syzbot


assert "refs != ~NUM" failed in kern_synch.c

Status: upstream: reported on 2025/02/08 12:26
Reported-by: syzbot+bee527c059e64ef8bdec@syzkaller.appspotmail.com
First crash: 501d, last: 7h08m

Sample crash report:
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 959
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 307745  57371      0           0          0    0  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834be3aa) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff834f98d9,ffffffff835044e8,3bf,ffffffff8352cc4c) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff80003c3cb770,ffffffff834b50b0) at refcnt_finalize+0x1e7 sys/kern/kern_synch.c:960
pppx_if_destroy(0,ffff80003c3cb768) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794
pppxclose(205b9a,1,2000,ffff80003c3c6560) at pppxclose+0xa0 sys/net/if_pppx.c:541
spec_close(ffff80003b7b2b10) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffff9006b6e6a80,1,fffff900097fd270,ffff80003c3c6560) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffff9006a35f2c0,ffff80003c3c6560) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffff9006a35f2c0,ffff80003c3c6560) at vn_closefile+0x12b sys/kern/vfs_vnops.c:621
fdrop(fffff9006a35f2c0,ffff80003c3c6560) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff9006a35f2c0,ffff80003c3c6560) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff80003c3c6560) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff80003c3c6560,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003c3c6560,ffff80003b7b2e80,ffff80003b7b2dd0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
end trace frame: 0xffff80003b7b2e70, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 959
ddb{1}> 

Crashes (1227):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/25 03:19 openbsd 7c9581f1cd1a cfa969bf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/20 17:47 openbsd b7d02bf002df 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/19 16:27 openbsd e607e174aea6 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/19 09:46 openbsd e607e174aea6 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/18 05:50 openbsd 135881df8fe2 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/17 16:29 openbsd abb34060f546 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/17 02:27 openbsd 2f229140c828 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/16 15:30 openbsd 3cf96d7d154c a3998659 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 11:20 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 08:21 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 06:46 openbsd e83fdb494821 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/14 23:45 openbsd 459bfe6c89ff 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/14 03:37 openbsd 46410a2bd49b 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/13 13:41 openbsd 4abe9ebbcc38 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/13 01:34 openbsd b5f1a9c5e77f 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/12 11:58 openbsd 59d95d307a04 8f6cdf3b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/11 12:08 openbsd 28cce1e713d0 d93a6ab6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 22:38 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 12:24 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 01:54 openbsd 65c91b083cf7 34dab4be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 23:20 openbsd 65c91b083cf7 34dab4be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 15:11 openbsd d89bad393cda c36c07f6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 06:56 openbsd 6f935c329363 656e94c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 04:28 openbsd 6f935c329363 656e94c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/08 11:51 openbsd 1175e773e1a3 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/07 05:39 openbsd 03010b9869bc cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/07 03:42 openbsd 03010b9869bc cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 22:20 openbsd f12de7fa2924 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 12:19 openbsd f12de7fa2924 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 04:10 openbsd ce89dc54e9c4 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 22:19 openbsd ce89dc54e9c4 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 18:23 openbsd ce89dc54e9c4 48b6c3fa .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 16:39 openbsd ce89dc54e9c4 48b6c3fa .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/05 00:07 openbsd e098f50ba37b 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/04 05:38 openbsd e8e5aa2db9cf 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/03 05:13 openbsd cf839b82e3ec cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/03 00:06 openbsd 3e0a91e6cdcb cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/02 21:12 openbsd d620432c9d9a cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/01 07:13 openbsd ca362689551c cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/31 15:46 openbsd b67053e1736e cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/31 10:42 openbsd b67053e1736e cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/31 05:28 openbsd 6568abc09117 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/30 12:36 openbsd 1e1be23b32e7 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/29 23:39 openbsd 0120f5b67b1e cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/28 17:23 openbsd 56a24c520999 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/27 21:59 openbsd ed6146792872 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/27 04:08 openbsd 51e8ce08d8c9 2b01f00e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/05/25 16:00 openbsd 61b7e18e5713 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/05/24 05:37 openbsd 19a448b47c50 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/02/08 12:25 openbsd 2347e6edcd5e ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.