syzbot
protection_fault: mtx_enter (3)
Status:
auto-obsoleted due to no activity on 2026/05/08 14:24
Reported-by: syzbot+69404101963633b56833@syzkaller.appspotmail.com
First crash: 332d, last: 186d
Sample crash report:
kernel: protection fault trap, code=0
Stopped at mtx_enter+0x6e: movq 0(%r14),%r15
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
mtx_enter(dead4110dead41f0) at mtx_enter+0x6e sys/kern/kern_lock.c:549
prsignal(dead4110dead4110,14) at prsignal+0x36 sys/kern/kern_sig.c:904
reaper(ffff80002a6fd228) at reaper+0x2bc sys/kern/kern_exit.c:516
end trace frame: 0x0, count: -3
ddb> show registers
rdi 0
rsi 0
rbp 0xffff80002a7333e0
rbx 0x40000 acpi_pdirpa+0x2be71
rdx 0
rcx 0xffffffff838f9ff0 cpu_info_full_primary+0x1ff0
rax 0xffff80002a6fd200
r8 0xffffffffffffffff
r9 0
r10 0x2547c1d52650e70c
r11 0x2fc1a4c0bb7b5032
r12 0xdead4110dead4110
r13 0x40000 acpi_pdirpa+0x2be71
r14 0xdead4110dead41f0
r15 0
rip 0xffffffff82910a2e mtx_enter+0x6e
cs 0x8
rflags 0x10297 __ALIGN_SIZE+0xf297
rsp 0xffff80002a7333b0
ss 0x10
mtx_enter+0x6e: movq 0(%r14),%r15
ddb> show proc
PROC (reaper) tid=13611 pid=71512 tcnt=1 stat=onproc
flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002a6fcf90,0xffff80002a6fd4d0
process=0xffff8000ffffc480 user=0xffff80002a72e000, vmspace=0xffffffff8398bef0
estcpu=0, cpticks=4, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
86169 270195 0 0 3 0x14280 nfsidl nfsio
45309 101273 0 0 3 0x14280 nfsidl nfsio
66295 517926 76463 0 3 0 vmmaplk syz-executor
66295 23672 76463 0 3 0x4000080 fsleep syz-executor
66295 102732 76463 0 2 0x4000000 syz-executor
66295 326116 76463 0 3 0x4000080 fsleep syz-executor
20385 428616 50927 0 4 0x82000 syz-executor
20385 141297 50927 0 4 0x4082000 syz-executor
20385 48439 50927 0 2 0x4002000 syz-executor
44728 30710 91320 0 2 0 syz-executor
44728 282657 91320 0 2 0x4000000 syz-executor
44728 492711 91320 0 2 0x4000000 syz-executor
55297 479794 64663 0 2 0 syz-executor
55297 159597 64663 0 3 0x4000080 fsleep syz-executor
55297 425390 64663 0 3 0x4000080 fsleep syz-executor
65205 352546 83580 0 3 0x80 nanoslp syz-executor
65205 510845 83580 0 2 0x4000000 syz-executor
65205 226953 83580 0 3 0x4000080 fsleep syz-executor
50927 320755 54480 0 3 0x82 nanoslp syz-executor
83580 349070 54480 0 3 0x82 nanoslp syz-executor
51572 119546 54480 0 3 0x82 nanoslp syz-executor
64663 443810 54480 0 3 0x82 nanoslp syz-executor
47062 349053 54480 0 3 0x82 wait syz-executor
91320 208553 54480 0 3 0x82 nanoslp syz-executor
76463 424182 54480 0 3 0x82 nanoslp syz-executor
47722 378762 54480 0 2 0x2 syz-executor
54480 209446 3378 0 3 0x82 kqread syz-executor
3378 444727 90045 0 3 0x10008a sigsusp ksh
90045 346776 1058 0 3 0x98 kqread sshd-session
1058 351475 32573 0 3 0x92 kqread sshd-session
14822 278504 1 0 3 0x100083 ttyin getty
32573 435951 1 0 3 0x88 kqread sshd
20876 265305 31268 73 3 0x1100090 kqread syslogd
31268 249241 1 0 3 0x100082 sbwait syslogd
81755 303999 1 0 3 0x100080 kqread resolvd
25009 113487 86754 77 3 0x100092 kqread dhcpleased
95925 2103 86754 77 3 0x100092 kqread dhcpleased
86754 496500 1 0 3 0x80 kqread dhcpleased
88321 75317 0 0 3 0x14200 bored smr
38036 200437 0 0 2 0x14200 zerothread
37416 121223 0 0 3 0x14200 aiodoned aiodoned
54008 21648 0 0 3 0x14200 syncer update
33894 4056 0 0 3 0x14200 cleaner cleaner
*71512 13611 0 0 7 0x14200 reaper
75620 50764 0 0 3 0x14200 pgdaemon pagedaemon
17664 294079 0 0 3 0x14200 bored viomb
65822 101352 0 0 3 0x40014200 acpi0 acpi0
58009 317962 0 0 3 0x14200 bored softnet0
5006 160228 0 0 3 0x14200 bored systqmp
76164 499288 0 0 3 0x14200 bored systq
78973 294616 0 0 3 0x40014200 tmoslp softclock
22914 257954 0 0 3 0x40014200 idle0
1 262476 0 0 3 0x82 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11084 12162K 12506K 166960K 13156 0
pcb 18 14K 22K 166960K 171 0
rtable 255 11K 11K 166960K 426 0
pf 34 13K 17K 166960K 78 0
ifaddr 41 7K 7K 166960K 62 0
ifgroup 58 2K 2K 166960K 89 0
sysctl 1 1K 9K 166960K 5 0
counters 35 18K 18K 166960K 58 0
ioctlops 0 0K 4K 166960K 96 0
iov 0 0K 12K 166960K 19 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1391 88K 88K 166960K 1848 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 8 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 0K 166960K 87 0
dirhash 12 2K 2K 166960K 27 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 17 61K 240K 166960K 534 0
sigio 0 0K 0K 166960K 106 0
proc 60 59K 91K 166960K 530 0
subproc 72 4K 4K 166960K 72 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 43 0
in_multi 88 6K 7K 166960K 113 0
ether_multi 1 0K 0K 166960K 2 0
mrt 0 0K 0K 166960K 24 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 241 1076K 1076K 166960K 241 0
exec 0 0K 1K 166960K 412 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 222 151K 169K 166960K 6293 0
UVM aobj 13 2K 2K 166960K 16 0
pinsyscall 38 76K 94K 166960K 1642 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 1K 166960K 28 0
NDP 13 0K 2K 166960K 42 0
temp 46 9068K 9132K 166960K 13964 0
kqueue 15 22K 30K 166960K 112 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 129 0 123 3 0 3 3 0 8 2
rtentry 136 121 0 18 4 0 4 4 0 8 0
unpcb 144 556 0 538 9 3 6 6 0 8 5
syncache 336 8 0 8 1 1 0 1 0 8 0
tcpcb 736 383 0 377 13 12 1 13 0 8 0
arp 96 18 0 2 1 0 1 1 0 8 0
ipq 40 5 0 2 1 0 1 1 0 8 0
ipqe 40 10 0 5 1 0 1 1 0 8 0
inpcb 328 838 0 826 14 12 2 13 0 8 0
nd6 112 28 0 5 1 0 1 1 0 8 0
pkpcb 40 1 0 1 1 1 0 1 0 8 0
kcovpl 48 8 0 0 1 0 1 1 0 8 0
mppekey 1024 1 0 1 1 0 1 1 0 8 1
ppxss 1072 21 0 21 1 0 1 1 0 8 1
pppxif 1384 1 0 1 1 1 0 1 0 8 0
pftag 88 4 0 1 1 0 1 1 0 8 0
pfqueue 320 2 0 2 1 1 0 1 0 8 0
pfrule 1360 5 0 5 2 1 1 1 0 8 1
rttmr 136 3 0 3 1 1 0 1 0 8 0
art_heap8 4096 2 0 0 2 0 2 2 0 8 0
art_heap4 256 511 0 85 31 2 29 31 0 8 0
art_table 40 513 0 85 5 0 5 5 0 8 0
art_node 32 121 0 27 1 0 1 1 0 8 0
sysvmsgpl 40 2 0 2 1 1 0 1 0 8 0
semupl 112 1 0 1 1 1 0 1 0 8 0
semapl 112 83 0 73 1 0 1 1 0 8 0
shmpl 112 13 0 3 1 0 1 1 0 8 0
dirhash 1024 29 0 12 3 0 3 3 0 8 0
dino2pl 256 2313 0 857 92 0 92 92 0 8 0
ffsino 256 2313 0 857 92 0 92 92 0 8 0
nchpl 144 3051 0 1355 63 0 63 63 0 8 0
rtmask 32 3 0 3 1 1 0 1 0 8 0
vnodes 216 2716 0 0 151 0 151 151 0 8 0
namei 1024 10484 0 10483 2 1 1 2 0 8 0
kstatmem 264 52 0 26 3 0 3 3 0 8 1
scsiplug 72 2 0 2 1 1 0 1 0 8 0
scxspl 216 9709 0 9709 2 1 1 2 1 8 1
plimitpl 152 137 0 120 1 0 1 1 0 8 0
sigapl 424 823 0 779 6 0 6 6 0 8 1
knotepl 120 20158 0 20108 17 7 10 10 0 8 7
kqueuepl 184 157 0 146 1 0 1 1 0 8 0
pipepl 304 248 0 221 8 5 3 8 0 8 0
fdescpl 448 807 0 778 5 1 4 5 0 8 0
filepl 120 5493 0 5265 15 3 12 14 0 8 2
lockfpl 104 245 0 241 2 1 1 2 0 8 0
lockfspl 48 77 0 73 1 0 1 1 0 8 0
sessionpl 144 24 0 16 1 0 1 1 0 8 0
pgrppl 48 46 0 30 1 0 1 1 0 8 0
ucredpl 104 656 0 642 1 0 1 1 0 8 0
zombiepl 144 845 0 843 1 0 1 1 0 8 0
processpl 1152 823 0 779 4 0 4 4 0 8 0
procpl 664 1428 0 1373 6 1 5 6 0 8 0
sosppl 176 2 0 1 2 1 1 1 0 8 0
sockpl 552 1600 0 1564 17 5 12 12 0 8 8
mcl64k 65536 87 0 86 1 0 1 1 0 8 0
mcl16k 16384 3 0 3 1 1 0 1 0 8 0
mcl12k 12288 2 0 2 1 1 0 1 0 8 0
mcl8k 8192 6 0 6 2 1 1 1 0 8 1
mcl4k 4096 3018 0 2967 15 7 8 14 0 8 1
mcl2k 2048 588 0 581 2 0 2 2 0 8 1
mtagpl 96 19 0 9 1 0 1 1 0 8 0
mbufpl 256 10845 0 10597 19 0 19 19 0 8 3
bufpl 280 3154 0 104 218 0 218 218 0 8 0
anonpl 24 132548 0 129372 34 2 32 34 0 187 5
amapchunkpl 152 19710 0 19237 27 2 25 26 0 158 5
amappl16 200 1955 0 1923 5 2 3 5 0 8 0
amappl15 192 4 0 4 1 1 0 1 0 8 0
amappl14 184 408 0 407 1 0 1 1 0 8 0
amappl13 176 125 0 115 1 0 1 1 0 8 0
amappl12 168 1050 0 1022 2 0 2 2 0 8 0
amappl11 160 3 0 3 1 1 0 1 0 8 0
amappl10 152 73 0 63 1 0 1 1 0 8 0
amappl9 144 257 0 257 1 1 0 1 0 8 0
amappl8 136 115 0 113 1 0 1 1 0 8 0
amappl7 128 140 0 129 1 0 1 1 0 8 0
amappl6 120 165 0 163 1 0 1 1 0 8 0
amappl5 112 95 0 87 1 0 1 1 0 8 0
amappl4 104 338 0 322 1 0 1 1 0 8 0
amappl3 96 3921 0 3813 4 1 3 4 0 8 0
amappl2 88 553 0 501 2 0 2 2 0 8 0
amappl1 80 12094 0 11543 16 2 14 16 0 8 1
amappl 88 5496 0 5337 5 0 5 5 0 92 0
uvmvnodes 80 111 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 19 0 18 1 0 1 1 0 8 0
aobjpl 72 15 0 3 1 0 1 1 0 8 0
uaddrrnd 24 807 0 778 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 807 0 778 1 0 1 1 0 8 0
vmmpekpl 168 8675 0 8646 2 0 2 2 0 8 0
vmmpepl 168 59606 0 57812 93 10 83 93 0 357 2
vmsppl 368 806 0 778 4 1 3 4 0 8 0
rwobjpl 40 18531 0 17560 12 0 12 12 0 8 0
pdppl 4096 1620 0 1556 100 34 66 80 0 8 2
pvpl 32 355703 0 346924 111 15 96 99 0 265 14
pmappl 216 806 0 778 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 391 0 64 11 0 11 11 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
mtx_enter(dead4110dead41f0) at mtx_enter+0x6e sys/kern/kern_lock.c:549
prsignal(dead4110dead4110,14) at prsignal+0x36 sys/kern/kern_sig.c:904
reaper(ffff80002a6fd228) at reaper+0x2bc sys/kern/kern_exit.c:516
end trace frame: 0x0, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
mtx_enter(dead4110dead41f0) at mtx_enter+0x6e sys/kern/kern_lock.c:549
prsignal(dead4110dead4110,14) at prsignal+0x36 sys/kern/kern_sig.c:904
reaper(ffff80002a6fd228) at reaper+0x2bc sys/kern/kern_exit.c:516
end trace frame: 0x0, count: -3
Struck through repros no longer work on HEAD.