syzbot

 sign-in | mailing list | source | docs
🐞 Open [183]
🐞 Fixed [298]
🐞 Invalid [939]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

assert "pr->ps_threadcnt == NUM" failed in kern_exit.c (2)

Status: upstream: reported on 2025/11/01 01:28
Reported-by: syzbot+89d36c350dc9849653e3@syzkaller.appspotmail.com
First crash: 74d, last: 1d03h
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "pr->ps_threadcnt == NUM" failed in kern_exit.c -1 1 468d 468d 0/3 auto-obsoleted due to no activity on 2024/12/31 12:53

Sample crash report:
panic: kernel diagnostic assertion "pr->ps_threadcnt == 0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_exit.c", line 886
Starting stack trace...
panic(ffffffff83372759) at panic+0x1ba sys/kern/subr_prf.c:229
__assert(ffffffff833b480d,ffffffff833d2aa8,376,ffffffff833d2add) at __assert+0x29 sys/kern/subr_prf.c:-1
process_zap(ffff80003c96f620) at process_zap+0x31d sys/kern/kern_exit.c:887
reaper(ffff80002a72d758) at reaper+0x290 sys/kern/kern_exit.c:521
end trace frame: 0x0, count: 253
End of stack trace.
syncing disks...34 34 
 done

dump to dev 4,1 not possible
rebooting...
SeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000080000000 = 2048 MiB
CPUs found: 2     Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 8a8635c2-f252-d190-235a-0f50a6ed73cd
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f26e0: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Sending Seabios boot VM event.
Booting from Hard Disk 0...
>> OpenBSD/amd64 BOOT 3.67
boot> set $lines = 0
set: syntax error
boot> set $maxwidth = 0
set: syntax error
boot> show panic
boot: illegal argument panic
boot> trace
boot> show registers
boot> show proc
boot> ps
boot> show all locks
boot> show malloc
boot> show all pools
boot> machine ddbcpu 0
machine: syntax error
boot> trace
boot> machine ddbcpu 1
machine: syntax error
boot> trace

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/13 04:59 openbsd a9df5e8d0934 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2026/01/07 10:02 openbsd c7117ed52e15 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2026/01/04 15:59 openbsd 079c76c73fb6 e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/31 15:24 openbsd f516ab5f0d05 49aa01cc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/24 14:48 openbsd 1dc30a6de584 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/16 21:12 openbsd 11531c4859ff a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/15 14:37 openbsd 2c50c5af38ad a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/10 10:57 openbsd f5c5b16722b5 48b27acc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/09 18:13 openbsd 9bea02201100 fc20f974 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/09 05:28 openbsd bf8f637750de fc20f974 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/12/05 11:57 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/26 20:34 openbsd 856b2687a9ff c116feb4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/24 16:56 openbsd 879ea5f6fdb7 bf6fe8fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/14 06:41 openbsd 83ff66b05700 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/12 23:22 openbsd 4bd49954ab16 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/09 04:05 openbsd e187005a6767 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/08 19:03 openbsd f09b465a1938 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/06 12:37 openbsd 05dcfb71c047 a6c9c731 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
2025/11/01 01:28 openbsd c58a321e760c 2c50b6a9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "pr->ps_threadcnt == NUM" failed in kern_exit.c
* Struck through repros no longer work on HEAD.