syzbot


assert "refs != ~NUM" failed in kern_synch.c

Status: upstream: reported on 2025/02/08 12:26
Reported-by: syzbot+bee527c059e64ef8bdec@syzkaller.appspotmail.com
First crash: 156d, last: 7h20m

Sample crash report:
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 951
Starting stack trace...
panic(ffffffff834358e3) at panic+0x1ba sys/kern/subr_prf.c:229
__assert(ffffffff833dfa57,ffffffff8332afbf,3b7,ffffffff833e3d20) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff80002a8b30c0,ffffffff8332ed97) at refcnt_finalize+0x1c8 sys/kern/kern_synch.c:952
pppx_if_destroy(0,ffff80002a8b30b8) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794
pppxclose(205b92,41,2000,ffff80002a7bcpckbd_enable: co7mmand error
#!c ������*A��/9ä8æ˜1ÛñV���
pck)bd_enable: comma nd error
pckbda_enable: commandt error
pckbd_e nable: command eprror
pppx: unapble to set addrepsses for pppx1, xerror=17
deniecd attempt to setl clock back 2 seoconds
pckbd_ensable: command ereror
pckbd_enab+le: command erro0r
pckbd_enablex: command errora
pppx: unable t0o set addresses 
for pppx1, error=17
pckbd_enable: command errosr
pckbd_enablep: command errore
pppx: unable tco set addresses _for pppx1, errorc=17
pppx: unablle to set addresoses for pppx1, esrror=17
fuse: eCannot find fuse(buf
denied attfempt to set clocfk back 159383573f seconds
mallofc(): allocation 8too large, type 0= 6, size = 561003010304
pppx: 0unable to set ad3dresses for pppxc1, error=17
pc9kbd_enable: comm5and error
pppxa: unable to set caddresses for pp0px1, error=17
0pppx: unable to )set addresses fo r pppx2, error=1a7

t spec_close+0x412
VOP_CLOSE(fffffd80681ebcc0,41,fffffd8007bfb680,ffff80002a7bc7c8) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156
vn_closefile(fffffd806b54b4c0,ffff80002a7bc7c8) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806b54b4c0,ffff80002a7bc7c8) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd806b54b4c0,ffff80002a7bc7c8) at fdrop+0x126 sys/kern/kern_descrip.c:1267
closef(fffffd806b54b4c0,ffff80002a7bc7c8) at closef+0x18d sys/kern/kern_descrip.c:1251
fdfree(ffff80002a7bc7c8) at fdfree+0x115 sys/kern/kern_descrip.c:1182
exit1(ffff80002a7bc7c8,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc7c8,ffff80003c95af70,ffff80003c95aec0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95af70) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95af70) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71ac20525640, count: 242
End of stack trace.
syncing disks...set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace

Crashes (274):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/14 05:14 openbsd 40f26cfbae82 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/12 22:44 openbsd 2fd78fb00a47 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/12 20:42 openbsd 2fd78fb00a47 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/12 19:30 openbsd 2fd78fb00a47 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/12 17:31 openbsd 2fd78fb00a47 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/12 07:48 openbsd b3bc833acc6a 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/11 23:00 openbsd 904c37accb58 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/11 03:54 openbsd 0b4ddc31a5ae 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/10 12:42 openbsd 3cb786741c54 d7384b6d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/10 11:25 openbsd 3cb786741c54 d7384b6d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/10 01:46 openbsd e91e1a12e0dd 956bd956 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/09 12:47 openbsd bc55f572b2c5 f4e5e155 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/09 05:02 openbsd bc55f572b2c5 f4e5e155 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/08 00:21 openbsd f9ed96d1a841 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/07 01:48 openbsd 1a059e88663d 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/06 11:49 openbsd f2b2329d6987 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/06 06:45 openbsd f2b2329d6987 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/06 01:17 openbsd 0168633b2ab2 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/05 06:54 openbsd 184f8edada4a 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/04 03:25 openbsd 2c6e3f429092 76ad128c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/03 11:09 openbsd 0c66559787bc 39f27708 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/01 23:11 openbsd c56681b2e09c 091a06cd .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/07/01 08:14 openbsd 03190a0c50a7 6e83b42d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/07/01 03:56 openbsd 76905433011a 6e83b42d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/30 21:45 openbsd 76905433011a 6e83b42d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/30 18:56 openbsd 76905433011a 6e83b42d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/29 22:26 openbsd b4d1cb14c459 fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/29 18:09 openbsd b4d1cb14c459 fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/29 12:33 openbsd 31aef2a8f397 fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/29 11:50 openbsd 31aef2a8f397 fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/28 16:51 openbsd fd1ffb313c1e fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/28 11:28 openbsd fd1ffb313c1e fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/28 03:48 openbsd d7bdfee22977 fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/27 00:56 openbsd 69432c0dafb3 803ce19b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/26 18:47 openbsd 0f21a7ba35b8 1ae8177e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/26 16:29 openbsd 0f21a7ba35b8 1ae8177e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/25 22:14 openbsd c04c22679fb3 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/25 18:13 openbsd 31f40ba00147 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/25 14:15 openbsd 31f40ba00147 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/25 04:12 openbsd b3c44d07fb7e 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/25 03:11 openbsd b3c44d07fb7e 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/24 23:34 openbsd b3c44d07fb7e 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/24 04:40 openbsd 9729c53212e0 1a7fb460 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/06/23 09:07 openbsd bfd2b5c81cd0 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/22 08:39 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/06/22 05:48 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/02/08 12:25 openbsd 2347e6edcd5e ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.