[Bug 293901] panic: mutex ACPI global lock owned at ../../../kern/kern_event.c:LINE

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293901

            Bug ID: 293901
           Summary: panic: mutex ACPI global lock owned at
                    ../../../kern/kern_event.c:LINE
           Product: Base System
           Version: 15.0-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: r772577952@gmail.com

Hi FreeBSD maintainers,

We discovered an issue while fuzzing freebsd kernel with syzkaller and our
generated syscall descriptions. From the report I think the root cause of this
issue appears to be located within ACPI subsystem. This issue is reproducible
on the latest release (release/15.0.0-p4, commit
8ef0ed690df2dca0cc22b827819d112f868470bb).

The kernel console output, kernel config, and C/syz reproducers can be found at
https://drive.google.com/drive/folders/1A0e4OChcrWfSBgJHEpKxSL5envELKzNY?usp=sharing.
The issue report is also listed below (symbolized by our modified
syz-symbolize) to assist with the analysis:

```
TITLE: panic: mutex ACPI global lock owned at ../../../kern/kern_event.c:LINE
CORRUPTED: false ()
SUPPRESSED: false
MAINTAINERS (TO): []
MAINTAINERS (CC): []

login: panic: mutex ACPI global lock owned at ../../../kern/kern_event.c:2615
cpuid = 2
time = 1773840955
KDB: stack backtrace:
#0 0xffffffff81608a59 at kdb_backtrace+0x119
/usr/obj/usr/src/kern/subr_kdb.c:452
#1 0xffffffff81537d67 at vpanic+0x257 /usr/obj/usr/src/kern/kern_shutdown.c:960
#2 0xffffffff81537b05 at panic+0xb5 /usr/obj/usr/src/kern/kern_shutdown.c:887
#3 0xffffffff814e6f44 at __mtx_assert+0x224
/usr/obj/usr/src/kern/kern_mutex.c:0
#4 0xffffffff81474f27 at knlist_add+0x57
/usr/obj/usr/src/kern/kern_event.c:2531
#5 0xffffffff8203c4ef at apmkqfilter+0xcf
/usr/obj/usr/src/x86/acpica/acpi_apm.c:413
#6 0xffffffff811cc54b at devfs_kqfilter_f+0x18b
/usr/obj/usr/src/fs/devfs/devfs_vnops.c:1003
#7 0xffffffff81470f16 at kqueue_register+0xd66
/usr/obj/usr/src/kern/kern_event.c:1769
#8 0xffffffff81473a49 at kqueue_kevent+0x1b9
/usr/obj/usr/src/kern/kern_event.c:1444
#9 0xffffffff814737f9 at kern_kevent_fp+0xf9
/usr/obj/usr/src/kern/kern_event.c:1475
#10 0xffffffff81473617 at kern_kevent+0x157
/usr/obj/usr/src/kern/kern_event.c:1415
#11 0xffffffff81472bb4 at kern_kevent_generic+0x174
/usr/obj/usr/src/kern/kern_event.c:1271
#12 0xffffffff8147288f at sys_kevent+0x1ef
/usr/obj/usr/src/kern/kern_event.c:1245
#13 0xffffffff820f9372 at amd64_syscall+0x4e2
/usr/obj/usr/src/kern/subr_syscall.c:193
#14 0xffffffff8209ffab at fast_syscall_common+0xf8
/usr/obj/usr/src/amd64/amd64/exception.S:571
Uptime: 53s
Automatic reboot in 15 seconds - press a key on the console to abort
```

-- 
You are receiving this mail because:
You are the assignee for the bug.