syzbot


protection_fault: mtx_enter (4)

Status: upstream: reported on 2026/05/08 21:56
Reported-by: syzbot+4ea0b44b8100f54f8414@syzkaller.appspotmail.com
First crash: 12d, last: 12d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd protection_fault: mtx_enter (3) -1 122 62d 208d 0/3 auto-obsoleted due to no activity on 2026/05/08 14:24
openbsd protection_fault: mtx_enter -1 1 551d 551d 0/3 auto-obsoleted due to no activity on 2025/02/14 01:15
openbsd protection_fault: mtx_enter (2) -1 1 335d 335d 0/3 auto-obsoleted due to no activity on 2025/09/17 09:58

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      mtx_enter+0x6e: movq    0(%r14),%r15
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
mtx_enter(deadbeefdeadbfcf) at mtx_enter+0x6e sys/kern/kern_lock.c:549
prsignal(deadbeefdeadbeef,14) at prsignal+0x36 sys/kern/kern_sig.c:904
reaper(ffff80002a6fd228) at reaper+0x2bc sys/kern/kern_exit.c:516
end trace frame: 0x0, count: -3
ddb> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a733380
rbx                          0x40000    acpi_pdirpa+0x2be71
rdx                                0
rcx               0xffffffff83875ff0    cpu_info_full_primary+0x1ff0
rax               0xffff80002a6fd200
r8                0xffffffffffffffff
r9                                 0
r10               0xfd43712cc8965fc4
r11                0x5a5f0c95c443178
r12               0xdeadbeefdeadbeef
r13                          0x40000    acpi_pdirpa+0x2be71
r14               0xdeadbeefdeadbfcf
r15                                0
rip               0xffffffff81b963fe    mtx_enter+0x6e
cs                               0x8
rflags                       0x10297    __ALIGN_SIZE+0xf297
rsp               0xffff80002a733350
ss                              0x10
mtx_enter+0x6e: movq    0(%r14),%r15
ddb> show proc
PROC (reaper) tid=253937 pid=53247 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=32, usrpri=51, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a6fccf8,0xffff80002a6fd768
    process=0xffff8000ffffc000 user=0xffff80002a72e000, vmspace=0xffffffff839ce6b0
    estcpu=1, cpticks=5, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 89020  360336      0      0  3     0x14280  nfsidl        nfsio
 17437  469402      0      0  3     0x14280  nfsidl        nfsio
 24938  451546      0      0  3     0x14280  nfsidl        nfsio
 27517  285890      0      0  3     0x14280  nfsidl        nfsio
 18237  278420      0      0  3     0x14280  nfsidl        nfsio
 46717   30991      0      0  3     0x14280  nfsidl        nfsio
 34518  184388      0      0  3     0x14280  nfsidl        nfsio
  8399  431579      0      0  3     0x14280  nfsidl        nfsio
 57107  364950  69809      0  2           0                syz-executor
 57107  389951  69809      0  2   0x4000000                syz-executor
 57107   56171  69809      0  2   0x4000000                syz-executor
 63296  103758      0      0  3     0x14280  nfsidl        nfsio
 44128  321050      0      0  3     0x14280  nfsidl        nfsio
 37500   99406      0      0  3     0x14280  nfsidl        nfsio
 80785  366091      0      0  3     0x14280  nfsidl        nfsio
 46291  119639      0      0  3     0x14280  nfsidl        nfsio
 32230   57839      0      0  3     0x14280  nfsidl        nfsio
 36726   63019      0      0  3     0x14280  nfsidl        nfsio
 53229  478492      0      0  3     0x14280  nfsidl        nfsio
 97146  250448      0      0  3     0x14280  nfsidl        nfsio
  8615  177382      0      0  3     0x14280  nfsidl        nfsio
  7652  495317      0      0  3     0x14280  nfsidl        nfsio
 19169  282498  12386      0  3        0x80  nanoslp       syz-executor
 19169    1406  12386      0  2   0x4000000                syz-executor
 19169  135140  12386      0  2   0x4000000                syz-executor
  7639  218438  21356      0  2           0                syz-executor
  7639  236629  21356      0  3   0x4000080  fsleep        syz-executor
  7639  289679  21356      0  2   0x4000000                syz-executor
 90012  359934  19701      0  2        0x10                syz-executor
 90012   16843  19701      0  2   0x4000010                syz-executor
 90012  179328  19701      0  3   0x4000090  fsleep        syz-executor
 94963  494036  44315      0  2           0                syz-executor
 94963  480545  44315      0  3   0x4000080  fsleep        syz-executor
 94963   27599  44315      0  2   0x4000000                syz-executor
 29887  490272   7085      0  2           0                syz-executor
 29887  403024   7085      0  3   0x4000080  fsleep        syz-executor
  7085   80917  34898      0  3        0x82  nanoslp       syz-executor
 94593  301624      0      0  3     0x14200  acct          acct
 21356  518753  34898      0  3        0x82  nanoslp       syz-executor
 19701  295795  34898      0  3        0x82  nanoslp       syz-executor
 44315   91428  34898      0  3        0x82  nanoslp       syz-executor
 69809   67599  34898      0  3        0x82  nanoslp       syz-executor
 20919  187363  34898      0  2         0x2                syz-executor
 94348   32200  34898      0  2         0x2                syz-executor
 12386  493487  34898      0  3        0x82  nanoslp       syz-executor
 34898  174770  79416      0  3        0x82  kqread        syz-executor
 79416  204515  16795      0  3    0x10008a  sigsusp       ksh
 16795   42512  36388      0  3        0x98  kqread        sshd-session
 36388  473308  31216      0  3        0x92  kqread        sshd-session
 35243   54528      1      0  3    0x100083  ttyin         getty
 31216   70768      1      0  3        0x88  kqread        sshd
 74893  462403  23527     73  3   0x1100090  kqread        syslogd
 23527  271321      1      0  3    0x100082  sbwait        syslogd
 49006   31542      1      0  3    0x100080  kqread        resolvd
 75116  347053  50425     77  3    0x100092  kqread        dhcpleased
 78287    1105  50425     77  3    0x100092  kqread        dhcpleased
 50425  438280      1      0  3        0x80  kqread        dhcpleased
 32464   13484      0      0  3     0x14200  bored         smr
  5149  102832      0      0  2     0x14200                zerothread
  8609  349757      0      0  3     0x14200  aiodoned      aiodoned
 68830   44489      0      0  3     0x14200  syncer        update
 19004  245845      0      0  3     0x14200  cleaner       cleaner
*53247  253937      0      0  7     0x14200                reaper
 34739  161425      0      0  3     0x14200  pgdaemon      pagedaemon
 37735  471599      0      0  3     0x14200  bored         viomb
  3256  181110      0      0  3  0x40014200  acpi0         acpi0
 10438  142983      0      0  3     0x14200  bored         softnet0
 39862  195312      0      0  3     0x14200  bored         systqmp
 57847  223310      0      0  3     0x14200  bored         systq
 70478  358692      0      0  3  0x40014200  tmoslp        softclock
 46108  101435      0      0  3  0x40014200                idle0
     1   82182      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11035  12103K   12388K 166960K     12669        0
            pcb    18     12K      12K 166960K        73        0
         rtable   213      6K       9K 166960K       414        0
             pf    30     13K      94K 166960K       461        0
         ifaddr    38      6K       7K 166960K        65        0
        ifgroup    46      2K       2K 166960K        92        0
         sysctl     4      1K       9K 166960K         9        0
       counters    32     17K      18K 166960K        50        0
       ioctlops     0      0K       4K 166960K       104        0
            iov     0      0K      12K 166960K         5        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1329     84K      84K 166960K      1666        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2     20K      24K 166960K         8        0
         VM map     2      1K       1K 166960K         2        0
            sem    10      1K       1K 166960K        10        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       464        0
          sigio     0      0K       0K 166960K         1        0
           proc    60     59K     108K 166960K       557        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        28        0
       in_multi    84      6K       7K 166960K       123        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     0      0K       0K 166960K        17        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       430        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   206    150K     167K 166960K      5717        0
       UVM aobj    12      2K       2K 166960K        14        0
     pinsyscall    38     76K      96K 166960K      1581        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        17        0
            NDP    10      0K       2K 166960K        44        0
           temp    39   9063K    9127K 166960K     18814        0
         kqueue    16     24K      26K 166960K        91        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       53    0       50     1     0     1     1     0     8    0
rtentry    136      125    0       28     4     0     4     4     0     8    0
unpcb      144      149    0      134     1     0     1     1     0     8    0
syncache   336        6    0        6     2     1     1     1     0     8    1
tcpcb      736       93    0       88     1     0     1     1     0     8    0
arp         96       21    0        4     1     0     1     1     0     8    0
inpcb      328      326    0      315     5     1     4     4     0     8    2
nd6        112       27    0        8     1     0     1     1     0     8    0
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1072      12    0       12     1     1     0     1     0     8    0
pfstscr     40        4    0        4     1     1     0     1     0     8    0
pffrag     232        3    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        7    0        3     1     0     1     1     0     8    0
pfrktable  1344       6    0        6     1     1     0     1     0     8    0
pfsrclim   320        1    0        1     1     1     0     1     0     8    0
pfanchor   1288      74    0       11     6     0     6     6     0     8    0
pftag       88       11    0        9     1     0     1     1     0     8    0
pfqueue    320        2    0        1     1     0     1     1     0     8    0
pfstkey    128        2    0        2     1     1     0     1     0     8    0
pfstate    384        2    0        2     1     1     0     1     0     8    0
pfrule     1360      18    0       18     2     1     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      502    0      104    29     1    28    29     0     8    2
art_table   40      503    0      104     5     0     5     5     0     8    0
art_node    32      125    0       37     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        1     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112        8    0        0     1     0     1     1     0     8    0
shmpl      112       11    0        2     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     2110    0      652    92     0    92    92     0     8    0
ffsino     256     2110    0      652    92     0    92    92     0     8    0
nchpl      144     2768    0     1072    64     0    64    64     0     8    0
vnodes     216     2396    0        0   134     0   134   134     0     8    0
namei      1024    8517    0     8517     2     1     1     2     0     8    1
pfiaddrpl  120        2    0        2     1     1     0     1     0     8    0
kstatmem   264       53    0       32     2     0     2     2     0     8    0
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216     8636    0     8636     3     2     1     3     1     8    1
plimitpl   152       71    0       55     1     0     1     1     0     8    0
sigapl     424      775    0      713     8     1     7     7     0     8    0
knotepl    120    16183    0    16112    15     7     8    10     0     8    5
kqueuepl   184      212    0      201     4     3     1     4     0     8    0
pipepl     304      147    0      119     3     0     3     3     0     8    0
fdescpl    448      742    0      713     5     1     4     5     0     8    0
filepl     120     3300    0     3083    10     2     8     9     0     8    0
lockfpl    104      137    0      135     1     0     1     1     0     8    0
lockfspl    48       62    0       60     1     0     1     1     0     8    0
sessionpl  144       97    0       89     1     0     1     1     0     8    0
pgrppl      48      111    0       95     1     0     1     1     0     8    0
ucredpl    104      454    0      440     1     0     1     1     0     8    0
zombiepl   144      766    0      766     1     0     1     1     0     8    1
processpl  1152     775    0      713     5     0     5     5     0     8    0
procpl     664     1258    0     1185     9     0     9     9     0     8    2
sosppl     176        3    0        3     1     1     0     1     0     8    0
sockpl     552      540    0      511     5     0     5     5     0     8    2
mcl64k     65536     52    0       52     2     1     1     1     0     8    1
mcl16k     16384      5    0        5     2     1     1     1     0     8    1
mcl9k128   9344       1    0        1     1     1     0     1     0     8    0
mcl8k      8192      11    0       11     2     1     1     1     0     8    1
mcl4k      4096    2967    0     2912    15     7     8    15     0     8    0
mcl2k      2048     443    0      441     2     1     1     1     0     8    0
mtagpl      96        7    0        4     1     0     1     1     0     8    0
mbufpl     256     7227    0     7071    12     1    11    12     0     8    0
bufpl      280     2947    0      103   204     0   204   204     0     8    0
anonpl      24   121428    0   118302    32     0    32    32     0   187    8
amapchunkpl 152   17988    0    17577    38    14    24    34     0   158    3
amappl16   200     2034    0     2006     5     2     3     5     0     8    0
amappl15   192       69    0       69     1     1     0     1     0     8    0
amappl14   184      439    0      438     1     0     1     1     0     8    0
amappl13   176      113    0      103     1     0     1     1     0     8    0
amappl12   168     1006    0      979     2     0     2     2     0     8    0
amappl11   160        6    0        6     1     1     0     1     0     8    0
amappl10   152       88    0       78     1     0     1     1     0     8    0
amappl9    144      273    0      273     1     1     0     1     0     8    0
amappl8    136      101    0      100     1     0     1     1     0     8    0
amappl7    128      147    0      136     1     0     1     1     0     8    0
amappl6    120      162    0      160     1     0     1     1     0     8    0
amappl5    112       89    0       81     1     0     1     1     0     8    0
amappl4    104      257    0      240     1     0     1     1     0     8    0
amappl3     96     3534    0     3434     4     0     4     4     0     8    0
amappl2     88      518    0      461     2     0     2     2     0     8    0
amappl1     80    10416    0     9862    14     2    12    14     0     8    0
amappl      88     4957    0     4815     6     1     5     5     0    92    0
uvmvnodes   80      104    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma2048    2048       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       13    0        2     1     0     1     1     0     8    0
uaddrrnd    24      741    0      713     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      741    0      713     1     0     1     1     0     8    0
vmmpekpl   168     7285    0     7242     3     0     3     3     0     8    0
vmmpepl    168    53486    0    51745    84     1    83    83     0   357    2
vmsppl     368      741    0      713     4     1     3     4     0     8    0
rwobjpl     40    16878    0    15930    11     0    11    11     0     8    0
pdppl      4096    1488    0     1426   102    36    66    80     0     8    4
pvpl        32   319093    0   310525   100     3    97    97     0   265   16
pmappl     216      740    0      713     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      374    0       57    10     0    10    10     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
mtx_enter(deadbeefdeadbfcf) at mtx_enter+0x6e sys/kern/kern_lock.c:549
prsignal(deadbeefdeadbeef,14) at prsignal+0x36 sys/kern/kern_sig.c:904
reaper(ffff80002a6fd228) at reaper+0x2bc sys/kern/kern_exit.c:516
end trace frame: 0x0, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
mtx_enter(deadbeefdeadbfcf) at mtx_enter+0x6e sys/kern/kern_lock.c:549
prsignal(deadbeefdeadbeef,14) at prsignal+0x36 sys/kern/kern_sig.c:904
reaper(ffff80002a6fd228) at reaper+0x2bc sys/kern/kern_exit.c:516
end trace frame: 0x0, count: -3

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/08 21:55 openbsd 34e7bded0e8b 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: mtx_enter
* Struck through repros no longer work on HEAD.