syzbot


witness: reversal: lock order data missing (5)

Status: upstream: reported on 2025/02/03 09:07
Reported-by: syzbot+6e45b18b14156f1df9f4@syzkaller.appspotmail.com
First crash: 342d, last: 10h23m
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: reversal: lock order data missing (2) -1 C 173 1554d 1704d 0/3 closed as invalid on 2022/02/22 18:44
openbsd witness: reversal: lock order data missing (3) -1 8192 550d 1398d 3/3 fixed on 2024/07/10 22:52
openbsd witness: reversal: lock order data missing (4) -1 57671 417d 550d 0/3 auto-obsoleted due to no activity on 2025/01/09 12:07
openbsd witness: reversal: lock order data missing -1 C 667 1704d 1774d 3/3 fixed on 2021/05/14 01:59

Sample crash report:
login: witness: lock order reversal:
 1st 0xffff800001694108 sbufrcv (&so->so_rcv.sb_lock)
 2nd 0xfffffd806f08aa50 inode (&ip->i_lock)
lock order [1] sbufrcv (&so->so_rcv.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff83339003 -> 0xffffffff8338b2bb is missing
lock order [2] inode (&ip->i_lock) -> [1] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
#1  sblock+0xb6 sys/kern/uipc_socket2.c:536
#2  soreceive+0x27d sys/kern/uipc_socket.c:878
#3  fifo_read+0x117 sys/miscfs/fifofs/fifo_vnops.c:264
#4  VOP_READ+0x101 sys/kern/vfs_vops.c:227
#5  vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1
#6  vndsetcred+0xa1 sys/dev/vnd.c:685
#7  vndioctl+0xdfc sys/dev/vnd.c:486
#8  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#12 Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffd806f08aa50,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffd806f08aa38,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
rrw_enter(fffffd806f08aa38,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
VOP_LOCK(fffffd800d4e1b10,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
vn_lock(fffffd800d4e1b10,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_getcwd_common(fffffd800d4e1b10,fffffd80756a3a50,0,0,200,0,57a86c032228360b) at vfs_getcwd_common+0xd1 sys/kern/vfs_getcwd.c:287
vn_isunder(fffffd800d4e1b10,fffffd80756a3a50,ffff80003c4aa2e0) at vn_isunder+0x56 sys/kern/vfs_vnops.c:694
unp_externalize(fffffd800cf87400,33,0) at unp_externalize+0x26f sys/kern/uipc_usrreq.c:1090
soreceive(ffff800001694018,ffff80003e8f53c8,ffff80003e8f5378,0,ffff80003e8f53b0,ffff80003e8f553c,394227d7dfec1a6c) at soreceive+0xc24 sys/kern/uipc_socket.c:1017
recvit(ffff80003c4aa2e0,8,ffff80003e8f5510,0,ffff80003e8f55c0) at recvit+0x40b sys/kern/uipc_syscalls.c:1078
sys_recvmsg(ffff80003c4aa2e0,ffff80003e8f5670,ffff80003e8f55c0) at sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:878
syscall(ffff80003e8f5670) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003e8f5670) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c25ad963b0, count: -14
ddb{0}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff80003e8f4e50
rbx                                0
rdx               0xffff80000158fc40
rcx               0xffff80003c4aa2e0
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff80003e8f4d30
r9                0x8080808080808080
r10               0x99a3b0dc1a8f4501
r11               0xfb603177600da55f
r12               0xfffffd8003f4e880
r13               0xfffffd8004737890
r14                              0x3
r15               0xffffffff8341e509    substchar+0x900e
rip               0xffffffff8266fea5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003e8f4e40
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=61058 pid=45832 tcnt=2 stat=onproc
    flags process=1000000<CHROOT> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4aad40,0xffffffff83a0e5c0
    process=0xffff8000fffe49c0 user=0xffff80003e8f0000, vmspace=0xfffffd800b0633d0
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 45832  272575  92471      0  2   0x1000000                syz-executor
*45832   61058  92471      0  7   0x5000000                syz-executor
 95891  132830  13272      0  3        0x80  nanoslp       syz-executor
 95891   74971  13272      0  3   0x4000080  netcon        syz-executor
 95891  466247  13272      0  3   0x4000080  fsleep        syz-executor
 42894  244601   7694      0  2           0                syz-executor
 42894   74054   7694      0  3   0x4000080  fsleep        syz-executor
 65488   21060  35079      0  2           0                syz-executor
 65488  513083  35079      0  2   0x4000000                syz-executor
 80432  317794  38066      0  2           0                syz-executor
 80432  119919  38066      0  3   0x4000080  fsleep        syz-executor
  2300  269949  76845      0  3        0x80  nanoslp       syz-executor
  2300  216048  76845      0  3   0x4000080  kqsel         syz-executor
  2300    5111  76845      0  3   0x4000080  fsleep        syz-executor
 47837  125082  56727      0  3      0x3000  suspend       syz-executor
 47837  332434  56727      0  3   0x4081000  biowait       syz-executor
 47837  288774  56727      0  3   0x4081000  fltagain2     syz-executor
 63572  306264   1727      0  3        0x80  nanoslp       syz-executor
 63572  221757   1727      0  3   0x4000080  kqread        syz-executor
 63572  247266   1727      0  3   0x4000080  fsleep        syz-executor
 63572  317749   1727      0  3   0x4000080  fsleep        syz-executor
 15278  380995      0      0  3     0x14280  nfsidl        nfsio
 94713  226574      0      0  3     0x14280  nfsidl        nfsio
 28577  464196      0      0  3     0x14280  nfsidl        nfsio
 80902  511161      0      0  3     0x14280  nfsidl        nfsio
 74829  400469      0      0  3     0x14280  nfsidl        nfsio
 99033     671      0      0  3     0x14280  nfsidl        nfsio
 50950  470754      0      0  3     0x14280  nfsidl        nfsio
 62032   17565      0      0  3     0x14280  nfsidl        nfsio
 30872  112353      0      0  3     0x14280  nfsidl        nfsio
 56326  488160      0      0  3     0x14280  nfsidl        nfsio
  7335  147029      0      0  3     0x14280  nfsidl        nfsio
 98793  176680      0      0  3     0x14280  nfsidl        nfsio
 51496  121751      0      0  3     0x14280  nfsidl        nfsio
 86305   87748      0      0  3     0x14280  nfsidl        nfsio
 66044  343147      0      0  3     0x14280  nfsidl        nfsio
 31561  212859      0      0  3     0x14280  nfsidl        nfsio
 72980  238494      0      0  3     0x14280  nfsidl        nfsio
 94609  279010      0      0  3     0x14280  nfsidl        nfsio
 78201  206596      0      0  3     0x14280  nfsidl        nfsio
  1388  301715      0      0  3     0x14280  nfsidl        nfsio
 89387  460920      0      0  3     0x14200  acct          acct
 19045  314942      1      0  3    0x100083  ttyopn        getty
 76845  400274  91408      0  3        0x82  nanoslp       syz-executor
 56727  121919  91408      0  3        0x82  nanoslp       syz-executor
 92471    4922  91408      0  3        0x82  nanoslp       syz-executor
 35079  226483  91408      0  3        0x82  nanoslp       syz-executor
  1727  219020  91408      0  2         0x2                syz-executor
 13272  273818  91408      0  3        0x82  nanoslp       syz-executor
 38066  369475  91408      0  3        0x82  nanoslp       syz-executor
  7694    9515  91408      0  3        0x82  nanoslp       syz-executor
 38030  146997  85763      0  3    0x100082  sbwait        arp
 85763  358179      1      0  3    0x10008a  sigsusp       sh
 91408   60775  36958      0  2         0x2                syz-executor
 36958   67626  98248      0  3    0x10008a  sigsusp       ksh
 98248  302428  63549      0  3        0x98  kqread        sshd-session
 63549  372388  54115      0  3        0x92  kqread        sshd-session
 54115  454710      1      0  3        0x88  kqread        sshd
 88653  437829  87635     74  3   0x1100092  bpf           pflogd
 87635  307245      1      0  3        0x80  sbwait        pflogd
 43840  415387   2118     73  3   0x1100090  kqread        syslogd
  2118  122852      1      0  3    0x100082  sbwait        syslogd
 17750  354984      1      0  3    0x100080  kqread        resolvd
 54636  439707  51401     77  3    0x100092  kqread        dhcpleased
 47254  146583  51401     77  3    0x100092  kqread        dhcpleased
 51401  248521      1      0  3        0x80  kqread        dhcpleased
 94121  293869      0      0  3     0x14200  bored         smr
 85661  211542      0      0  2     0x14200                zerothread
 82990   36897      0      0  3     0x14200  aiodoned      aiodoned
 78326  461781      0      0  3     0x14200  syncer        update
 21332  145853      0      0  3     0x14200  cleaner       cleaner
 65627  160063      0      0  3     0x14200  reaper        reaper
   354  449396      0      0  3     0x14200  pgdaemon      pagedaemon
 23356  378190      0      0  3     0x14200  bored         viomb
 36293   61620      0      0  3  0x40014200  acpi0         acpi0
 29326  511422      0      0  7  0x40014200                idle1
 27229  388883      0      0  3     0x14200  bored         softnet1
 17443  512632      0      0  3     0x14200  bored         softnet0
 26080  137030      0      0  3     0x14200  bored         systqmp
 41209  128897      0      0  3     0x14200  bored         systq
 22641  362870      0      0  3     0x14200  tmoslp        softclockmp
 39529  127258      0      0  3  0x40014200  tmoslp        softclock
 86923  512070      0      0  3  0x40014200                idle0
     1  505980      0      0  3     0x80082  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
Process 45832 (syz-executor) thread 0xffff80003c4aa2e0 (61058)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83973148)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  unp_externalize+0x155 sys/kern/uipc_usrreq.c:-1
#2  soreceive+0xc24 sys/kern/uipc_socket.c:1017
#3  recvit+0x40b sys/kern/uipc_syscalls.c:1078
#4  sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:878
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#6  Xsyscall+0x128
exclusive rwlock sbufrcv r = 0 (0xffff800001694108)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  sblock+0xb6 sys/kern/uipc_socket2.c:536
#3  soreceive+0x27d sys/kern/uipc_socket.c:878
#4  recvit+0x40b sys/kern/uipc_syscalls.c:1078
#5  sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:878
#6  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#7  Xsyscall+0x128
Process 47837 (syz-executor) thread 0xffff80002a28ca90 (332434)
exclusive rrwlock inode r = 0 (0xfffffd8072eb8588)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11097  12108K   12297K 166960K     14179        0
            pcb    18     16K      32K 166960K       794        0
         rtable   246     15K      16K 166960K       933        0
             pf    35     17K      82K 166960K       232        0
         ifaddr    42      8K       8K 166960K       197        0
        ifgroup    58      2K       3K 166960K       328        0
         sysctl     4      1K       9K 166960K        37        0
       counters    70     37K      39K 166960K       332        0
       ioctlops     0      0K       4K 166960K      2034        0
            iov     0      0K      28K 166960K       141        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1462     92K      93K 166960K      3426        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        43        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       212        0
        dirhash    12      2K       3K 166960K        51        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    20     73K     248K 166960K      2648        0
          sigio     0      0K       0K 166960K        46        0
           proc    73    115K     164K 166960K      1058        0
        subproc    81      5K       5K 166960K       153        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       335        0
       in_multi    87      6K       6K 166960K       330        0
    ether_multi     1      0K       0K 166960K        28        0
            mrt     1      0K       0K 166960K        19        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   229   1023K    1023K 166960K       229        0
           exec     0      0K       1K 166960K       977        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       4K 166960K         5        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   268    176K     184K 166960K     25760        0
       UVM aobj   122     20K      20K 166960K       165        0
     pinsyscall    46     92K     101K 166960K      3992        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       205        0
            NDP    12      0K       1K 166960K       131        0
           temp    78   8684K    8806K 166960K    135629        0
         kqueue    15     24K      32K 166960K       507        0
      SYN cache     2      8K      16K 166960K         3        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      375    0      371     4     3     1     3     0     8    0
rtentry    176      287    0      193     5     0     5     5     0     8    0
unpcb      144     2042    0     2021    18    16     2    11     0     8    1
syncache   336       16    0       16     4     3     1     1     0     8    1
tcpqe       32        3    0        3     1     1     0     1     0     8    0
tcpcb      736      877    0      869    11     9     2     7     0     8    1
arp        136       43    0       27     1     0     1     1     0     8    0
inpcb      328     3662    0     3582    33    23    10    13     0     8    3
nd6        152       54    0       31     1     0     1     1     0     8    0
pkpcb       40       22    0       22     4     3     1     1     0     8    1
kcovpl      48       17    0        8     1     0     1     1     0     8    0
mppekey    1024       2    0        2     2     2     0     1     0     8    0
ppxss      1192      92    0       92     4     3     1     1     0     8    1
pppxif     1504      12    0       12     4     4     0     1     0     8    0
pffrag     232       17    0        5     1     0     1     1     0   482    0
pffrnode    88       17    0        5     1     0     1     1     0     8    0
pffrent     40       26    0       13     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        1     1     1     0     1     0     8    0
rttmr      136        5    0        5     3     2     1     1     0     8    1
art_heap8  4096       4    0        0     4     0     4     4     0     8    0
art_heap4  256     1315    0      909    36    10    26    28     0     8    0
art_table   40     1319    0      909     5     0     5     5     0     8    0
art_node    32      284    0      202     1     0     1     1     0     8    0
sysvmsgpl   40       24    0       16     1     0     1     1     0     8    0
semupl     112        2    0        2     2     1     1     1     0     8    1
semapl     112      210    0      200     1     0     1     1     0     8    0
shmpl      112      123    0        9     4     0     4     4     0     8    0
dirhash    1024      43    0       26     3     0     3     3     0     8    0
dino2pl    256     6466    0     4940    96     0    96    96     0     8    0
ffsino     296     6466    0     4940   118     0   118   118     0     8    0
nchpl      144    10013    0     8291    64     0    64    64     0     8    0
rtmask      32       24    0       24     4     3     1     1     0     8    1
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   36516    0    36516     3     2     1     2     0     8    1
percpumem   16      181    0      131     1     0     1     1     0     8    0
vcpupl     3968       5    0        0     1     0     1     1     0     8    0
vmpool     848       38    0       33     2     1     1     1     0     8    0
kstatmem   264      196    0      168     5     2     3     3     0     8    1
scsiplug    72       10    0       10     6     6     0     1     0     8    0
scxspl     216    77707    0    77706    14    12     2     8     1     8    1
plimitpl   152      799    0      777     1     0     1     1     0     8    0
sigapl     424     2941    0     2870     8     0     8     8     0     8    0
knotepl    120     1088    0        0    32     0    32    32     0     8    0
kqueuepl   224     1033    0     1022    12    10     2     5     0     8    0
pipepl     344      559    0      528     6     2     4     6     0     8    1
fdescpl    528     2880    0     2846     3     0     3     3     0     8    0
filepl     160    21255    0    20942    36    20    16    25     0     8    1
lockfpl    104     1482    0     1479     3     2     1     2     0     8    0
lockfspl    48      498    0      495     1     0     1     1     0     8    0
sessionpl  144       41    0       32     1     0     1     1     0     8    0
pgrppl      48       88    0       70     1     0     1     1     0     8    0
ucredpl    104     3588    0     3574     1     0     1     1     0     8    0
zombiepl   144     3343    0     3342     1     0     1     1     0     8    0
processpl  1232    2941    0     2870     7     1     6     7     0     8    0
procpl     664     7118    0     7034    10     2     8     8     0     8    0
sosppl     176       24    0       24     4     3     1     1     0     8    1
sockpl     752     6236    0     6131    75    61    14    41     0     8    3
mcl64k     65536     10    0        0     2     0     2     2     0     8    0
mcl16k     16384     10    0        0     2     0     2     2     0     8    0
mcl12k     12288      5    0        0     1     0     1     1     0     8    0
mcl9k      9216       4    0        0     1     0     1     1     0     8    0
mcl8k      8192       7    0        0     1     0     1     1     0     8    0
mcl4k      4096     125    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     124    0        0    13     1    12    12     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256     1174    0        0    72     0    72    72     0     8    0
bufpl      280    32242    0    26106   439     0   439   439     0     8    0
anonpl      32    11666    0        0    96     1    95    95     0   246    0
amapchunkpl 152   88911    0    88178    57    24    33    34     0   158    3
amappl16   200    12161    0    11966    83    61    22    28     0     8    8
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184       12    0       12     2     2     0     1     0     8    0
amappl13   176      534    0      532     1     0     1     1     0     8    0
amappl12   168     3318    0     3272     3     0     3     3     0     8    0
amappl11   160        9    0        9     2     2     0     1     0     8    0
amappl10   152       46    0       32     1     0     1     1     0     8    0
amappl9    144      250    0      250     1     1     0     1     0     8    0
amappl8    136       48    0       46     1     0     1     1     0     8    0
amappl7    128      116    0      114     1     0     1     1     0     8    0
amappl6    120      397    0      381     1     0     1     1     0     8    0
amappl5    112       85    0       74     1     0     1     1     0     8    0
amappl4    104      508    0      474     1     0     1     1     0     8    0
amappl3     96    15515    0    15409     4     1     3     3     0     8    0
amappl2     88     3047    0     2967     2     0     2     2     0     8    0
amappl1     80    21748    0    21116    15     0    15    15     0     8    0
amappl      88    24432    0    24249     5     0     5     5     0    92    0
uvmvnodes   80      188    0        0     4     0     4     4     0     8    0
dma65536   65536      1    0        1     1     1     0     1     0     8    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        1    0        1     1     1     0     1     0     8    0
dma256     256        8    0        8     2     2     0     1     0     8    0
dma128     128      256    0      256     4     4     0     1     0     8    0
dma64       64        9    0        9     4     3     1     1     0     8    1
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72      164    0       43     3     0     3     3     0     8    0
uaddrrnd    24     2880    0     2846     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2880    0     2846     1     0     1     1     0     8    0
vmmpekpl   168    25168    0    25120     3     0     3     3     0     8    0
vmmpepl    168   190599    0   188348   130    20   110   110     0   357   10
vmsppl     488     2879    0     2846     5     0     5     5     0     8    0
rwobjpl     80    52752    0    51282    38     2    36    36     0     8    0
pdppl      4096    5844    0     5763   120    39    81    84     0     8    0
pvpl        32    21104    0        0   170     0   170   170     0   265    0
pmappl     256     2917    0     2879     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      397    0       74    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffd806f08aa50,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffd806f08aa38,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
rrw_enter(fffffd806f08aa38,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
VOP_LOCK(fffffd800d4e1b10,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
vn_lock(fffffd800d4e1b10,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_getcwd_common(fffffd800d4e1b10,fffffd80756a3a50,0,0,200,0,57a86c032228360b) at vfs_getcwd_common+0xd1 sys/kern/vfs_getcwd.c:287
vn_isunder(fffffd800d4e1b10,fffffd80756a3a50,ffff80003c4aa2e0) at vn_isunder+0x56 sys/kern/vfs_vnops.c:694
unp_externalize(fffffd800cf87400,33,0) at unp_externalize+0x26f sys/kern/uipc_usrreq.c:1090
soreceive(ffff800001694018,ffff80003e8f53c8,ffff80003e8f5378,0,ffff80003e8f53b0,ffff80003e8f553c,394227d7dfec1a6c) at soreceive+0xc24 sys/kern/uipc_socket.c:1017
recvit(ffff80003c4aa2e0,8,ffff80003e8f5510,0,ffff80003e8f55c0) at recvit+0x40b sys/kern/uipc_syscalls.c:1078
sys_recvmsg(ffff80003c4aa2e0,ffff80003e8f5670,ffff80003e8f55c0) at sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:878
syscall(ffff80003e8f5670) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003e8f5670) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c25ad963b0, count: -14
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299ddff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: -5

Crashes (188746):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/11 18:44 openbsd 527652508a36 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 15:10 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 12:33 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 08:11 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 07:28 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 03:43 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 02:43 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 01:49 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 00:48 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/11 00:08 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 23:04 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 23:00 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 21:56 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 20:56 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 20:49 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 19:41 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 18:35 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 18:10 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 17:09 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 16:09 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 16:02 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/10 02:56 openbsd ee14140d0567 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 13:36 openbsd 2bce6ca4aaa2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 12:24 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 12:08 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 11:08 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 10:54 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 09:40 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 09:05 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 08:02 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 07:51 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 06:45 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 05:43 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 04:46 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 03:44 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 03:16 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 02:16 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/09 01:18 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 23:33 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 21:48 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 20:24 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 18:39 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 15:32 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 14:16 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/01/08 12:00 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/02/03 09:06 openbsd db5d28f093d6 568559e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
* Struck through repros no longer work on HEAD.