kern/53546: ifconfig tapXXXXX problem (wrong unit name or panic)

[msaitoh%execsw.org@localhost]

>Number:         53546
>Category:       kern
>Synopsis:       ifconfig tapXXXXX problem (wrong unit name or panic)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Aug 24 05:25:00 +0000 2018
>Originator:     msaitoh%execsw.org@localhost
>Release:        NetBSD 8.99.24
>Organization:
>Environment:
-current, netbsd-8 or any?
>Description:
	ifconfig tap32767 create
	[ 1463.1846103] tap32767: Ethernet address f2:0b:a4:4f:f4:db
	ifconfig tap65536 create
	[ 1476.5086828] tap0: Ethernet address f2:0b:a4:93:22:e6
	(not 65536 but 0)
	ifconfig tap65537 create
	[ 1491.1341302] tap1: Ethernet address f2:0b:a4:1c:e7:17
	(not 65537 but 1)
	ifconfig tap99999 create
	[  87.5741145] uvm_fault(0xffffffff81519260, 0xfffffffffffc3000, 1) -> e
	[  87.5741145] fatal page fault in supervisor mode
	[  87.5741145] trap type 6 code 0 rip 0xffffffff809b2175 cs 0x8 rflags 0x10213 cr2 0xfffffffffffc34f8 ilevel 0x8 rsp 0xffffbc813e1e7c00
	[  87.5741145] curlwp 0xffffe3fa3ff924e0 pid 72.1 lowest kstack 0xffffbc813e1e42c0
	kernel: page fault trap, code=0
	Stopped in pid 72.1 (ifconfig) at       netbsd:config_devalloc+0x128:   cmpq    $
	0,0(%rcx,%rax,8)
	db{0}> trace
	config_devalloc() at netbsd:config_devalloc+0x128
	config_attach_pseudo() at netbsd:config_attach_pseudo+0x16
	tap_clone_creator() at netbsd:tap_clone_creator+0x46
	tap_clone_create() at netbsd:tap_clone_create+0x12
	doifioctl() at netbsd:doifioctl+0xe81
	sys_ioctl() at netbsd:sys_ioctl+0x11c
	syscall() at netbsd:syscall+0x173
	--- syscall (number 54) ---
	7f7ff711a71a:
	db{0}> reboot
	rebooting...
>How-To-Repeat:
	See above.
>Fix:
	I don't know :(