assert "refs != ~NUM" failed in kern_synch.c

Status: upstream: reported on 2025/02/08 12:26
Reported-by: syzbot+bee527c059e64ef8bdec@syzkaller.appspotmail.com
First crash: 538d, last: 14h45m

Sample crash report:
panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 959
Starting stack trace...
panic(ffffffff834bec20) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff834fb934,ffffffff8350b6af,3bf,ffffffff8353439c) at __assert+0x29 sys/kern/subr_prf.c:-1
refcnt_finalize(ffff80003bbbf148,ffffffff834b1125) at refcnt_finalize+0x1e7 sys/kern/kern_synch.c:960
pppx_if_destroy(ffff800037fa4000,ffff80003bbbf140) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794
pppxclose(205b9a,81,2000,ffff80003abb8a80) at pppxclose+0xa0 sys/net/if_pppx.c:541
spec_close(ffff80002a282440) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffff10077e70b38,81,fffff100097fd548,ffff80003abb8a80) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffff1006fda7148,ffff80003abb8a80) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffff1006fda7148,ffff80003abb8a80) at vn_closefile+0x12b sys/kern/vfs_vnops.c:621
fdrop(fffff1006fda7148,ffff80003abb8a80) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff1006fda7148,ffff80003abb8a80) at closef+0x192 sys/kern/kern_descrip.c:1265
sys_closefrom(ffff80003abb8a80,ffff80002a282710,ffff80002a282660) at sys_closefrom+0x13c sys/kern/kern_descrip.c:1471
syscall(ffff80002a282710) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a282710) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x69ca3f11fc0, count: 244
End of stack trace.
syncing disks...

Crashes (1244):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/31 02:17 openbsd aa7f4357c308 0a1bc234 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/29 02:51 openbsd 7c9a09f11f52 19622d9d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/28 23:26 openbsd 7c9a09f11f52 19622d9d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/28 15:37 openbsd e63b2cdac76f 5fe7c56f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/07/27 07:40 openbsd 03525b20a4f0 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/27 01:13 openbsd d2534f409959 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/25 21:26 openbsd d6cf5170b77f 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/25 13:20 openbsd f3d8a5574675 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/21 15:06 openbsd 20200149c668 7c5de9c3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/07/21 00:57 openbsd d55fd7dd01df de6a700d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/20 13:11 openbsd 3406bb49e583 4763fed7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/05 13:43 openbsd e9996feb4a0b fcece630 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/07/01 02:03 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/28 10:03 openbsd 2194060d1c40 fb92f11c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/26 05:36 openbsd a5986fc34424 7ff32d8b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/26 02:07 openbsd a5986fc34424 7ff32d8b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/25 03:19 openbsd 7c9581f1cd1a cfa969bf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/20 17:47 openbsd b7d02bf002df 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/19 16:27 openbsd e607e174aea6 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/19 09:46 openbsd e607e174aea6 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/18 05:50 openbsd 135881df8fe2 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/17 16:29 openbsd abb34060f546 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/17 02:27 openbsd 2f229140c828 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/16 15:30 openbsd 3cf96d7d154c a3998659 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 11:20 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 08:21 openbsd e83fdb494821 c700a26e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/15 06:46 openbsd e83fdb494821 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/14 23:45 openbsd 459bfe6c89ff 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/14 03:37 openbsd 46410a2bd49b 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/13 13:41 openbsd 4abe9ebbcc38 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/13 01:34 openbsd b5f1a9c5e77f 4f06757f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/12 11:58 openbsd 59d95d307a04 8f6cdf3b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/11 12:08 openbsd 28cce1e713d0 d93a6ab6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 22:38 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 12:24 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/10 01:54 openbsd 65c91b083cf7 34dab4be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 23:20 openbsd 65c91b083cf7 34dab4be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 15:11 openbsd d89bad393cda c36c07f6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 06:56 openbsd 6f935c329363 656e94c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/09 04:28 openbsd 6f935c329363 656e94c6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/08 11:51 openbsd 1175e773e1a3 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/07 05:39 openbsd 03010b9869bc cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/07 03:42 openbsd 03010b9869bc cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 22:20 openbsd f12de7fa2924 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 12:19 openbsd f12de7fa2924 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
2026/06/06 04:10 openbsd ce89dc54e9c4 cc095639 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "refs != ~NUM" failed in kern_synch.c
2025/02/08 12:25 openbsd 2347e6edcd5e ef44b750 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "refs != ~NUM" failed in kern_synch.c
* Struck through repros no longer work on HEAD.