syzbot


assert "refs != ~NUM" failed in kern_synch.c

Status: upstream: reported on 2025/02/08 12:26
Reported-by: syzbot+bee527c059e64ef8bdec@syzkaller.appspotmail.com
First crash: 504d, last: 2d03h

Sample crash report:
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 959
Starting stack trace...
panic(ffffffff83481619) at panic+0x1ba sys/kern/subr_prf.c:229
__assert(ffffffff834c2163,ffffffff83523175,3bf,ffffffff834fc545) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff80002a7526c8,ffffffff8347f173) at refcnt_finalize+0x1e7 sys/kern/kern_synch.c:960
pppx_if_destroy(285b9a,ffff80002a7526c0) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794
pppxclose(285b9a,41,2000,ffff80002a766d08) at pppxclose+0xa0 sys/net/if_pppx.c:541
spec_close(ffff8000364bd3e0) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffb006fa7fc28,41,fffffb0007ffd410,ffff80002a766d08) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffb006d490880,ffff80002a766d08) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffffb006d490880,ffff80002a766d08) at vn_closefile+0x11d sys/kern/vfs_vnops.c:621
fdrop(fffffb006d490880,ffff80002a766d08) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffffb006d490880,ffff80002a766d08) at closef+0x190 sys/kern/kern_descrip.c:1265
fdfree(ffff80002a766d08) at fdfree+0x115 sys/kern/kern_descrip.c:1196
exit1(ffff80002a766d08,b,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
sys_exit(ffff80002a766d08,ffff8000364bd740,ffff8000364bd690) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff8000364bd740) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff8000364bd740) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x717bcc6ed070, count: 242
End of stack trace.
syncing disks...

Crashes (1229):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/26 05:36 openbsd a5986fc34424 7ff32d8b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/26 02:07 openbsd a5986fc34424 7ff32d8b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/25 03:19 openbsd 7c9581f1cd1a cfa969bf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/20 17:47 openbsd b7d02bf002df 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/19 16:27 openbsd e607e174aea6 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/19 09:46 openbsd e607e174aea6 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/18 05:50 openbsd 135881df8fe2 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/17 16:29 openbsd abb34060f546 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/17 02:27 openbsd 2f229140c828 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/16 15:30 openbsd 3cf96d7d154c a3998659 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 11:20 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 08:21 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 06:46 openbsd e83fdb494821 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/14 23:45 openbsd 459bfe6c89ff 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/14 03:37 openbsd 46410a2bd49b 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/13 13:41 openbsd 4abe9ebbcc38 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/13 01:34 openbsd b5f1a9c5e77f 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/12 11:58 openbsd 59d95d307a04 8f6cdf3b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/11 12:08 openbsd 28cce1e713d0 d93a6ab6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 22:38 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 12:24 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 01:54 openbsd 65c91b083cf7 34dab4be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 23:20 openbsd 65c91b083cf7 34dab4be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 15:11 openbsd d89bad393cda c36c07f6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 06:56 openbsd 6f935c329363 656e94c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 04:28 openbsd 6f935c329363 656e94c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/08 11:51 openbsd 1175e773e1a3 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/07 05:39 openbsd 03010b9869bc cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/07 03:42 openbsd 03010b9869bc cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 22:20 openbsd f12de7fa2924 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 12:19 openbsd f12de7fa2924 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 04:10 openbsd ce89dc54e9c4 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 22:19 openbsd ce89dc54e9c4 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 18:23 openbsd ce89dc54e9c4 48b6c3fa .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 16:39 openbsd ce89dc54e9c4 48b6c3fa .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 00:07 openbsd e098f50ba37b 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/04 05:38 openbsd e8e5aa2db9cf 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/03 05:13 openbsd cf839b82e3ec cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/03 00:06 openbsd 3e0a91e6cdcb cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/02 21:12 openbsd d620432c9d9a cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/01 07:13 openbsd ca362689551c cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/31 15:46 openbsd b67053e1736e cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/31 10:42 openbsd b67053e1736e cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/31 05:28 openbsd 6568abc09117 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/30 12:36 openbsd 1e1be23b32e7 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/29 23:39 openbsd 0120f5b67b1e cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/28 17:23 openbsd 56a24c520999 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/27 21:59 openbsd ed6146792872 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/27 04:08 openbsd 51e8ce08d8c9 2b01f00e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/25 16:00 openbsd 61b7e18e5713 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/24 05:37 openbsd 19a448b47c50 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/02/08 12:25 openbsd 2347e6edcd5e ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.