panic: chgproccnt: procs < NUM

Status: upstream: reported on 2025/02/22 06:58
Reported-by: syzbot+265d5006dac2f45c9e9d@syzkaller.appspotmail.com
First crash: 595d, last: 5d01h

Sample crash report:
panic: chgproccnt: procs < 0
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 503038   9368      0        0x10          0    1  syz-executor
*324115   9368      0        0x10  0x4000000    0K syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8355df8b) at panic+0x1e5 sys/kern/subr_prf.c:198
chgproccnt(ee00,ffffffff) at chgproccnt+0xcc
sys_setuid(ffff80002a22c7d8,ffff80002a3183c0,ffff80002a318310) at sys_setuid+0x2d9 sys/kern/kern_prot.c:746
syscall(ffff80002a3183c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a3183c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe018bbed580, count: 9
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: chgproccnt: procs < 0
ddb{0}> 

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/05 15:13 openbsd fe7391f28055 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/07/23 13:29 openbsd 6c9531571979 71a13572 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/07/11 19:33 openbsd bdda9179e659 d78ea535 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/07/05 21:32 openbsd 549eb3d3b3c2 fcece630 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/07/02 22:56 openbsd 5420d8a5f716 2b70b115 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/06/23 12:13 openbsd a7fbd22dd6cd 4b1d8f01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2026/06/17 11:11 openbsd 2f229140c828 62cc6db3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/06/10 12:48 openbsd 01c8afc2223d f79bac11 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2026/05/23 22:06 openbsd 19a8be4fa5c4 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/05/11 18:40 openbsd 9c5367037e8c 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2026/04/26 21:07 openbsd 443952c09f98 9c2d0995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2026/04/18 09:57 openbsd a9044055e1bf 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/04/17 12:45 openbsd 2dd8b2a80c95 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/03/27 00:28 openbsd 9c6370df4fcd 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2026/03/24 06:56 openbsd 2084961b940b baf8bf12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/03/22 13:46 openbsd 67e6794a9e1c 5b92003d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2026/01/24 12:14 openbsd 652212f689da 40acda8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2025/11/27 22:07 openbsd 7de01a79e4ba e8331348 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2025/11/16 02:48 openbsd 42d4ce758e42 f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: chgproccnt: procs < NUM
2025/08/26 13:20 openbsd d9624900b8bd bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2025/06/18 01:39 openbsd 7cbb080c3e94 e77fae15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2025/05/17 15:40 openbsd 007267a8c99a f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2025/05/12 09:11 openbsd 1d7d4b26237d 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
2025/02/22 06:57 openbsd 6a403588e274 d34966d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: chgproccnt: procs < NUM
* Struck through repros no longer work on HEAD.