syzbot


witness: reversal: lock order data missing (4)

Status: upstream: reported on 2024/07/10 23:00
Reported-by: syzbot+2b64fa6c069b419fe526@syzkaller.appspotmail.com
First crash: 59d, last: now
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: reversal: lock order data missing (2) C 173 1063d 1213d 0/3 closed as invalid on 2022/02/22 18:44
openbsd witness: reversal: lock order data missing (3) 8192 59d 907d 3/3 fixed on 2024/07/10 22:52
openbsd witness: reversal: lock order data missing C 667 1213d 1283d 3/3 fixed on 2021/05/14 01:59

Sample crash report:
witness: lock order reversal:
 1st 0xffff800001230b68 sbufrcv (&so->so_rcv.sb_lock)
 2nd 0xfffffd8060c9fb38 inode (&ip->i_lock)
lock order [1] sbufrcv (&so->so_rcv.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff830e7631 -> 0xffffffff8305f254 is missing
lock order [2] inode (&ip->i_lock) -> [1] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_enter+0x122
#1  sblock+0xb7 sys/kern/uipc_socket2.c:549
#2  soreceive+0x295 sys/kern/uipc_socket.c:947
#3  fifo_read+0x11a sys/miscfs/fifofs/fifo_vnops.c:264
#4  VOP_READ+0x102 sys/kern/vfs_vops.c:227
#5  vn_rdwr+0x15b
#6  vndsetcred+0xa1 sys/dev/vnd.c:684
#7  vndioctl+0xe6c sys/dev/vnd.c:485
#8  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
#10 sys_ioctl+0x67c
#11 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#11 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#12 Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
witness_checkorder(fffffd8060c9fb38,9,0) at witness_checkorder+0x1024
rw_enter(fffffd8060c9fb28,1) at rw_enter+0x122
rrw_enter(fffffd8060c9fb28,1) at rrw_enter+0xbe sys/kern/kern_rwlock.c:464
VOP_LOCK(fffffd807454e8a0,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
vn_lock(fffffd807454e8a0,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:564
vfs_getcwd_common(fffffd807454e8a0,fffffd807454e8a0,0,0,200,0,686ce9c9cffadd82) at vfs_getcwd_common+0xd1 sys/kern/vfs_getcwd.c:287
vn_isunder(fffffd807454e8a0,fffffd807454e8a0,ffff8000371bf470) at vn_isunder+0x56 sys/kern/vfs_vnops.c:688
unp_externalize(fffffd806aea3700,ec,0) at unp_externalize+0x286 sys/kern/uipc_usrreq.c:1094
soreceive(ffff800001230a98,ffff80002a124798,ffff80002a124748,0,ffff80002a124788,ffff80002a12490c,353778530dfb9d42) at soreceive+0xd3e sys/kern/uipc_socket.c:1092
recvit(ffff8000371bf470,8,ffff80002a1248e0,0,ffff80002a124990) at recvit+0x40a sys/kern/uipc_syscalls.c:1082
sys_recvmsg(ffff8000371bf470,ffff80002a124a40,ffff80002a124990) at sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:882
syscall(ffff80002a124a40) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a124a40) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb603d9820d0, count: -14
ddb{1}> show registers
rdi                                0
rsi                          0x40000    acpi_pdirpa+0x2be71
rbp               0xffff80002a1241f0
rbx               0xffffffff8306f162    pp_r600_decoded_lanes+0x31454
rdx               0xffff8000011b3d00
rcx               0xffff8000371bf470
rax                          0x3ffff    acpi_pdirpa+0x2be70
r8                0xffff80002a1240d0
r9                0x8080808080808080
r10               0x882e0ab4947b4156
r11               0xefb5f7e1637e3474
r12               0xfffffd80042b4ad0
r13               0xfffffd8003acce00
r14                              0x3
r15                       0xffffffff
rip               0xffffffff812a47a5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a1241e0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=158378 pid=67324 tcnt=3 stat=onproc
    flags process=1000000<CHROOT> proc=4000000<THREAD>
    runpri=24, usrpri=50, slppri=24, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff4f58,0xffff80002a0bb208
    process=0xffff80002a0bdfc0 user=0xffff80002a11f000, vmspace=0xfffffd806be93c08
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 12384  212504  23001      0  2           0                syz-executor
  3966   80657  83099      0  2           0                syz-executor
  3966  198516  83099      0  3   0x4000080  fsleep        syz-executor
  3966  449715  83099      0  2   0x4000000                syz-executor
 53155  393995  11668      0  7           0                syz-executor
 53155  209444  11668      0  2   0x4000000                syz-executor
 52951  124068  12562      0  2           0                syz-executor
 35347  300321  54565      0  2           0                syz-executor
 35347  176403  54565      0  3   0x4000080  fsleep        syz-executor
 35347   99639  54565      0  3   0x4000080  fsleep        syz-executor
 35347  190320  54565      0  3   0x4000080  fsleep        syz-executor
 79912  261908   7360      0  2           0                syz-executor
 79912  390675   7360      0  3   0x4000080  fsleep        syz-executor
 79912  353524   7360      0  2   0x4000000                syz-executor
 79912   35233   7360      0  3   0x4000080  fsleep        syz-executor
 79912  119251   7360      0  3   0x4000080  fsleep        syz-executor
 67324  427433  39247      0  2   0x1000000                syz-executor
*67324  158378  39247      0  7   0x5000000                syz-executor
 67324  446402  39247      0  2   0x5000000                syz-executor
 54565  141864  60107      0  3        0x82  nanoslp       syz-executor
 23001   56705  60107      0  3        0x82  nanoslp       syz-executor
 11668  176735  60107      0  3        0x82  nanoslp       syz-executor
  7360   28447  60107      0  3        0x82  nanoslp       syz-executor
 96658  190286  60107      0  3        0x82  nanoslp       syz-executor
 83099  119863  60107      0  3        0x82  nanoslp       syz-executor
 39247  186372  60107      0  3        0x82  nanoslp       syz-executor
 12562   59514  60107      0  3        0x82  nanoslp       syz-executor
 11861  473275      0      0  3     0x14200  acct          acct
 36898  505477      1      0  3    0x100083  ttyin         getty
 56348  417041      0      0  3     0x14280  nfsidl        nfsio
  1412  389454      0      0  3     0x14280  nfsidl        nfsio
 64302  264536      0      0  3     0x14280  nfsidl        nfsio
 22163  501257      0      0  3     0x14280  nfsidl        nfsio
 79802   15407      0      0  3     0x14280  nfsidl        nfsio
 21256  440950      0      0  3     0x14280  nfsidl        nfsio
 91870  250341      0      0  3     0x14280  nfsidl        nfsio
 14315  422371      0      0  3     0x14280  nfsidl        nfsio
 78239  252294      0      0  3     0x14280  nfsidl        nfsio
 30310   56041      0      0  3     0x14280  nfsidl        nfsio
 77337  322891      0      0  3     0x14280  nfsidl        nfsio
 91299  349128      0      0  3     0x14280  nfsidl        nfsio
 48577  394076      0      0  3     0x14280  nfsidl        nfsio
 11597  164266      0      0  3     0x14280  nfsidl        nfsio
 35755   93654      0      0  3     0x14280  nfsidl        nfsio
 89973  244845      0      0  3     0x14280  nfsidl        nfsio
 51446  430225      0      0  3     0x14280  nfsidl        nfsio
 13909  506898      0      0  3     0x14280  nfsidl        nfsio
 53697   82511      0      0  3     0x14280  nfsidl        nfsio
 11822  177878      0      0  3     0x14280  nfsidl        nfsio
 44429  173986      0      0  3     0x14200  bored         sosplice
 60107  108506  57652      0  3        0x82  kqread        syz-executor
 57652   81061  48502      0  3    0x10008a  sigsusp       ksh
 48502  290600  41998      0  3        0x98  kqread        sshd-session
 41998  422356  80548      0  3        0x92  kqread        sshd-session
 80548   84256      1      0  3        0x88  kqread        sshd
 84154  372639  55971     74  3   0x1100092  bpf           pflogd
 55971  255025      1      0  3        0x80  sbwait        pflogd
 10576  428234  10807     73  2   0x1100010                syslogd
 10807  485007      1      0  3    0x100082  sbwait        syslogd
 96533   66929      1      0  3    0x100080  kqread        resolvd
 15706  407661  56137     77  3    0x100092  kqread        dhcpleased
 55640  401717  56137     77  3    0x100092  kqread        dhcpleased
 56137  271284      1      0  3        0x80  kqread        dhcpleased
 25657  356590      0      0  3     0x14200  bored         smr
 62445   23658      0      0  2     0x14200                zerothread
  3087  187516      0      0  3     0x14200  aiodoned      aiodoned
 72585  190538      0      0  3     0x14200  syncer        update
 86894  485268      0      0  3     0x14200  cleaner       cleaner
 26683  162627      0      0  3     0x14200  reaper        reaper
 32072  475888      0      0  3     0x14200  pgdaemon      pagedaemon
 78555  294827      0      0  3     0x14200  bored         viomb
 69180  246713      0      0  3  0x40014200  acpi0         acpi0
 63304  207697      0      0  3  0x40014200                idle1
 97088  406182      0      0  3     0x14200  bored         softnet3
 11492  144588      0      0  3     0x14200  bored         softnet2
 67514   15892      0      0  3     0x14200  bored         softnet1
 71489  172209      0      0  3     0x14200  bored         softnet0
 60898   46561      0      0  3     0x14200  bored         systqmp
 86859   82070      0      0  3     0x14200  bored         systq
   922  232841      0      0  3     0x14200  tmoslp        softclockmp
 33242   31780      0      0  3  0x40014200  tmoslp        softclock
 26869  151407      0      0  3  0x40014200                idle0
     1   64444      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 67324 (syz-executor) thread 0xffff8000371bf470 (158378)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835dd500)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  unp_externalize+0x14e
#2  soreceive+0xd3e sys/kern/uipc_socket.c:1092
#3  recvit+0x40a sys/kern/uipc_syscalls.c:1082
#4  sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:882
#5  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#5  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#6  Xsyscall+0x128
exclusive rwlock sbufrcv r = 0 (0xffff800001230b68)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  sblock+0xb7 sys/kern/uipc_socket2.c:549
#3  soreceive+0x295 sys/kern/uipc_socket.c:947
#4  recvit+0x40a sys/kern/uipc_syscalls.c:1082
#5  sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:882
#6  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
Process 10576 (syslogd) thread 0xffff8000ffffdbe8 (428234)
exclusive rrwlock inode r = 0 (0xfffffd806e4a00a0)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0x152 sys/kern/vfs_syscalls.c:2926
#6  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10219  10242K   10498K 166960K     12719        0
            pcb    48     16K      17K 166960K       392        0
         rtable   224      9K       9K 166960K      1922        0
             pf    37     18K      26K 166960K       167        0
         ifaddr    44      8K       8K 166960K       227        0
        ifgroup    59      2K       2K 166960K       256        0
         sysctl     3      0K       0K 166960K         5        0
       counters    66     36K      36K 166960K       170        0
       ioctlops     0      0K       4K 166960K      1598        0
            iov     0      0K      16K 166960K        46        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1483     93K      94K 166960K      2818        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        10        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        33        0
        dirhash    12      2K       2K 166960K        42        0
           ACPI  1690    195K     286K 166960K     12418        0
      file desc    18     65K      93K 166960K      1643        0
          sigio     0      0K       0K 166960K        48        0
           proc    70     91K     140K 166960K      1702        0
        subproc   104      6K       6K 166960K       611        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       110        0
       in_multi    99      7K       7K 166960K       553        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     1      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   115    519K     519K 166960K       115        0
           exec     0      0K       1K 166960K      1064        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   241     77K     109K 166960K     14468        0
       UVM aobj    24      6K       6K 166960K        25        0
     pinsyscall    43     86K     104K 166960K      3744        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        63        0
            NDP    14      0K       2K 166960K       160        0
           temp    76   6824K    6952K 166960K     46093        0
         kqueue    13     20K      30K 166960K       170        0
      SYN cache     2      8K      16K 166960K         3        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      202    0      199     2     1     1     2     0     8    0
rtentry    112      642    0      543     4     1     3     4     0     8    0
unpcb      144     1325    0     1304    20    19     1     6     0     8    0
syncache   336        7    0        7     3     3     0     1     0     8    0
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      808      654    0      649    22    21     1     8     0     8    0
arp        120      100    0       82     1     0     1     1     0     8    0
inpcb      336     1972    0     1931    28    24     4    12     0     8    0
nd6        136      158    0      134     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48       47    0       39     1     0     1     1     0     8    0
ppxss      1168       9    0        9     5     4     1     1     0     8    1
pffrag     232        6    0        3     1     0     1     1     0   482    0
pffrnode    88        6    0        3     1     0     1     1     0     8    0
pffrent     40       14    0       10     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24      131    0       87     1     0     1     1     0     8    0
pfstkey    128      131    0       87     2     0     2     2     0     8    0
pfstate    376      131    0       87     6     0     6     6     0     8    0
pfrule     1344      22    0       17     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     2731    0     2277    42    13    29    34     0     8    0
art_table   32     2733    0     2277     5     0     5     5     0     8    0
art_node    16      638    0      549     1     0     1     1     0     8    0
sysvmsgpl   40        5    0        0     1     0     1     1     0     8    0
semapl     112       31    0       21     1     0     1     1     0     8    0
shmpl      112       22    0        1     1     0     1     1     0     8    0
dirhash    1024      37    0       20     3     0     3     3     0     8    0
dino2pl    256     3416    0     1839    99     0    99    99     0     8    0
ffsino     272     3416    0     1839   106     0   106   106     0     8    0
nchpl      144     4971    0     3238    65     0    65    65     0     8    0
uvmvnodes   80     4583    0        0    94     0    94    94     0     8    0
vnodes     216     4583    0        0   255     0   255   255     0     8    0
namei      1024   20697    0    20697     6     5     1     2     0     8    1
percpumem   16       99    0       52     1     0     1     1     0     8    0
kstatmem   264      130    0      104     2     0     2     2     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        2    0        2     2     2     0     1     0     8    0
scxspl     216    29776    0    29776    18    17     1     8     1     8    1
plimitpl   152      184    0      166     1     0     1     1     0     8    0
sigapl     424     1889    0     1817    11     2     9     9     0     8    0
futexpl     64    14376    0    14369     6     5     1     1     0     8    0
knotepl    120      640    0        0    17     0    17    17     0     8    0
kqueuepl   216      365    0      356     7     6     1     5     0     8    0
pipepl     320      509    0      482    17    14     3     8     0     8    0
fdescpl    496     1849    0     1817     5     0     5     5     0     8    0
filepl     152    11531    0    11250    47    31    16    21     0     8    3
lockfpl    104      778    0      776     4     3     1     2     0     8    0
lockfspl    48      231    0      229     1     0     1     1     0     8    0
sessionpl  144       65    0       56     1     0     1     1     0     8    0
pgrppl      48      141    0      124     1     0     1     1     0     8    0
ucredpl    104     1446    0     1432     1     0     1     1     0     8    0
zombiepl   144     1818    0     1817     2     1     1     1     0     8    0
processpl  1160    1889    0     1817     7     1     6     6     0     8    0
procpl     648     3448    0     3364     9     1     8     8     0     8    0
srpgc       96       10    0       10     4     4     0     1     0     8    0
sosppl     168        3    0        3     3     3     0     1     0     8    0
sockpl     664     3510    0     3445    53    46     7    14     0     8    1
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096       3    0        0     1     0     1     1     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     254    0        0    32     0    32    32     0     8    0
mtagpl      96       10    0        0     1     0     1     1     0     8    0
mbufpl     256     1135    0        0    68     0    68    68     0     8    0
bufpl      280     8935    0     1993   496     0   496   496     0     8    0
anonpl      24   317251    0   313804   114    63    51    81     0   185   19
amapchunkpl 152   47068    0    46557    60    28    32    42     0   158   11
amappl16   200     6462    0     6444    30    24     6    14     0     8    5
amappl15   192       16    0       16     3     3     0     1     0     8    0
amappl14   184      231    0      219     1     0     1     1     0     8    0
amappl13   176       13    0       13     1     1     0     1     0     8    0
amappl12   168     3139    0     3109     4     2     2     3     0     8    0
amappl11   160       63    0       48     1     0     1     1     0     8    0
amappl10   152       20    0       18     1     0     1     1     0     8    0
amappl9    144      121    0      121     1     1     0     1     0     8    0
amappl8    136       29    0       26     1     0     1     1     0     8    0
amappl7    128      190    0      178     1     0     1     1     0     8    0
amappl6    120      566    0      564     1     0     1     1     0     8    0
amappl5    112      295    0      283     1     0     1     1     0     8    0
amappl4    104      448    0      427     1     0     1     1     0     8    0
amappl3     96     8336    0     8233     3     0     3     3     0     8    0
amappl2     88     2163    0     2084     2     0     2     2     0     8    0
amappl1     80    15213    0    14628    15     0    15    15     0     8    0
amappl      88    13711    0    13533     5     0     5     5     0    92    0
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        7    0        7     2     2     0     1     0     8    0
dma32       32        8    0        8     2     2     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       24    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1849    0     1817     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1849    0     1817     1     0     1     1     0     8    0
vmmpekpl   168    17338    0    17283     4     0     4     4     0     8    0
vmmpepl    168   119755    0   117829   112    21    91    96     0   357    5
vmsppl     440     1848    0     1817     6     2     4     5     0     8    0
rwobjpl     56    39995    0    34432    79     0    79    79     0     8    0
pdppl      4096    3705    0     3634   162    89    73    87     0     8    2
pvpl        32    45305    0        0   366     0   366   366     0   265    0
pmappl     248     1848    0     1817     3     0     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      587    0      163    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff83472ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158
__mp_lock(ffffffff835dd2f8) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff835dd2f8) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144
intr_handler(ffff800032254fc0,ffff800000069c00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158
__mp_lock(ffffffff835dd2f8) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff835dd2f8) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144
intr_handler(ffff800032255130,ffff800000079e00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf sys/dev/kcov.c:154
softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
end of kernel
end trace frame: 0x7818682605f0, count: -14
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
witness_checkorder(fffffd8060c9fb38,9,0) at witness_checkorder+0x1024
rw_enter(fffffd8060c9fb28,1) at rw_enter+0x122
rrw_enter(fffffd8060c9fb28,1) at rrw_enter+0xbe sys/kern/kern_rwlock.c:464
VOP_LOCK(fffffd807454e8a0,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
vn_lock(fffffd807454e8a0,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:564
vfs_getcwd_common(fffffd807454e8a0,fffffd807454e8a0,0,0,200,0,686ce9c9cffadd82) at vfs_getcwd_common+0xd1 sys/kern/vfs_getcwd.c:287
vn_isunder(fffffd807454e8a0,fffffd807454e8a0,ffff8000371bf470) at vn_isunder+0x56 sys/kern/vfs_vnops.c:688
unp_externalize(fffffd806aea3700,ec,0) at unp_externalize+0x286 sys/kern/uipc_usrreq.c:1094
soreceive(ffff800001230a98,ffff80002a124798,ffff80002a124748,0,ffff80002a124788,ffff80002a12490c,353778530dfb9d42) at soreceive+0xd3e sys/kern/uipc_socket.c:1092
recvit(ffff8000371bf470,8,ffff80002a1248e0,0,ffff80002a124990) at recvit+0x40a sys/kern/uipc_syscalls.c:1082
sys_recvmsg(ffff8000371bf470,ffff80002a124a40,ffff80002a124990) at sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:882
syscall(ffff80002a124a40) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a124a40) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb603d9820d0, count: -14

Crashes (15535):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/08 01:23 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/08 00:39 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 23:34 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 22:22 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 22:11 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 21:02 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 20:27 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 19:26 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 18:38 openbsd 768408871d94 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 17:37 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 16:39 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 16:02 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 15:51 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 14:46 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 14:00 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 13:15 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 12:19 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 11:28 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 11:21 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 10:20 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 09:36 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 08:43 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 07:47 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 07:13 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 06:18 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 05:14 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 04:11 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 03:23 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 02:29 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 02:29 openbsd 202e2461a0d9 9750182a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 00:54 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/07 00:12 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 23:43 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 22:42 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 21:51 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 21:33 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 20:26 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 20:24 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 19:24 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 19:23 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 18:22 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/09/06 18:12 openbsd 4ffa82dac1f1 ce70880a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2024/07/10 23:00 openbsd 2617e43b76b7 c699c2eb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
* Struck through repros no longer work on HEAD.