From 56c960d3d4962aa91cd9d301789b2875f5349a8c Mon Sep 17 00:00:00 2001
From: Taylor R Campbell <riastradh@NetBSD.org>
Date: Mon, 31 Jan 2022 01:22:08 +0000
Subject: [PATCH 32/36] specfs: Assert opencnt is nonzero before decrementing.

---
 sys/miscfs/specfs/spec_vnops.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/sys/miscfs/specfs/spec_vnops.c b/sys/miscfs/specfs/spec_vnops.c
index 6c0be749a2bd..2cc46c0c3f97 100644
--- a/sys/miscfs/specfs/spec_vnops.c
+++ b/sys/miscfs/specfs/spec_vnops.c
@@ -942,6 +942,8 @@ spec_open(void *v)
 			KASSERT(sn->sn_opencnt == 1);
 			needclose = true;
 		} else {
+			KASSERT(sd->sd_opencnt);
+			KASSERT(sn->sn_opencnt);
 			sd->sd_opencnt--;
 			sn->sn_opencnt--;
 			if (vp->v_type == VBLK)
@@ -1645,6 +1647,8 @@ spec_close(void *v)
 	 * between open and close can use fd_clone.
 	 */
 	mutex_enter(&device_lock);
+	KASSERT(sn->sn_opencnt);
+	KASSERT(sd->sd_opencnt);
 	sn->sn_opencnt--;
 	count = --sd->sd_opencnt;
 	if (vp->v_type == VBLK) {