syzbot


protection_fault: mtx_enter

Status: upstream: reported on 2024/11/16 01:15
Reported-by: syzbot+e6a0c6877499432bd1b6@syzkaller.appspotmail.com
First crash: 5d17h, last: 5d17h

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      mtx_enter+0x59: movq    0(%r14),%rax
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
mtx_enter(deadbeefdeadbfd7) at mtx_enter+0x59 sys/kern/kern_lock.c:303
prsignal(deadbeefdeadbeef,14) at prsignal+0x36 sys/kern/kern_sig.c:901
reaper(ffff80002a457be0) at reaper+0x30c sys/kern/kern_exit.c:489
end trace frame: 0x0, count: -3
ddb> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a455d80
rbx                                0
rdx                                0
rcx               0xffffffff83431ff0    cpu_info_full_primary+0x1ff0
rax               0xffff80002a457be0
r8                0xffffffffffffffff
r9                                 0
r10               0xacc5df8114cf78fb
r11               0xf74b99cf7905a47c
r12                                0
r13               0xffff80002a457be0
r14               0xdeadbeefdeadbfd7
r15                                0
rip               0xffffffff812fea99    mtx_enter+0x59
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002a455d50
ss                              0x10
mtx_enter+0x59: movq    0(%r14),%rax
ddb> show proc
PROC (reaper) tid=200992 pid=67083 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a40d1b8,0xffff80002a4571d0
    process=0xffff8000ffffef18 user=0xffff80002a450000, vmspace=0xffffffff83562368
    estcpu=0, cpticks=0, pctcpu=0.19, user=0, sys=62, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 76500  416510      0      0  3     0x14280  nfsidl        nfsio
 82764  207860      0      0  3     0x14280  nfsidl        nfsio
 30651  148708  16729      0  2           0                syz-executor
 30651  354823  16729      0  2   0x4000000                syz-executor
 93529   66721  68880      0  2           0                syz-executor
 93529   84466  68880      0  2   0x4000000                syz-executor
 93529   14855  68880      0  2   0x4000000                syz-executor
 93529  422026  68880      0  2   0x4000000                syz-executor
 27246  497865  84724      0  2           0                syz-executor
 27246   42113  84724      0  3   0x4000080  fsleep        syz-executor
 27246  436659  84724      0  2   0x4000000                syz-executor
 27605  427858  53637      0  2           0                syz-executor
 27605  131586  53637      0  3   0x4000080  netcon        syz-executor
 27605  431828  53637      0  2   0x4000000                syz-executor
 27605   82236  53637      0  3   0x4000080  fsleep        syz-executor
 90622  163234  10085      0  2        0x10                syz-executor
 90622  303345  10085      0  3   0x4000090  sysctllk      syz-executor
 10085  505147  34713      0  3        0x82  nanoslp       syz-executor
 84724  380293  34713      0  3        0x82  nanoslp       syz-executor
 75672   26628  34713      0  2         0x2                syz-executor
 46051   10178      0      0  3     0x14200  bored         sosplice
 71638  186391      0      0  3     0x14200  acct          acct
 53637  227905  34713      0  3        0x82  nanoslp       syz-executor
 91344  297579  34713      0  2         0x2                syz-executor
 68880  143343  34713      0  3        0x82  nanoslp       syz-executor
 16729  264314  34713      0  3        0x82  nanoslp       syz-executor
 44237  464627  34713      0  3         0x2  biowait       syz-executor
 34713   34232  93311      0  2         0x2                syz-executor
 93311  338913  30580      0  3    0x10008a  sigsusp       ksh
 30580  158332  48107      0  3        0x98  kqread        sshd-session
 48107  115589  63922      0  3        0x92  kqread        sshd-session
 26736  347022      1      0  3    0x100083  ttyin         getty
 63922  253493      1      0  3        0x88  kqread        sshd
 70467  247696  67411     73  3   0x1100090  kqread        syslogd
 67411  255009      1      0  3    0x100082  sbwait        syslogd
 71562  400686      1      0  3    0x100080  kqread        resolvd
 79159  237606  19773     77  3    0x100092  kqread        dhcpleased
 97524  113279  19773     77  3    0x100092  kqread        dhcpleased
 19773  475652      1      0  3        0x80  kqread        dhcpleased
 15665  505982      0      0  3     0x14200  bored         smr
 63798  244560      0      0  2     0x14200                zerothread
  3810  455048      0      0  3     0x14200  aiodoned      aiodoned
 62498  350076      0      0  3     0x14200  syncer        update
 51725  524133      0      0  3     0x14200  cleaner       cleaner
*67083  200992      0      0  7     0x14200                reaper
 45033  132495      0      0  3     0x14200  pgdaemon      pagedaemon
 24646  118281      0      0  3     0x14200  bored         viomb
  8211   40153      0      0  3  0x40014200  acpi0         acpi0
 28397  457867      0      0  3     0x14200  bored         softnet3
 21185  213274      0      0  3     0x14200  bored         softnet2
 60493  240035      0      0  3     0x14200  bored         softnet1
 35682  340477      0      0  3     0x14200  bored         softnet0
 50868   44501      0      0  3     0x14200  bored         systqmp
 16827  392728      0      0  3     0x14200  bored         systq
 21853  453625      0      0  3  0x40014200  tmoslp        softclock
 25099   90142      0      0  3  0x40014200                idle0
     1  398182      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10197  11045K   11500K 166960K     11658        0
            pcb    19     16K      17K 166960K       204        0
         rtable   222      8K       8K 166960K       556        0
             pf    32     13K      15K 166960K        73        0
         ifaddr    37      6K       7K 166960K        76        0
        ifgroup    46      2K       2K 166960K        95        0
         sysctl     2      0K       2K 166960K         3        0
       counters    29     17K      17K 166960K        44        0
       ioctlops     0      0K       4K 166960K        87        0
            iov     0      0K      16K 166960K        47        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1399     88K      88K 166960K      1807        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      2K       9K 166960K        18        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        33        0
        dirhash    12      2K       2K 166960K        24        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    16     57K      97K 166960K       857        0
          sigio     0      0K       0K 166960K        14        0
           proc    60     59K     124K 166960K       646        0
        subproc   104      6K       6K 166960K       156        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        92        0
       in_multi    87      6K       7K 166960K       174        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     0      0K       0K 166960K         2        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   229   1023K    1023K 166960K       229        0
           exec     0      0K       1K 166960K       500        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   209     71K      90K 166960K      9431        0
       UVM aobj    15      2K       2K 166960K        16        0
     pinsyscall    37     74K     100K 166960K      1989        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        34        0
            NDP    10      0K       2K 166960K        51        0
           temp    66   6819K    6924K 166960K     16552        0
         kqueue    16     24K      30K 166960K       138        0
      SYN cache     2      8K      16K 166960K         3        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       93    0       90     1     0     1     1     0     8    0
rtentry    112      178    0       78     4     0     4     4     0     8    0
unpcb      144      974    0      955     5     1     4     4     0     8    3
syncache   336        7    0        7     2     1     1     1     0     8    1
tcpqe       32        2    0        2     1     0     1     1     0     8    1
tcpcb      808      280    0      271    12     3     9    11     0     8    8
arp         88       30    0       15     1     0     1     1     0     8    0
ipq         40        1    0        1     1     0     1     1     0     8    1
ipqe        40        4    0        4     1     0     1     1     0     8    1
inpcb      336      843    0      829    12     3     9    10     0     8    7
nd6        104       43    0       19     1     0     1     1     0     8    0
pkpcb       40        2    0        2     2     1     1     1     0     8    1
kcovpl      48       12    0        4     1     0     1     1     0     8    0
ppxss      1072       8    0        8     2     1     1     1     0     8    1
pfrktable  1344       2    0        0     1     0     1     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pftag       88        2    0        0     1     0     1     1     0     8    0
pfstitem    24        4    0        0     1     0     1     1     0     8    0
pfstkey    128        6    0        2     1     0     1     1     0     8    0
pfstate    344        3    0        1     1     0     1     1     0     8    0
pfrule     1344       6    0        1     1     0     1     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      706    0      288    36     9    27    29     0     8    0
art_table   32      709    0      288     4     0     4     4     0     8    0
art_node    16      173    0       84     1     0     1     1     0     8    0
sysvmsgpl   40       13    0        9     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       29    0       19     1     0     1     1     0     8    0
shmpl      112       13    0        1     1     0     1     1     0     8    0
dirhash    1024      25    0        8     3     0     3     3     0     8    0
dino2pl    256     2752    0     1249    95     0    95    95     0     8    0
ffsino     240     2752    0     1249    89     0    89    89     0     8    0
nchpl      144     3925    0     2242    63     0    63    63     0     8    0
uvmvnodes   80     3097    0        0    64     0    64    64     0     8    0
vnodes     216     3097    0        0   173     0   173   173     0     8    0
namei      1024   13042    0    13041     3     2     1     2     0     8    0
kstatmem   264       50    0       30     2     0     2     2     0     8    0
scxspl     216    10976    0    10975     8     7     1     8     1     8    0
plimitpl   152      156    0      140     1     0     1     1     0     8    0
sigapl     424     1133    0     1085     7     1     6     7     0     8    0
futexpl     64    11312    0    11310     1     0     1     1     0     8    0
knotepl    120    36455    0    36393    26    16    10    18     0     8    8
kqueuepl   184      297    0      285     4     0     4     4     0     8    3
pipepl     288      298    0      271    12     5     7     7     0     8    4
fdescpl    432     1113    0     1085     5     1     4     5     0     8    0
filepl     120     6873    0     6625    18     4    14    14     0     8    5
lockfpl    104      272    0      270     1     0     1     1     0     8    0
lockfspl    48      101    0       99     1     0     1     1     0     8    0
sessionpl  144       28    0       20     1     0     1     1     0     8    0
pgrppl      48       50    0       34     1     0     1     1     0     8    0
ucredpl    104      972    0      960     1     0     1     1     0     8    0
zombiepl   144     1290    0     1290     1     0     1     1     0     8    1
processpl  1096    1133    0     1085     4     0     4     4     0     8    0
procpl     648     2225    0     2167     6     0     6     6     0     8    0
sosppl     168        6    0        5     2     1     1     1     0     8    0
sockpl     504     1924    0     1888    24    12    12    16     0     8    6
mcl64k     65536      8    0        8     2     1     1     1     0     8    1
mcl16k     16384      2    0        2     1     0     1     1     0     8    1
mcl8k      8192      83    0       83     2     1     1     1     0     8    1
mcl4k      4096    3548    0     3497    15     7     8    14     0     8    1
mcl2k2     2112       1    0        1     1     0     1     1     0     8    1
mcl2k      2048     925    0      923     3     1     2     2     0     8    1
mtagpl      96       19    0       15     1     0     1     1     0     8    0
mbufpl     256    11514    0    11381    16     2    14    14     0     8    2
bufpl      280     4243    0       99   296     0   296   296     0     8    0
anonpl      24   258306    0   254988    69    22    47    47     0   187   15
amapchunkpl 152   50716    0    50272    45     8    37    37     0   158   13
amappl16   200     6890    0     6864    44    34    10    15     0     8    8
amappl15   192       15    0       15     1     1     0     1     0     8    0
amappl14   184      125    0      115     1     0     1     1     0     8    0
amappl13   176       20    0       20     1     1     0     1     0     8    0
amappl12   168     1799    0     1772     3     1     2     3     0     8    0
amappl11   160       52    0       42     1     0     1     1     0     8    0
amappl10   152       17    0       17     2     1     1     1     0     8    1
amappl9    144      124    0      124     1     1     0     1     0     8    0
amappl8    136       24    0       21     1     0     1     1     0     8    0
amappl7    128      104    0       94     1     0     1     1     0     8    0
amappl6    120      206    0      204     1     0     1     1     0     8    0
amappl5    112      148    0      138     1     0     1     1     0     8    0
amappl4    104      307    0      292     1     0     1     1     0     8    0
amappl3     96     5671    0     5589     3     0     3     3     0     8    0
amappl2     88     1420    0     1344     2     0     2     2     0     8    0
amappl1     80    10345    0     9840    15     2    13    13     0     8    0
amappl      88     8968    0     8812     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       15    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1113    0     1085     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1113    0     1085     1     0     1     1     0     8    0
vmmpekpl   168    10227    0    10182     3     0     3     3     0     8    0
vmmpepl    168    77361    0    75713   102    12    90    90     0   357   13
vmsppl     352     1112    0     1085     4     1     3     4     0     8    0
rwobjpl     24    28749    0    24805    25     0    25    25     0     8    0
pdppl      4096    2232    0     2170   114    46    68    82     0     8    6
pvpl        32   554870    0   546613   150    38   112   116     0   265   21
pmappl     216     1112    0     1085     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      447    0       95    11     0    11    11     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
mtx_enter(deadbeefdeadbfd7) at mtx_enter+0x59 sys/kern/kern_lock.c:303
prsignal(deadbeefdeadbeef,14) at prsignal+0x36 sys/kern/kern_sig.c:901
reaper(ffff80002a457be0) at reaper+0x30c sys/kern/kern_exit.c:489
end trace frame: 0x0, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
mtx_enter(deadbeefdeadbfd7) at mtx_enter+0x59 sys/kern/kern_lock.c:303
prsignal(deadbeefdeadbeef,14) at prsignal+0x36 sys/kern/kern_sig.c:901
reaper(ffff80002a457be0) at reaper+0x30c sys/kern/kern_exit.c:489
end trace frame: 0x0, count: -3

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/16 01:14 openbsd 8b4580606d31 eeafb645 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main protection_fault: mtx_enter
* Struck through repros no longer work on HEAD.