78643K 96 0 mrt 1 0K 0K 78643K 53 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 241 1076K 1076K 78643K 241 0 exec 0 0K 2K 78643K 2263 0 pfkey data 0 0K 0K 78643K 5 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 490 499K 500K 78643K 110045 0 UVM aobj 131 4K 4K 78643K 134 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 524 0 NDP 15 0K 2K 78643K 200 0 temp 150 4729K 4794K 78643K 90694 0 kqueue 12 18K 26K 78643K 497 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 767 0 764 14 13 1 5 0 8 0 rtentry 112 579 0 476 5 1 4 4 0 8 0 unpcb 136 20666 0 20651 104 98 6 15 0 8 5 syncache 296 8 0 8 3 3 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 378 0 378 3 3 0 3 0 8 0 tcpcb 736 3024 0 3019 113 104 9 14 0 8 8 arp 120 84 0 66 1 0 1 1 0 8 0 inpcb 304 7438 0 7427 107 100 7 12 0 8 6 rttmr 72 18 0 18 5 5 0 1 0 8 0 nd6 48 136 0 108 1 0 1 1 0 8 0 pkpcb 40 94 0 94 5 5 0 1 0 8 0 kcovpl 48 34 0 26 1 0 1 1 0 8 0 ppxss 1248 47 0 47 10 10 0 1 0 8 0 pfstscr 40 16 0 16 3 3 0 1 0 8 0 pffrag 232 64 0 61 2 1 1 1 0 482 0 pffrnode 88 64 0 61 2 1 1 1 0 8 0 pffrent 40 253 0 250 2 1 1 1 0 8 0 pfosfp 40 1428 0 1428 5 5 0 5 0 8 0 pfosfpen 112 1428 0 1428 21 21 0 21 0 8 0 pfrke_plain 168 10 0 10 1 1 0 1 0 8 0 pfrktable 1344 358 0 333 7 4 3 3 0 8 0 pftag 88 56 0 44 2 1 1 1 0 8 0 pfstitem 24 66 0 64 1 0 1 1 0 8 0 pfstkey 112 92 0 90 1 0 1 1 0 8 0 pfstate 320 74 0 72 3 2 1 3 0 8 0 pfrule 1360 489 0 422 7 1 6 6 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2849 0 2419 45 17 28 32 0 8 0 art_table 32 2850 0 2419 5 0 5 5 0 8 0 art_node 16 538 0 448 1 0 1 1 0 8 0 sysvmsgpl 40 13 0 5 1 0 1 1 0 8 0 semapl 112 1288 0 1278 1 0 1 1 0 8 0 shmpl 112 131 0 3 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 14202 0 12747 92 0 92 92 0 8 0 ffsino 272 14202 0 12747 98 0 98 98 0 8 0 nchpl 144 26397 0 24770 63 0 63 63 0 8 0 rtmask 32 16 0 16 1 1 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 94918 0 94917 6 5 1 2 0 8 0 percpumem 16 147 0 106 1 0 1 1 0 8 0 vcpupl 2048 63 0 0 8 0 8 8 0 8 0 vmpool 560 77 0 14 8 3 5 5 0 8 0 pfiaddrpl 120 156 0 128 4 3 1 1 0 8 0 scsiplug 72 4 0 4 1 1 0 1 0 8 0 scxspl 216 80633 0 80632 44 41 3 8 0 8 2 plimitpl 152 834 0 819 1 0 1 1 0 8 0 sigapl 424 8772 0 8705 8 0 8 8 0 8 0 futexpl 64 77014 0 77012 3 2 1 1 0 8 0 knotepl 120 351 0 0 6 0 6 6 0 8 0 kqueuepl 216 1918 0 1910 47 42 5 8 0 8 4 pipepl 336 1855 0 1827 49 43 6 9 0 8 3 fdescpl 496 8736 0 8705 5 1 4 5 0 8 0 filepl 152 79086 0 78844 151 135 16 33 0 8 6 lockfpl 104 2704 0 2702 6 5 1 2 0 8 0 lockfspl 48 724 0 722 1 0 1 1 0 8 0 sessionpl 144 51 0 34 1 0 1 1 0 8 0 pgrppl 48 92 0 75 1 0 1 1 0 8 0 ucredpl 96 8598 0 8584 1 0 1 1 0 8 0 zombiepl 144 8705 0 8705 2 1 1 1 0 8 1 processpl 1064 8772 0 8705 5 0 5 5 0 8 0 procpl 672 25226 0 25141 24 16 8 9 0 8 0 srpgc 96 30 0 30 5 5 0 1 0 8 0 sosppl 168 60 0 60 12 12 0 1 0 8 0 sockpl 480 28983 0 28954 604 592 12 54 0 8 8 mcl64k 65536 29 0 0 3 0 3 3 0 8 0 mcl16k 16384 25 0 0 4 1 3 3 0 8 0 mcl12k 12288 33 0 0 2 0 2 2 0 8 0 mcl9k 9216 33 0 0 3 1 2 2 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 25 0 0 4 1 3 3 0 8 0 mcl2k2 2112 6 0 0 1 0 1 1 0 8 0 mcl2k 2048 451 0 0 55 16 39 55 0 8 0 mtagpl 96 653 0 0 13 0 13 13 0 8 0 mbufpl 256 2217 0 0 120 0 120 120 0 8 0 bufpl 288 18550 0 12214 453 0 453 453 0 8 0 anonpl 24 2454051 0 2437301 260 129 131 151 0 186 0 amapchunkpl 152 279546 0 278663 121 79 42 51 0 158 7 amappl16 200 22902 0 22247 119 83 36 50 0 8 0 amappl15 192 3102 0 3096 1 0 1 1 0 8 0 amappl14 184 2308 0 2303 1 0 1 1 0 8 0 amappl13 176 1382 0 1380 1 0 1 1 0 8 0 amappl12 168 857 0 849 1 0 1 1 0 8 0 amappl11 160 2214 0 2199 1 0 1 1 0 8 0 amappl10 152 370 0 359 1 0 1 1 0 8 0 amappl9 144 496 0 491 1 0 1 1 0 8 0 amappl8 136 1771 0 1665 4 0 4 4 0 8 0 amappl7 128 734 0 722 1 0 1 1 0 8 0 amappl6 120 303 0 274 2 1 1 2 0 8 0 amappl5 112 4984 0 4958 1 0 1 1 0 8 0 amappl4 104 7077 0 7042 2 0 2 2 0 8 0 amappl3 96 1848 0 1831 1 0 1 1 0 8 0 amappl2 88 2972 0 2911 3 1 2 3 0 8 0 amappl1 80 162639 0 162034 25 12 13 19 0 8 0 amappl 88 108952 0 108636 8 0 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 133 0 3 3 0 3 3 0 8 0 uaddrrnd 24 8813 0 8719 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 8813 0 8719 1 0 1 1 0 8 0 vmmpekpl 168 71744 0 71684 4 0 4 4 0 8 0 vmmpepl 168 804039 0 801087 249 105 144 153 0 357 9 vmsppl 368 8812 0 8719 10 1 9 9 0 8 0 rwobjpl 56 201272 0 193453 128 16 112 114 0 8 1 pdppl 4096 17633 0 17501 386 254 132 132 0 8 0 pvpl 32 4184845 0 4163046 457 244 213 261 0 265 2 pmappl 248 8812 0 8719 7 1 6 6 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 1463 0 445 30 0 30 30 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffffffff8291fff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff82a3d2a0) at __mp_lock+0x120 __mp_lock_spin sys/kern/kern_lock.c:117 [inline] __mp_lock(ffffffff82a3d2a0) at __mp_lock+0x120 sys/kern/kern_lock.c:147 __mp_acquire_count(ffffffff82a3d2a0,2) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 mi_switch() at mi_switch+0x3d3 sys/kern/sched_bsd.c:416 sleep_finish(ffff800021191c28,1) at sleep_finish+0x1b2 sys/kern/kern_synch.c:433 msleep(fffffd807848a6c0,fffffd807848a6c0,318,ffffffff825e12b9,0) at msleep+0x110 sys/kern/kern_synch.c:259 kqueue_scan(ffff800021191da0,8,ffff800021191ea0,0,ffff8000ffff77b0,ffff800021191ffc) at kqueue_scan+0x1ab sys/kern/kern_event.c:1336 sys_kevent(ffff8000ffff77b0,ffff800021192060,ffff8000211920c0) at sys_kevent+0x48b sys/kern/kern_event.c:1001 syscall(ffff800021192130) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800021192130) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffbbdc0, count: 3 ddb{0}> trace x86_ipi_db(ffffffff8291fff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff82a3d2a0) at __mp_lock+0x120 __mp_lock_spin sys/kern/kern_lock.c:117 [inline] __mp_lock(ffffffff82a3d2a0) at __mp_lock+0x120 sys/kern/kern_lock.c:147 __mp_acquire_count(ffffffff82a3d2a0,2) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 mi_switch() at mi_switch+0x3d3 sys/kern/sched_bsd.c:416 sleep_finish(ffff800021191c28,1) at sleep_finish+0x1b2 sys/kern/kern_synch.c:433 msleep(fffffd807848a6c0,fffffd807848a6c0,318,ffffffff825e12b9,0) at msleep+0x110 sys/kern/kern_synch.c:259 kqueue_scan(ffff800021191da0,8,ffff800021191ea0,0,ffff8000ffff77b0,ffff800021191ffc) at kqueue_scan+0x1ab sys/kern/kern_event.c:1336 sys_kevent(ffff8000ffff77b0,ffff800021192060,ffff8000211920c0) at sys_kevent+0x48b sys/kern/kern_event.c:1001 syscall(ffff800021192130) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800021192130) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffbbdc0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825739a5) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825e91ae,ffffffff82632dac,131,ffffffff825fdeb9) at __assert+0x25 sys/kern/subr_prf.c:161 tun_clone_destroy(ffff800000c01800) at tun_clone_destroy+0x278 sys/net/if_tun.c:305 if_clone_destroy(ffff800026080660) at if_clone_destroy+0x132 sys/net/if.c:1218 soo_ioctl(fffffd806c518ef0,80206979,ffff800026080660,ffff8000260b5500) at soo_ioctl+0x26c sys_ioctl(ffff8000260b5500,ffff800026080778,ffff8000260807d0) at sys_ioctl+0x4a2 syscall(ffff800026080840) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800026080840) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x39509089e60, count: 6 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825739a5) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825e91ae,ffffffff82632dac,131,ffffffff825fdeb9) at __assert+0x25 sys/kern/subr_prf.c:161 tun_clone_destroy(ffff800000c01800) at tun_clone_destroy+0x278 sys/net/if_tun.c:305 if_clone_destroy(ffff800026080660) at if_clone_destroy+0x132 sys/net/if.c:1218 soo_ioctl(fffffd806c518ef0,80206979,ffff800026080660,ffff8000260b5500) at soo_ioctl+0x26c sys_ioctl(ffff8000260b5500,ffff800026080778,ffff8000260807d0) at sys_ioctl+0x4a2 syscall(ffff800026080840) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800026080840) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x39509089e60, count: -9