syzbot


assert "refs != ~NUM" failed in kern_synch.c

Status: upstream: reported on 2025/02/08 12:26
Reported-by: syzbot+bee527c059e64ef8bdec@syzkaller.appspotmail.com
First crash: 314d, last: 1h56m

Sample crash report:
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955
Starting stack trace...
panic(ffffffff833b6f64) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833f19a0,ffffffff834015a6,3bb,ffffffff8342c0ab) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff80002f7c2f18,ffffffff833a5078) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956
pppx_if_destroy(ffff8000373ec000,ffff80002f7c2f10) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794
pppxclose(205b9a,2,2000,ffff8000fffee2b0) at pppxclose+0xa0 sys/net/if_pppx.c:541
spec_close(ffff80002a32ebc0) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806e92f640,2,fffffd80097fd6e8,ffff8000fffee2b0) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd80606f6ec8,ffff8000fffee2b0) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd80606f6ec8,ffff8000fffee2b0) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd80606f6ec8,ffff8000fffee2b0) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd80606f6ec8,ffff8000fffee2b0) at closef+0x192 sys/kern/kern_descrip.c:1264
syscall(ffff80002a32ee20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a32ee20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc7f73902bb0, count: 245
End of stack trace.

Crashes (913):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/20 07:50 openbsd ddef1afac53e e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/20 01:41 openbsd ddef1afac53e e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/19 23:25 openbsd d11ef3f2eb06 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/19 20:40 openbsd d11ef3f2eb06 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/19 18:31 openbsd d11ef3f2eb06 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/19 04:13 openbsd 3f23c8878a83 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/19 02:45 openbsd 3f23c8878a83 e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/18 18:27 openbsd 10e7775f0707 d6d0fdea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/18 10:33 openbsd 10e7775f0707 d6d0fdea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/18 06:05 openbsd 10e7775f0707 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/18 04:54 openbsd 10e7775f0707 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/18 01:40 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/17 23:24 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/17 19:45 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/17 13:45 openbsd 3a6d4b98bde9 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/17 09:51 openbsd 3a6d4b98bde9 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/17 03:15 openbsd 3a6d4b98bde9 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/17 00:48 openbsd 11531c4859ff a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/16 22:08 openbsd 11531c4859ff a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/16 20:39 openbsd 11531c4859ff a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/16 15:13 openbsd 11531c4859ff a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/16 13:12 openbsd 11531c4859ff a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/16 09:19 openbsd e03bf016d023 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/16 00:14 openbsd e03bf016d023 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/15 21:21 openbsd 2c50c5af38ad a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/15 17:29 openbsd 2c50c5af38ad a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/15 16:10 openbsd 2c50c5af38ad a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/15 03:15 openbsd b46de5080dd7 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/15 01:44 openbsd b46de5080dd7 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/14 00:26 openbsd 6c2671e4e6d0 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/13 20:41 openbsd 6c2671e4e6d0 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/13 11:52 openbsd b6e97387bb5b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/13 08:57 openbsd b6e97387bb5b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/13 07:21 openbsd b6e97387bb5b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/12 22:43 openbsd ba79eea579e1 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/12 21:40 openbsd ba79eea579e1 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/12 18:58 openbsd ba79eea579e1 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/12 06:21 openbsd 6168265ddf60 a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/11 13:24 openbsd a762189c5efb a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/10 06:12 openbsd f5c5b16722b5 48b27acc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/09 15:28 openbsd 9bea02201100 fc20f974 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/09 07:17 openbsd bf8f637750de fc20f974 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/12/08 22:57 openbsd c5b72cc0187d fc20f974 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/12/08 20:51 openbsd c5b72cc0187d fc20f974 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2025/02/08 12:25 openbsd 2347e6edcd5e ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.