witness: reversal: lock order data missing (5)

Status: upstream: reported on 2025/02/03 09:07
Reported-by: syzbot+6e45b18b14156f1df9f4@syzkaller.appspotmail.com
First crash: 609d, last: now
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: reversal: lock order data missing (2) -1 syz, C 173 1821d 1971d 0/4 closed as invalid on 2022/02/22 18:44
openbsd witness: reversal: lock order data missing (3) -1 8192 817d 1665d 3/4 fixed on 2024/07/10 22:52
openbsd witness: reversal: lock order data missing (4) -1 57671 684d 817d 0/4 auto-obsoleted due to no activity on 2025/01/09 12:07
openbsd witness: reversal: lock order data missing -1 syz, C 667 1971d 2041d 3/4 fixed on 2021/05/14 01:59

Sample crash report:
witness: lock order reversal:
 1st 0xffff8000015ac1f8 sbufsnd (&so->so_snd.sb_lock)
 2nd 0xfffffa00656eaec8 inode (&ip->i_lock)
lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff8352ec32 -> 0xffffffff834a7428 is missing
lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
#1  sblock+0xb6 sys/kern/uipc_socket2.c:536
#2  soreceive+0x27d sys/kern/uipc_socket.c:890
#3  fifo_read+0x117 sys/miscfs/fifofs/fifo_vnops.c:264
#4  VOP_READ+0x101 sys/kern/vfs_vops.c:227
#5  vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1
#6  vndsetcred+0xa1 sys/dev/vnd.c:685
#7  vndioctl+0xdfc sys/dev/vnd.c:486
#8  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537
#10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
#12 Xsyscall+0x128
lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock)
#0  rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
#1  sblock+0xb6 sys/kern/uipc_socket2.c:536
#2  sosplice+0x32b sys/kern/uipc_socket.c:1352
#3  sys_setsockopt+0x2ce sys/kern/uipc_syscalls.c:1234
#4  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
#5  Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> show kasan
No such command
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffa00656eaec8,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffa00656eaeb0,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
rrw_enter(fffffa00656eaeb0,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
VOP_LOCK(fffffa0060578448,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
vn_lock(fffffa0060578448,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576
vfs_lookup(ffff80002e38c2b0) at vfs_lookup+0x12b sys/kern/vfs_lookup.c:431
namei(ffff80002e38c2b0) at namei+0x7c1 sys/kern/vfs_lookup.c:250
unp_connect(ffff8000015ac010,fffffa0064a45100,ffff80002a22da00) at unp_connect+0x29d sys/kern/uipc_usrreq.c:875
uipc_dgram_send(ffff8000015ac010,fffffa0064a45800,fffffa0064a45100,fffffa0064a46100) at uipc_dgram_send+0x163 sys/kern/uipc_usrreq.c:609
sosend(ffff8000015ac010,fffffa0064a45100,ffff80002e38c538,0,fffffa0064a46100,c) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80002a22da00,3,ffff80002e38c6b8,c,ffff80002e38c770) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785
sys_sendmsg(ffff80002a22da00,ffff80002e38c820,ffff80002e38c770) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:603
syscall(ffff80002e38c820) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002e38c820) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe50fe045640, count: -15
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002e38bf20
rbx                                0
rdx                                0
rcx               0xffff80002a22da00
rax               0xffffffff839b6ff0    cpu_info_full_primary+0x1ff0
r8                0xffff80002e38be00
r9                0x8080808080808080
r10               0xd54bc1fd9673a522
r11               0xe5a9bb3c48ffd8e8
r12               0xfffffa00040de980
r13               0xfffffa00048c74d8
r14                              0x3
r15               0xffffffff83538532    substchar+0x194d
rip               0xffffffff82ea4935    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002e38bf10
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=423159 pid=84373 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=75, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a22c010,0xffff80002a22c2b8
    process=0xffff800045fed378 user=0xffff80002e387000, vmspace=0xfffffa006ced19a0
    estcpu=25, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> 

Crashes (236469):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/06 02:00 openbsd d3d189e09133 f7710056 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/06 00:55 openbsd d3d189e09133 f7710056 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 20:52 openbsd fe7391f28055 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 19:52 openbsd fe7391f28055 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 19:38 openbsd fe7391f28055 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 18:29 openbsd fe7391f28055 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 14:31 openbsd fe7391f28055 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 10:20 openbsd e058c89070c2 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 09:19 openbsd e058c89070c2 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/05 06:32 openbsd e058c89070c2 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/04 21:40 openbsd dfaf7899c030 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/04 14:58 openbsd dfaf7899c030 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/04 09:37 openbsd 1e9f05948cfd 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/04 02:20 openbsd 1e9f05948cfd 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/02/03 09:06 openbsd db5d28f093d6 568559e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2026/10/06 00:05 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 f7710056 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 22:54 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 21:53 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 17:00 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 15:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 13:59 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 12:49 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 af63e995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 11:22 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 07:27 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 05:16 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3ca837577e76 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 04:07 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 03:16 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 02:11 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/05 01:03 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 23:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 22:48 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 20:49 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 19:29 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 18:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 16:42 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 15:17 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 13:31 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 11:43 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 834bc6d187a0 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 10:42 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 08:59 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 07:17 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 06:16 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 05:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 04:06 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
2026/10/04 01:17 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48600fec022c 57bbd979 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan witness: reversal: lock order data missing
* Struck through repros no longer work on HEAD.