syzbot


freebsd test error: panic: _proc_set_cred: ref NUM not NUM on cred ADDR

Status: fixed on 2025/11/06 16:30
Reported-by: syzbot+74624c6fcbb384ea0113@syzkaller.appspotmail.com
Fix commit: d7a138207fa4 Revert "kern: RACCT: Keep process credentials alive via references"
First crash: 104d, last: 103d

Sample crash report:
panic: _proc_set_cred: ref 2 not 1 on cred 0xfffffe0007685480
cpuid = 0
time = 1762439759
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056e90790
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056e908f0
vpanic() at vpanic+0x257/frame 0xfffffe0056e90ab0
panic() at panic+0xb5/frame 0xfffffe0056e90b80
_proc_set_cred() at _proc_set_cred+0x307/frame 0xfffffe0056e90bf0
proc_set_cred() at proc_set_cred+0x1f/frame 0xfffffe0056e90c10
sys_setloginclass() at sys_setloginclass+0x18a/frame 0xfffffe0056e90d10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056e90f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056e90f30
--- syscall (524, FreeBSD ELF64, setloginclass), rip = 0x24da6a, rsp = 0x820f95ae8, rbp = 0x820f95b70 ---
KDB: enter: panic
[ thread pid 17 tid 100085 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25897e7(%rip)
db> 

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/06 14:44 freebsd-src 26e7e9a6a2a2 a6c9c731 console log report ci-freebsd-main freebsd test error: panic: _proc_set_cred: ref NUM not NUM on cred ADDR
2025/11/06 12:24 freebsd-src 2a8a6179eb6c a6c9c731 console log report ci-freebsd-main freebsd test error: panic: _proc_set_cred: ref NUM not NUM on cred ADDR
2025/11/06 14:00 freebsd-src 26e7e9a6a2a2 a6c9c731 console log report ci-freebsd-i386 freebsd test error: panic: _proc_set_cred: ref NUM not NUM on cred ADDR
2025/11/06 11:41 freebsd-src 2a8a6179eb6c a6c9c731 console log report ci-freebsd-i386 freebsd test error: panic: _proc_set_cred: ref NUM not NUM on cred ADDR
* Struck through repros no longer work on HEAD.