syzbot


witness: reversal: lock order data missing (5)

Status: upstream: reported on 2025/02/03 09:07
Reported-by: syzbot+6e45b18b14156f1df9f4@syzkaller.appspotmail.com
First crash: 139d, last: now
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: reversal: lock order data missing (2) C 173 1351d 1501d 0/3 closed as invalid on 2022/02/22 18:44
openbsd witness: reversal: lock order data missing (3) 8192 347d 1195d 3/3 fixed on 2024/07/10 22:52
openbsd witness: reversal: lock order data missing (4) 57671 214d 347d 0/3 auto-obsoleted due to no activity on 2025/01/09 12:07
openbsd witness: reversal: lock order data missing C 667 1501d 1571d 3/3 fixed on 2021/05/14 01:59

Sample crash report:
login: witness: lock order reversal:
 1st 0xffff800001546220 sbufsnd (&so->so_snd.sb_lock)
 2nd 0xfffffd806e411428 inode (&ip->i_lock)
lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff8342d33d -> 0xffffffff833d1200 is missing
lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
#1  sblock+0xb7 sys/kern/uipc_socket2.c:536
#2  soreceive+0x28e sys/kern/uipc_socket.c:881
#3  fifo_read+0x11a sys/miscfs/fifofs/fifo_vnops.c:264
#4  VOP_READ+0x102 sys/kern/vfs_vops.c:227
#5  vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1
#6  vndsetcred+0xa1 sys/dev/vnd.c:684
#7  vndioctl+0xe6c sys/dev/vnd.c:485
#8  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#10 sys_ioctl+0x5c3 sys/kern/sys_generic.c:-1
#11 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#11 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#12 Xsyscall+0x128
lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock)
#0  rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
#1  sblock+0xb7 sys/kern/uipc_socket2.c:536
#2  sosplice+0x40d sys/kern/uipc_socket.c:1366
#3  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1221
#4  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#5  Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffd806e411428,9,0) at witness_checkorder+0x10fb sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffd806e411410,1) at rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
rrw_enter(fffffd806e411410,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
VOP_LOCK(fffffd800b4961e0,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
vn_lock(fffffd800b4961e0,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_lookup(ffff80002a324578) at vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
namei(ffff80002a324578) at namei+0x7aa sys/kern/vfs_lookup.c:250
unp_connect(ffff800001546048,fffffd80693f3200,ffff80003c4b7750) at unp_connect+0x27d sys/kern/uipc_usrreq.c:872
uipc_dgram_send(ffff800001546048,fffffd800bf96300,fffffd80693f3200,0) at uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:609
sosend(ffff800001546048,fffffd80693f3200,ffff80002a3247f8,0,0,8) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80003c4b7750,4,ffff80002a324970,8,ffff80002a324a30) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendmsg(ffff80003c4b7750,ffff80002a324ae0,ffff80002a324a30) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
syscall(ffff80002a324ae0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a324ae0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa72da34d7c0, count: -15
ddb{0}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff80002a3241f0
rbx               0xfffffd8004744d68
rdx               0xffff800001475fc0
rcx               0xffff80003c4b7750
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff80002a3240d0
r9                0x8080808080808080
r10               0x2075648860790931
r11               0xd701482a36222554
r12                                0
r13               0xfffffd8003f5bf00
r14                              0x3
r15                       0xffffffff
rip               0xffffffff8232ace5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a3241e0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=186627 pid=7351 tcnt=2 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff2530,0xffff80003c4b6050
    process=0xffff80003a7f9858 user=0xffff80002a31f000, vmspace=0xfffffd805cd505c8
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 93764   79613  27559      0  7           0                syz-executor
 94044  455411  46661      0  2           0                syz-executor
 94044  416825  46661      0  2   0x4000080                syz-executor
  7351   89691  80710  60928  2        0x10                syz-executor
* 7351  186627  80710  60928  7   0x4000010                syz-executor
   930  507640  63007      0  2           0                syz-executor
   930  470106  63007      0  2   0x4000000                syz-executor
 50572  230382   5253      0  2           0                syz-executor
 50572   24750   5253      0  3   0x4000080  sbwait        syz-executor
 50572   31295   5253      0  3   0x4000080  fsleep        syz-executor
 77255   38007  23810  60929  3        0x90  nanoslp       syz-executor
 77255  369037  23810  60929  3   0x4000090  kqread        syz-executor
 77255  393334  23810  60929  3   0x4000090  fsleep        syz-executor
 42056  217794  12691      0  2           0                syz-executor
 42056  259632  12691      0  3   0x4000080  kqsel         syz-executor
 42056  282613  12691      0  3   0x4000080  fsleep        syz-executor
 22532  174200  86285      0  2           0                syz-executor
 22532  490269  86285      0  3   0x4000080  sbwait        syz-executor
 22532   23149  86285      0  3   0x4000080  kqread        syz-executor
 22532  123280  86285      0  3   0x4000080  fsleep        syz-executor
  5253  363468  81983      0  3        0x82  nanoslp       syz-executor
  8389  195439      1      0  3        0x80  nanoslp       init
 12691  417495  81983      0  3        0x82  nanoslp       syz-executor
 23810  508271  81983      0  3        0x82  nanoslp       syz-executor
 43339  300330      0      0  3     0x14280  nfsidl        nfsio
 58030   48709      0      0  3     0x14280  nfsidl        nfsio
 14702  251733      0      0  3     0x14280  nfsidl        nfsio
 46140  304340      0      0  3     0x14280  nfsidl        nfsio
 82291  234708      0      0  3     0x14280  nfsidl        nfsio
  8063  123621      0      0  3     0x14280  nfsidl        nfsio
 67410  517742      0      0  3     0x14280  nfsidl        nfsio
  6800  282843      0      0  3     0x14280  nfsidl        nfsio
 66852   33507      0      0  3     0x14280  nfsidl        nfsio
 70421  161013      0      0  3     0x14280  nfsidl        nfsio
 58447   82375      0      0  3     0x14280  nfsidl        nfsio
 60446   18598      0      0  3     0x14280  nfsidl        nfsio
 88288  239804      0      0  3     0x14280  nfsidl        nfsio
 78498  351509      0      0  3     0x14280  nfsidl        nfsio
  2290  407112      0      0  3     0x14280  nfsidl        nfsio
 22007  210171      0      0  3     0x14280  nfsidl        nfsio
 98941   10848      0      0  3     0x14280  nfsidl        nfsio
 13671  108922      0      0  3     0x14280  nfsidl        nfsio
 17551  344575      0      0  3     0x14280  nfsidl        nfsio
 33227  237501      0      0  3     0x14280  nfsidl        nfsio
 90442  334803      0      0  3     0x14200  bored         sosplice
 46661  275306  81983      0  3        0x82  nanoslp       syz-executor
 86285  418991  81983      0  3        0x82  nanoslp       syz-executor
 27559  110672  81983      0  3        0x82  nanoslp       syz-executor
 80710  510808  81983      0  3        0x82  nanoslp       syz-executor
 63007  187042  81983      0  3        0x82  nanoslp       syz-executor
 81983  167844  13646      0  3        0x82  kqread        syz-executor
 13646  380217  24153      0  3    0x10008a  sigsusp       ksh
 24153  243375  25452      0  3        0x98  kqread        sshd-session
 25452  189051  90842      0  3        0x92  kqread        sshd-session
 90842  420551      1      0  3        0x88  kqread        sshd
 89072  298583  25461     74  3   0x1100092  bpf           pflogd
 25461  281723      1      0  3        0x80  sbwait        pflogd
 21548  448571  82653     73  3   0x1100090  kqread        syslogd
 82653  490098      1      0  3    0x100082  sbwait        syslogd
 63780  372274      1      0  3    0x100080  kqread        resolvd
 84907  124960   2071     77  3    0x100092  kqread        dhcpleased
 73646  168762   2071     77  3    0x100092  kqread        dhcpleased
  2071   14574      1      0  3        0x80  kqread        dhcpleased
 35709  172780      0      0  3     0x14200  bored         smr
 76765  217894      0      0  2     0x14200                zerothread
  2004  466801      0      0  3     0x14200  aiodoned      aiodoned
 27564  366644      0      0  3     0x14200  syncer        update
 44517  140163      0      0  3     0x14200  cleaner       cleaner
   378  151906      0      0  3     0x14200  reaper        reaper
 69205  129760      0      0  3     0x14200  pgdaemon      pagedaemon
 25246  412478      0      0  3     0x14200  bored         viomb
 12798  309047      0      0  3  0x40014200  acpi0         acpi0
  4974  265673      0      0  3  0x40014200                idle1
 32192   14996      0      0  3     0x14200  bored         softnet3
 31527  303036      0      0  3     0x14200  bored         softnet2
 40255  252094      0      0  3     0x14200  bored         softnet1
 38023   83293      0      0  3     0x14200  bored         softnet0
 88889  448816      0      0  3     0x14200  bored         systqmp
 68448  441932      0      0  3     0x14200  bored         systq
 83719  441227      0      0  3     0x14200  tmoslp        softclockmp
  4670  283628      0      0  3  0x40014200  tmoslp        softclock
 32901  333788      0      0  3  0x40014200                idle0
     1   30906      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
Process 7351 (syz-executor) thread 0xffff80003c4b7750 (186627)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83976530)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  unp_connect+0x26c sys/kern/uipc_usrreq.c:872
#2  uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:609
#3  sosend+0x804 sys/kern/uipc_socket.c:-1
#4  sendit+0x721 sys/kern/uipc_syscalls.c:779
#5  sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
#6  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#7  Xsyscall+0x128
exclusive rwlock sbufsnd r = 0 (0xffff800001546220)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  sblock+0xb7 sys/kern/uipc_socket2.c:536
#3  sosend+0x2e2 sys/kern/uipc_socket.c:630
#4  sendit+0x721 sys/kern/uipc_syscalls.c:779
#5  sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
#6  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10229  11055K   11467K 166960K     12348        0
            pcb    20     20K      22K 166960K       538        0
         rtable   175      9K      11K 166960K       639        0
             pf    46     19K      83K 166960K       203        0
         ifaddr    38      6K       8K 166960K       137        0
        ifgroup    71      3K       3K 166960K       230        0
         sysctl     4      1K       9K 166960K        67        0
       counters    78     38K      38K 166960K       274        0
       ioctlops     0      0K       4K 166960K      1816        0
            iov     0      0K      28K 166960K       181        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1443     91K      91K 166960K      2641        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        22        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       1K 166960K       210        0
        dirhash    12      2K       3K 166960K        51        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      89K 166960K      1823        0
          sigio     0      0K       0K 166960K        38        0
           proc    63     79K     128K 166960K       857        0
        subproc    72      4K       4K 166960K       101        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       369        0
       in_multi    66      4K       7K 166960K       186        0
    ether_multi     1      0K       0K 166960K         8        0
            mrt     0      0K       0K 166960K        16        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   115    519K     519K 166960K       115        0
           exec     0      0K       1K 166960K       595        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   240    158K     173K 166960K     18153        0
       UVM aobj    11      2K       2K 166960K        11        0
     pinsyscall    42     84K     104K 166960K      3032        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        93        0
            NDP    16      0K       2K 166960K        95        0
           temp    79   8696K    8768K 166960K     91073        0
         kqueue    15     24K      32K 166960K       360        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      332    0      329     7     4     3     3     0     8    2
rtentry    176      200    0      131     6     0     6     6     0     8    0
unpcb      144     1438    0     1411    11     9     2     6     0     8    1
syncache   336       11    0       11     3     2     1     1     0     8    1
tcpqe       32        4    0        4     2     1     1     1     0     8    1
tcpcb      736      560    0      553     7     3     4     4     0     8    2
arp        128       27    0       19     1     0     1     1     0     8    0
inpcb      328     2169    0     2152    28    23     5    16     0     8    3
nd6        144       40    0       22     1     0     1     1     0     8    0
pkpcb       40       12    0       12     1     1     0     1     0     8    0
kcovpl      48       11    0        3     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     1     0     1     0     8    0
ppxss      1192      82    0       80     2     1     1     1     0     8    0
pppxif     1504      13    0       12     3     2     1     1     0     8    0
pfstscr     40        1    0        1     1     1     0     1     0     8    0
pffrag     232       17    0        7     1     0     1     1     0   482    0
pffrnode    88       15    0        7     1     0     1     1     0     8    0
pffrent     40       30    0       20     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       2    0        0     1     0     1     1     0     8    0
pfstitem    24      124    0       34     1     0     1     1     0     8    0
pfstkey    128      126    0       36     3     0     3     3     0     8    0
pfstate    384      125    0       35     9     0     9     9     0     8    0
pfrule     1344      26    0       17     2     1     1     2     0     8    0
rttmr      136        3    0        3     3     3     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      887    0      564    29     3    26    29     0     8    1
art_table   32      890    0      564     4     0     4     4     0     8    0
art_node    16      188    0      127     1     0     1     1     0     8    0
sysvmsgpl   40       24    0       14     1     0     1     1     0     8    0
semapl     112      207    0      197     1     0     1     1     0     8    0
shmpl      112        8    0        0     1     0     1     1     0     8    0
dirhash    1024      43    0       26     3     0     3     3     0     8    0
dino2pl    256     4795    0     3282    95     0    95    95     0     8    0
ffsino     288     4795    0     3282   109     0   109   109     0     8    0
nchpl      144     7368    0     6814    64    39    25    64     0     8    0
rtmask      32       15    0       15     2     2     0     1     0     8    0
uvmvnodes   80     5502    0        0   113     0   113   113     0     8    0
vnodes     216     5502    0        0   306     0   306   306     0     8    0
namei      1024   24610    0    24609     3     2     1     2     0     8    0
percpumem   16      152    0       98     1     0     1     1     0     8    0
kstatmem   264      148    0      110     3     0     3     3     0     8    0
scsiplug    72        6    0        6     3     2     1     1     0     8    1
scxspl     216    35103    0    35103    14    13     1     8     1     8    1
plimitpl   152      311    0      293     1     0     1     1     0     8    0
sigapl     424     2151    0     2080    10     1     9     9     0     8    0
knotepl    120      775    0        0    23     0    23    23     0     8    0
kqueuepl   224      622    0      607     3     1     2     2     0     8    1
pipepl     336      256    0      229     3     0     3     3     0     8    0
fdescpl    520     2109    0     2077     3     0     3     3     0     8    0
filepl     160    13582    0    13343    32    13    19    20     0     8    8
lockfpl    104      981    0      978     2     1     1     2     0     8    0
lockfspl    48      270    0      267     1     0     1     1     0     8    0
sessionpl  144       36    0       28     1     0     1     1     0     8    0
pgrppl      48      225    0      209     1     0     1     1     0     8    0
ucredpl    104     1779    0     1763     1     0     1     1     0     8    0
zombiepl   144     2080    0     2080     1     0     1     1     0     8    1
processpl  1240    2151    0     2080     6     0     6     6     0     8    0
procpl     656     5008    0     4925     9     1     8     8     0     8    1
srpgc       96       19    0       19     4     3     1     1     0     8    1
sosppl     168       11    0       11     3     2     1     1     0     8    1
sockpl     728     4000    0     3953    51    37    14    25     0     8    8
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl12k     12288      3    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     129    0        0    17     0    17    17     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      28    0        0     4     0     4     4     0     8    0
mtagpl      96       11    0        0     1     0     1     1     0     8    0
mbufpl     256     2243    0        0   138     0   138   138     0     8    0
bufpl      280    12284    0     6142   439     0   439   439     0     8    0
anonpl      32    17381    0        0   141     0   141   141     0   246    0
amapchunkpl 152   60896    0    60095    35     4    31    33     0   158    0
amappl16   200     7366    0     7112    79    47    32    42     0     8    0
amappl15   192        9    0        9     2     2     0     1     0     8    0
amappl14   184      158    0      147     1     0     1     1     0     8    0
amappl13   176        7    0        7     2     2     0     1     0     8    0
amappl12   168     2816    0     2786     3     1     2     2     0     8    0
amappl11   160      123    0      109     1     0     1     1     0     8    0
amappl10   152       10    0        9     2     1     1     1     0     8    0
amappl9    144      254    0      254     1     1     0     1     0     8    0
amappl8    136       22    0       19     1     0     1     1     0     8    0
amappl7    128      124    0      112     1     0     1     1     0     8    0
amappl6    120      215    0      211     1     0     1     1     0     8    0
amappl5    112      137    0      126     1     0     1     1     0     8    0
amappl4    104      355    0      337     1     0     1     1     0     8    0
amappl3     96    12541    0    12436     5     1     4     4     0     8    0
amappl2     88      764    0      701     2     0     2     2     0     8    0
amappl1     80    17049    0    16466    16     1    15    15     0     8    0
amappl      88    17044    0    16871     5     0     5     5     0    92    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        8    0        8     3     3     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       10    0        0     1     0     1     1     0     8    0
uaddrrnd    24     2109    0     2077     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2109    0     2077     1     0     1     1     0     8    0
vmmpekpl   168    17688    0    17639     3     0     3     3     0     8    0
vmmpepl    168   139677    0   137436   131    22   109   122     0   357    1
vmsppl     480     2108    0     2077     6     1     5     5     0     8    0
rwobjpl     72    42656    0    36018   126     0   126   126     0     8    0
pdppl      4096    4225    0     4154   111    40    71    83     0     8    0
pvpl        32    25066    0        0   203     0   203   203     0   265    0
pmappl     256     2108    0     2077     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      538    0       56    14     0    14    14     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffd806e411428,9,0) at witness_checkorder+0x10fb sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffd806e411410,1) at rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
rrw_enter(fffffd806e411410,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
VOP_LOCK(fffffd800b4961e0,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
vn_lock(fffffd800b4961e0,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_lookup(ffff80002a324578) at vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
namei(ffff80002a324578) at namei+0x7aa sys/kern/vfs_lookup.c:250
unp_connect(ffff800001546048,fffffd80693f3200,ffff80003c4b7750) at unp_connect+0x27d sys/kern/uipc_usrreq.c:872
uipc_dgram_send(ffff800001546048,fffffd800bf96300,fffffd80693f3200,0) at uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:609
sosend(ffff800001546048,fffffd80693f3200,ffff80002a3247f8,0,0,8) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80003c4b7750,4,ffff80002a324970,8,ffff80002a324a30) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendmsg(ffff80003c4b7750,ffff80002a324ae0,ffff80002a324a30) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
syscall(ffff80002a324ae0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a324ae0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa72da34d7c0, count: -15
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153
__mp_lock(ffffffff83976328) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83976328) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
end trace frame: 0x0, count: -5

Crashes (100910):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/23 06:27 openbsd bfd2b5c81cd0 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 05:40 openbsd bfd2b5c81cd0 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 04:14 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 03:35 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 02:52 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 02:16 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 01:43 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 01:13 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/23 00:39 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 23:57 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 23:25 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 22:56 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 22:11 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 21:17 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 20:26 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 19:36 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 18:40 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 17:54 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 17:03 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 16:58 openbsd 1d816294a660 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 15:58 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 15:20 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 14:43 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 13:57 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 13:23 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 12:35 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 11:51 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 11:20 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 10:25 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 09:58 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 09:00 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 08:15 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 07:28 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 06:44 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 06:08 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 05:37 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 05:10 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 04:11 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 03:52 openbsd cb7d86176520 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 02:52 openbsd b2c92be8430f d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 01:54 openbsd b2c92be8430f d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/22 01:02 openbsd b2c92be8430f d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/02/03 09:06 openbsd db5d28f093d6 568559e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
* Struck through repros no longer work on HEAD.