syzbot


assert "refs > NUM" failed in kern_synch.c

Status: upstream: reported on 2025/09/09 19:41
Reported-by: syzbot+e0d831b30701aaff71bd@syzkaller.appspotmail.com
First crash: 176d, last: 23d

Sample crash report:
panic: kernel diagnostic assertion "refs > 1" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 920
Starting stack trace...
panic(ffffffff83377691) at panic+0x1ba sys/kern/subr_prf.c:229
__assert(ffffffff833ba2c6,ffffffff83416de6,398,ffffffff83383791) at __assert+0x29 sys/kern/subr_prf.c:-1
refc
nt_take(ffff800001598808) at refcnt_take+0xf9 sys/kern/kern_synch.c:921
if_getgroupmembers(ffff800036103170) at if_getgroupmembers+0x11d sys/net/if.c:3255
sys_ioctl(ffff80003c9d74f0,ffff800036103340,ffff800036103290) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff800036103340) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff800036103340) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78ba6e7e7f0, count: 250
End of stack trace.
syncing disks...set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/09 07:36 openbsd e6ae0557afc8 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs > NUM" failed in kern_synch.c
2026/01/26 07:23 openbsd 401b985036af 55756628 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs > NUM" failed in kern_synch.c
2025/11/30 12:16 openbsd 0086034dedf2 01c07bfe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs > NUM" failed in kern_synch.c
2025/10/23 11:36 openbsd 22e0e8faf4c6 c0460fcd .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs > NUM" failed in kern_synch.c
2025/09/09 19:40 openbsd 3efab2192dd6 fdeaa69b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs > NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.