kernel panic at /syzkaller/managers/main/kernel/kern/include/kref.h:68, from core 3: assertion failed: kref_refcnt(kref) > 0 Stack Backtrace on Core 3: #01 [<0xffffffffc200a3ac>] in backtrace at src/kdebug.c:229 #02 [<0xffffffffc2009b3d>] in _panic at src/init.c:268 #03 [<0xffffffffc203132b>] in kref_put at include/kref.h:68 #04 [<0xffffffffc20319e8>] in cclose at src/ns/chan.c:333 #05 [<0xffffffffc2033d8c>] in __namec_from at src/ns/chan.c:1397 #06 [<0xffffffffc20341af>] in namec at src/ns/chan.c:1516 #07 [<0xffffffffc203d9dc>] in syssymlink at src/ns/sysfile.c:492 #08 [<0xffffffffc20562b2>] in sys_symlink at src/syscall.c:1943 #09 [<0xffffffffc2059f59>] in syscall at src/syscall.c:2465 #10 [<0xffffffffc205a124>] in run_local_syscall at src/syscall.c:2500 #11 [<0xffffffffc205a659>] in prep_syscalls at src/syscall.c:2520 #12 [<0xffffffffc20ac10a>] in sysenter_callwrapper at arch/x86/trap.c:854 Args: 0x0000000020000000, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000 kernel panic at kern/src/ns/chan.c:331, from core 2: cclose 0x0000000000000000 Stack Backtrace on Core 2: #01 [<0xffffffffc200a3ac>] in backtrace at src/kdebug.c:229 #02 [<0xffffffffc2009b3d>] in _panic at src/init.c:268 #03 [<0xffffffffc2031a0a>] in cclose at src/ns/chan.c:331 #04 [<0xffffffffc20333e9>] in walk_symlink at src/ns/chan.c:1702 #05 [<0xffffffffc20333d4>] in walk_symlink at src/ns/chan.c:1700 #06 [<0xffffffffc20333d4>] in walk_symlink at src/ns/chan.c:1700 #07 [<0xffffffffc20333d4>] in walk_symlink at src/ns/chan.c:1700 #08 [<0xffffffffc20333d4>] in walk_symlink at src/ns/chan.c:1700 #09 [<0xffffffffc20333d4>] in walk_symlink at src/ns/chan.c:1700 #10 [<0xffffffffc2032ef2>] in walk at src/ns/chan.c:871 #11 [<0xffffffffc20335c9>] in __namec_from at src/ns/chan.c:1138 #12 [<0xffffffffc20341af>] in namec at src/ns/chan.c:1516 #13 [<0xffffffffc203e02d>] in sysrename at src/ns/sysfile.c:871 #14 [<0xffffffffc2056732>] in sys_rename at src/syscall.c:2286 #15 [<0xffffffffc2059f59>] in syscall at src/syscall.c:2465 #16 [<0xffffffffc205a124>] in run_local_syscall at src/syscall.c:2500 #17 [<0xffffffffc205a659>] in prep_syscalls at src/syscall.c:2520 #18 [<0xffffffffc20ac10a>] in sysenter_callwrapper at arch/x86/trap.c:854 SW TRAP frame (partial) at 0xffffffffc89a9ee0 on core 1 rbx 0x000030000003ce00 rbp 0x000030000003cef0 r12 0x0000000000000000 r13 0x0000000000485646 r14 0x00000000004871b8 r15 0x0000000000000000 ROS(Core 3)> gsbs 0x0000000000000000 fsbs 0x0000000000000000 rip 0x00000000004373be rsp 0x000030000003cd20 mxcsr 0x00001f80 fpucw 0x037f