syzbot


assert "refs != ~NUM" failed in kern_synch.c

Status: upstream: reported on 2025/02/08 12:26
Reported-by: syzbot+bee527c059e64ef8bdec@syzkaller.appspotmail.com
First crash: 126d, last: 7h08m

Sample crash report:
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 224398   6089      0      0x1000  0x4080000    0  syz-executor
*284383  85751      0           0  0x4000000    1K syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83466a0b) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff83413bf2,ffffffff8341a219,3b7,ffffffff8341a29c) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff800036c0ef18,ffffffff8335f47b) at refcnt_finalize+0x1db sys/kern/kern_synch.c:952
pppx_if_destroy(ffff800034be6000,ffff800036c0ef10) at pppx_if_destroy+0x3d sys/net/if_pppx.c:806
pppxclose(205b9a,41,2000,ffff80003c41ad10) at pppxclose+0xa0 sys/net/if_pppx.c:553
spec_close(ffff80003b40cf30) at spec_close+0x412 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd800eef7020,41,fffffd80097fb820,ffff80003c41ad10) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806c1f8538,ffff80003c41ad10) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806c1f8538,ffff80003c41ad10) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806c1f8538,ffff80003c41ad10) at fdrop+0x126 sys/kern/kern_descrip.c:1267
closef(fffffd806c1f8538,ffff80003c41ad10) at closef+0x192 sys/kern/kern_descrip.c:1251
syscall(ffff80003b40d190) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003b40d190) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xaf30e5cab00, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83466a0b) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff83413bf2,ffffffff8341a219,3b7,ffffffff8341a29c) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff800036c0ef18,ffffffff8335f47b) at refcnt_finalize+0x1db sys/kern/kern_synch.c:952
pppx_if_destroy(ffff800034be6000,ffff800036c0ef10) at pppx_if_destroy+0x3d sys/net/if_pppx.c:806
pppxclose(205b9a,41,2000,ffff80003c41ad10) at pppxclose+0xa0 sys/net/if_pppx.c:553
spec_close(ffff80003b40cf30) at spec_close+0x412 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd800eef7020,41,fffffd80097fb820,ffff80003c41ad10) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806c1f8538,ffff80003c41ad10) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806c1f8538,ffff80003c41ad10) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806c1f8538,ffff80003c41ad10) at fdrop+0x126 sys/kern/kern_descrip.c:1267
closef(fffffd806c1f8538,ffff80003c41ad10) at closef+0x192 sys/kern/kern_descrip.c:1251
syscall(ffff80003b40d190) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003b40d190) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xaf30e5cab00, count: -13
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003b40cd00
rbx               0xffff8000299dedd7
rdx               0xffff80000147f000
rcx               0xffff80003c41ad10
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xe56fe9a5758a74ea
r11               0x7fa5afa7a0a60262
r12               0xffff8000299debd8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81757c05    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003b40ccf0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=284383 pid=85751 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4219d0,0xffff80002a2974b0
    process=0xffff80003c41f090 user=0xffff80003b408000, vmspace=0xfffffd806c0137a0
    estcpu=36, cpticks=2, pctcpu=0.0, user=1, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 29226  142772  51010      0  2    0x100000                sh
 51010  318742  66295      0  3    0x10008a  sigsusp       sh
 48039  461750  49126      0  2    0x100000                sh
 49126   17648  17116      0  3    0x10008a  sigsusp       sh
  6089  430622  90183      0  3      0x3000  suspend       syz-executor
  6089  224398  90183      0  7   0x4081000                syz-executor
 34402  222702  21849      0  3        0x80  nanoslp       syz-executor
 34402  425661  21849      0  3   0x4000080  kqsel         syz-executor
 34402  319000  21849      0  3   0x4000080  fsleep        syz-executor
 85751  237276  83011      0  2           0                syz-executor
*85751  284383  83011      0  7   0x4000000                syz-executor
 30676  236620  38269      0  3        0x80  nanoslp       syz-executor
 30676  389224  38269      0  3   0x4000080  sbwait        syz-executor
 30676  151737  38269      0  3   0x4000080  fsleep        syz-executor
 66295  467175  73552      0  3        0x82  wait          syz-executor
 20425  271108      0      0  3     0x14200  acct          acct
 17116  519968  73552      0  3        0x82  wait          syz-executor
 21004  164097      1      0  3    0x100083  ttyin         getty
 16111   98611  73552      0  3         0x2  biowait       syz-executor
  3304  115931      0      0  3     0x14280  nfsidl        nfsio
   906  351206      0      0  3     0x14280  nfsidl        nfsio
 10142  423000      0      0  3     0x14280  nfsidl        nfsio
  2000  366907      0      0  3     0x14280  nfsidl        nfsio
 78179   61534      0      0  3     0x14280  nfsidl        nfsio
 53169  202843      0      0  3     0x14280  nfsidl        nfsio
 21746  441731      0      0  3     0x14280  nfsidl        nfsio
  7664  120002      0      0  3     0x14280  nfsidl        nfsio
 36411   30260      0      0  3     0x14280  nfsidl        nfsio
 83933   29701      0      0  3     0x14280  nfsidl        nfsio
 75308  414869      0      0  3     0x14280  nfsidl        nfsio
 96135  452558      0      0  3     0x14280  nfsidl        nfsio
 62831  198321      0      0  3     0x14280  nfsidl        nfsio
 99769  442558      0      0  3     0x14280  nfsidl        nfsio
 53985   89404      0      0  3     0x14280  nfsidl        nfsio
 20919  352333      0      0  3     0x14280  nfsidl        nfsio
 69726   76074      0      0  3     0x14280  nfsidl        nfsio
 81434  452620      0      0  3     0x14280  nfsidl        nfsio
  7110    7239      0      0  3     0x14280  nfsidl        nfsio
 61906  110634      0      0  3     0x14280  nfsidl        nfsio
 61216  220194      0      0  3     0x14200  bored         sosplice
 83011  288749  73552      0  3        0x82  nanoslp       syz-executor
 38269  178655  73552      0  3        0x82  nanoslp       syz-executor
 90183  201858  73552      0  3        0x82  nanoslp       syz-executor
 38255  517710  73552      0  3        0x82  nanoslp       syz-executor
 21849   55680  73552      0  3        0x82  nanoslp       syz-executor
 73552  406110  50332      0  3        0x82  kqread        syz-executor
 50332   20465  56990      0  3    0x10008a  sigsusp       ksh
 56990  239350  54357      0  3        0x98  kqread        sshd-session
 54357  308471  59509      0  3        0x92  kqread        sshd-session
 59509  215315      1      0  3        0x88  kqread        sshd
 70382  251415  57024     74  3   0x1100092  bpf           pflogd
 57024  401438      1      0  3        0x80  sbwait        pflogd
 47688  305006  85145     73  3   0x1100090  kqread        syslogd
 85145  354535      1      0  3    0x100082  sbwait        syslogd
 15783  357142      1      0  3    0x100080  kqread        resolvd
 38731  357238  39783     77  3    0x100092  kqread        dhcpleased
 33680  404668  39783     77  3    0x100092  kqread        dhcpleased
 39783  499989      1      0  3        0x80  kqread        dhcpleased
 16454  155871      0      0  3     0x14200  bored         smr
 63370   44175      0      0  2     0x14200                zerothread
 73919   84868      0      0  3     0x14200  aiodoned      aiodoned
  7095  149888      0      0  3     0x14200  syncer        update
 18794  405927      0      0  3     0x14200  cleaner       cleaner
  5108  105094      0      0  3     0x14200  reaper        reaper
 96772  499257      0      0  3     0x14200  pgdaemon      pagedaemon
  2626  459249      0      0  3     0x14200  bored         viomb
 61903  128782      0      0  3  0x40014200  acpi0         acpi0
 68332  446470      0      0  3  0x40014200                idle1
 86591  298825      0      0  3     0x14200  bored         softnet3
 43008  245330      0      0  3     0x14200  bored         softnet2
 21204  212735      0      0  3     0x14200  bored         softnet1
 81135   44994      0      0  2     0x14200                softnet0
 46723  517072      0      0  3     0x14200  bored         systqmp
 96873  440140      0      0  3     0x14200  bored         systq
 93393  109781      0      0  3     0x14200  tmoslp        softclockmp
 81333  420524      0      0  3  0x40014200  tmoslp        softclock
 56896  271110      0      0  3  0x40014200                idle0
     1  450504      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 85751 (syz-executor) thread 0xffff80003c41ad10 (284383)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838e82a0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
#2  sleep_finish+0x2da sys/kern/kern_synch.c:366
#3  msleep_nsec+0x141 sys/kern/kern_synch.c:219
#4  taskq_do_barrier+0x160 sys/kern/kern_task.c:304
#5  ifiq_destroy+0xce sys/net/ifq.c:707
#6  if_detach+0x836 sys/net/if.c:-1
#7  pppx_if_destroy+0x91 sys/net/if_pppx.c:813
#8  pppxclose+0xa0 sys/net/if_pppx.c:553
#9  spec_close+0x412 sys/kern/spec_vnops.c:-1
#10 VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156
#11 vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
#11 vn_closefile+0x12b sys/kern/vfs_vnops.c:615
#12 fdrop+0x126 sys/kern/kern_descrip.c:1267
#13 closef+0x192 sys/kern/kern_descrip.c:1251
#14 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#14 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#15 Xsyscall+0x128
Process 16111 (syz-executor) thread 0xffff80003c41a040 (98611)
exclusive rrwlock inode r = 0 (0xfffffd806e110410)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vget+0x2bd sys/kern/vfs_subr.c:693
#6  ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98
#7  ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203
#8  ufs_lookup+0x19f8 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#11 namei+0x7aa sys/kern/vfs_lookup.c:250
#12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1864
#13 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c38b320)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1864
#8  syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
#9  Xsyscall+0x128
Process 81135 (softnet0) thread 0xffff8000ffffe000 (44994)
shared rwlock softnet0 r = 0 (0xffff80000002c078)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  taskq_thread+0x12a sys/kern/kern_task.c:442
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10232  11026K   12594K 166960K     13281        0
            pcb    17     15K      16K 166960K       241        0
         rtable   202      9K       9K 166960K       859        0
             pf    35     17K      21K 166960K       138        0
         ifaddr    39      6K       8K 166960K       136        0
        ifgroup    55      2K       2K 166960K       180        0
         sysctl     4      1K       9K 166960K        11        0
       counters    70     37K      37K 166960K       172        0
       ioctlops     0      0K       4K 166960K      1612        0
            iov     0      0K      16K 166960K        51        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1462     92K      93K 166960K      2664        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        14        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        95        0
        dirhash    15      2K       3K 166960K        33        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    19     69K     106K 166960K      1215        0
          sigio     0      0K       0K 166960K        15        0
           proc    72     91K     128K 166960K      1030        0
        subproc    72      4K       4K 166960K       207        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       200        0
       in_multi    86      6K       7K 166960K       279        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     0      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   241   1076K    1076K 166960K       241        0
           exec     0      0K       1K 166960K       730        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   242    158K     167K 166960K     11878        0
       UVM aobj    21      4K       4K 166960K        25        0
     pinsyscall    44     88K     109K 166960K      2672        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        46        0
            NDP    14      0K       2K 166960K        95        0
           temp    77   8696K    8768K 166960K     45030        0
         kqueue    14     22K      31K 166960K       166        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      151    0      148     2     1     1     2     0     8    0
rtentry    176      284    0      197     6     0     6     6     0     8    0
unpcb      144      459    0      440     4     2     2     2     0     8    1
syncache   336        6    0        6     2     2     0     1     0     8    0
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      736      202    0      192     2     1     1     2     0     8    0
arp        128       47    0       35     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40        3    0        3     1     1     0     1     0     8    0
inpcb      328     1021    0     1008    15     8     7     9     0     8    5
nd6        144       71    0       46     2     0     2     2     0     8    0
pkpcb       40       76    0       76     1     0     1     1     0     8    1
kcovpl      48       23    0       15     1     0     1     1     0     8    0
ppxss      1192      30    0       29     3     2     1     1     0     8    0
pppxif     1504       5    0        4     3     2     1     1     0     8    0
pffrag     232        5    0        1     1     0     1     1     0   482    0
pffrnode    88        4    0        1     1     0     1     1     0     8    0
pffrent     40       40    0       36     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       2    0        0     1     0     1     1     0     8    0
pfstitem    24       64    0       30     1     0     1     1     0     8    0
pfstkey    128       64    0       30     2     0     2     2     0     8    0
pfstate    384       64    0       30     5     0     5     5     0     8    0
pfrule     1344      24    0       17     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     1254    0      804    31     2    29    30     0     8    0
art_table   32     1256    0      804     4     0     4     4     0     8    0
art_node    16      282    0      205     1     0     1     1     0     8    0
sysvmsgpl   40       44    0        4     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112       58    0       48     1     0     1     1     0     8    0
shmpl      112       22    0        4     1     0     1     1     0     8    0
dirhash    1024      31    0       12     3     0     3     3     0     8    0
dino2pl    256     3368    0     1832    97     0    97    97     0     8    0
ffsino     288     3368    0     1832   110     0   110   110     0     8    0
nchpl      144     4843    0     3099    65     0    65    65     0     8    0
rtmask      32        8    0        8     3     2     1     1     0     8    1
uvmvnodes   80     4297    0        0    88     0    88    88     0     8    0
vnodes     216     4297    0        0   239     0   239   239     0     8    0
namei      1024   18908    0    18908     2     1     1     2     0     8    1
percpumem   16      101    0       51     1     0     1     1     0     8    0
kstatmem   264      102    0       75     3     1     2     3     0     8    0
scsiplug    72        6    0        6     3     3     0     1     0     8    0
scxspl     216    16415    0    16414    12     9     3     8     1     8    2
plimitpl   152      239    0      221     1     0     1     1     0     8    0
sigapl     424     1504    0     1431    11     2     9     9     0     8    0
knotepl    120      582    0        0    18     0    18    18     0     8    0
kqueuepl   224      265    0      253     2     1     1     2     0     8    0
pipepl     336      267    0      240     8     5     3     8     0     8    0
fdescpl    520     1462    0     1429     3     0     3     3     0     8    0
filepl     160     8701    0     8480    21     8    13    18     0     8    3
lockfpl    104      354    0      352     1     0     1     1     0     8    0
lockfspl    48      126    0      124     1     0     1     1     0     8    0
sessionpl  144       41    0       32     1     0     1     1     0     8    0
pgrppl      48       78    0       61     1     0     1     1     0     8    0
ucredpl    104     1496    0     1482     1     0     1     1     0     8    0
zombiepl   144     1433    0     1431     1     0     1     1     0     8    0
processpl  1240    1504    0     1431     6     0     6     6     0     8    0
procpl     656     2981    0     2902    10     3     7     8     0     8    0
srpgc       96        8    0        8     2     2     0     1     0     8    0
sosppl     168        6    0        6     2     2     0     1     0     8    0
sockpl     728     1739    0     1704    19     9    10    12     0     8    6
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     129    0        0    17     1    16    17     0     8    0
mcl2k      2048      27    0        0     4     0     4     4     0     8    0
mtagpl      96       96    0        0     3     0     3     3     0     8    0
mbufpl     256     1224    0        0    76     0    76    76     0     8    0
bufpl      280     5209    0      124   364     0   364   364     0     8    0
anonpl      32     7667    0        0    62     0    62    62     0   246    0
amapchunkpl 152   37984    0    37492    39    15    24    34     0   158    4
amappl16   200     4004    0     3977    39    29    10    15     0     8    8
amappl15   192        5    0        4     1     0     1     1     0     8    0
amappl14   184      151    0      139     1     0     1     1     0     8    0
amappl13   176        6    0        5     1     0     1     1     0     8    0
amappl12   168     2332    0     2296     4     2     2     3     0     8    0
amappl11   160       56    0       42     1     0     1     1     0     8    0
amappl10   152       13    0       13     1     1     0     1     0     8    0
amappl9    144      312    0      312     1     1     0     1     0     8    0
amappl8    136       21    0       19     1     0     1     1     0     8    0
amappl7    128      145    0      133     1     0     1     1     0     8    0
amappl6    120      323    0      317     1     0     1     1     0     8    0
amappl5    112      181    0      170     1     0     1     1     0     8    0
amappl4    104      364    0      345     1     0     1     1     0     8    0
amappl3     96     7584    0     7469     5     1     4     4     0     8    0
amappl2     88      856    0      790     2     0     2     2     0     8    0
amappl1     80    14186    0    13577    15     1    14    15     0     8    0
amappl      88    10792    0    10626     5     1     4     5     0    92    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      258    0      258     4     4     0     1     0     8    0
dma64       64        7    0        7     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       24    0        4     1     0     1     1     0     8    0
uaddrrnd    24     1462    0     1429     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1462    0     1429     1     0     1     1     0     8    0
vmmpekpl   168    13473    0    13422     3     0     3     3     0     8    0
vmmpepl    168    97143    0    95137   102     7    95   100     0   357    0
vmsppl     480     1461    0     1429     5     0     5     5     0     8    0
rwobjpl     72    31259    0    25987    99     1    98    98     0     8    1
pdppl      4096    2931    0     2858   133    58    75    87     0     8    2
pvpl        32    15069    0        0   124     2   122   122     0   265    0
pmappl     256     1461    0     1429     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      497    0       73    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0

Crashes (207):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/14 20:03 openbsd 2b4e04f3782d 5f4b362d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/14 08:35 openbsd f8007ba64c82 0e8da31f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/12 06:13 openbsd 2de8940ea18f 98683f8f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/10 14:28 openbsd a3912f8462f6 5d7e17ca .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/09 06:56 openbsd 1d858eebbab4 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/09 01:44 openbsd 1d858eebbab4 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/08 14:04 openbsd 394c376d8c51 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/07 12:35 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/07 08:21 openbsd 16c80f155e04 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/06 22:45 openbsd 16c80f155e04 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/05 18:45 openbsd c875838447ad 6b6b5f21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/05 00:42 openbsd 5f110e2425ec 6b6b5f21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/04 15:44 openbsd 98b1dda24a5c e565f08d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/04 14:30 openbsd 98b1dda24a5c e565f08d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/04 10:11 openbsd 98b1dda24a5c e565f08d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/04 01:58 openbsd 51e28e2b9751 a30356b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/03 21:46 openbsd e4273848146a a30356b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/02 22:29 openbsd a42b3f6697ed a30356b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/05/31 22:53 openbsd 36df44578b8f 3d2f584d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/25 21:58 openbsd 0ee6523cba49 2d4582d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/25 20:51 openbsd 0ee6523cba49 2d4582d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/25 06:11 openbsd ae496ce11df0 ed351ea7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/23 13:00 openbsd 3f82bc0a57fc f8cc0c83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/22 14:14 openbsd 90a7f92b51d8 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/05/22 07:38 openbsd c902741cb17b 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/22 04:03 openbsd c902741cb17b 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/20 08:57 openbsd 03d4002980cf b84f0537 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/19 06:19 openbsd 3094a09a1666 f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/18 22:04 openbsd 6decc3d5f4d6 f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/14 13:21 openbsd b0ff9b09a8b9 a4fa04ef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/14 03:43 openbsd 6405849dc70d 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/13 07:00 openbsd 0de99af22586 f6671af7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/05/12 13:14 openbsd 1d7d4b26237d 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/11 16:00 openbsd 3fa496cf3673 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/11 13:27 openbsd 9ae922823a2f 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/10 14:01 openbsd 5fc296287174 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/05/08 16:34 openbsd 58ed90363f4e dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/08 08:08 openbsd 58ed90363f4e dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/08 07:07 openbsd 58ed90363f4e dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/08 05:22 openbsd 58ed90363f4e dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/07 20:33 openbsd 857ee2693eb3 dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/07 10:00 openbsd b9cb822a9415 350f4ffc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/07 01:03 openbsd 7a1ed1390929 350f4ffc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/06 21:07 openbsd 7a1ed1390929 350f4ffc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/05 16:43 openbsd 0258cd44472b 6ca47dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/04 23:23 openbsd 8ee62dda4596 b0714e37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/03 05:42 openbsd 0e444de8113c b0714e37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/05/03 04:21 openbsd 0e444de8113c b0714e37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/04/30 19:23 openbsd 88a968921bb2 937aafd7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/02/08 12:25 openbsd 2347e6edcd5e ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.