syzbot


witness: reversal: lock order data missing (5)

Status: upstream: reported on 2025/02/03 09:07
Reported-by: syzbot+6e45b18b14156f1df9f4@syzkaller.appspotmail.com
First crash: 125d, last: now
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: reversal: lock order data missing (2) C 173 1336d 1486d 0/3 closed as invalid on 2022/02/22 18:44
openbsd witness: reversal: lock order data missing (3) 8192 332d 1180d 3/3 fixed on 2024/07/10 22:52
openbsd witness: reversal: lock order data missing (4) 57671 199d 332d 0/3 auto-obsoleted due to no activity on 2025/01/09 12:07
openbsd witness: reversal: lock order data missing C 667 1486d 1556d 3/3 fixed on 2021/05/14 01:59

Sample crash report:
witness: lock order reversal:
 1st 0xffff800010fddb80 sbufsnd (&so->so_snd.sb_lock)
 2nd 0xfffffd806f5321e0 inode (&ip->i_lock)
lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock)
lock order data 0xffffffff8343210f -> 0xffffffff833d2795 is missing
lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock)
#0  rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
#1  sblock+0xb7 sys/kern/uipc_socket2.c:536
#2  soreceive+0x28e sys/kern/uipc_socket.c:881
#3  fifo_read+0x11a sys/miscfs/fifofs/fifo_vnops.c:264
#4  VOP_READ+0x102 sys/kern/vfs_vops.c:227
#5  vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1
#6  vndsetcred+0xa1 sys/dev/vnd.c:684
#7  vndioctl+0xe6c sys/dev/vnd.c:485
#8  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#10 sys_ioctl+0x5c3 sys/kern/sys_generic.c:-1
#11 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#11 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#12 Xsyscall+0x128
lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock)
#0  rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
#1  sblock+0xb7 sys/kern/uipc_socket2.c:536
#2  sosplice+0x40d sys/kern/uipc_socket.c:1366
#3  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1221
#4  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#5  Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffd806f5321e0,9,0) at witness_checkorder+0x10fb sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffd806f5321c8,1) at rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
rrw_enter(fffffd806f5321c8,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
VOP_LOCK(fffffd806d1b2878,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
vn_lock(fffffd806d1b2878,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_lookup(ffff800034fe9208) at vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
namei(ffff800034fe9208) at namei+0x7aa sys/kern/vfs_lookup.c:250
unp_connect(ffff800010fdd9a8,fffffd806c30e800,ffff800037fee030) at unp_connect+0x27d sys/kern/uipc_usrreq.c:868
uipc_dgram_send(ffff800010fdd9a8,fffffd806bfcaf00,fffffd806c30e800,0) at uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:607
sosend(ffff800010fdd9a8,fffffd806c30e800,ffff800034fe9488,0,0,8) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff800037fee030,3,ffff800034fe9600,8,ffff800034fe96c0) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendmsg(ffff800037fee030,ffff800034fe9770,ffff800034fe96c0) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
syscall(ffff800034fe9770) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800034fe9770) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x5cd0b5903d0, count: -15
ddb{0}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff800034fe8e80
rbx               0xfffffd8004744938
rdx               0xffff800001458f40
rcx               0xffff800037fee030
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff800034fe8d60
r9                0x8080808080808080
r10               0xb5e4982ceda4abb7
r11               0x783b234b907aa35b
r12                                0
r13               0xfffffd8003f5cf00
r14                              0x3
r15                       0xffffffff
rip               0xffffffff82a95135    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800034fe8e70
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=342634 pid=6452 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800037fee7e0,0xffff800037fee560
    process=0xffff80003c4aa210 user=0xffff800034fe4000, vmspace=0xfffffd806c004b60
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 18824  132794  20275      0  2           0                syz-executor
 18824  467687  20275      0  3   0x4000080  fsleep        syz-executor
  6452   46652  81452      0  2           0                syz-executor
* 6452  342634  81452      0  7   0x4000000                syz-executor
 40084  471070  56694      0  2           0                syz-executor
 75685   47516  64991      0  2           0                syz-executor
 75685  293580  64991      0  3   0x4000080  fsleep        syz-executor
 72644  238247  56112      0  3        0x80  nanoslp       syz-executor
 72644  496351  56112      0  2   0x4000000                syz-executor
 64991  437344  34130      0  3        0x82  nanoslp       syz-executor
 26250  257269      0      0  3     0x14280  nfsidl        nfsio
 93938  243940      0      0  3     0x14280  nfsidl        nfsio
 60568  308319      0      0  3     0x14280  nfsidl        nfsio
 98593  255599      0      0  3     0x14280  nfsidl        nfsio
  3062  319057      0      0  3     0x14280  nfsidl        nfsio
 69535  519047      0      0  3     0x14280  nfsidl        nfsio
 46095  377888      0      0  3     0x14280  nfsidl        nfsio
 49107  184737      0      0  3     0x14280  nfsidl        nfsio
 58820   89698      0      0  3     0x14280  nfsidl        nfsio
 31112  376945      0      0  3     0x14280  nfsidl        nfsio
 30897  131128      0      0  3     0x14280  nfsidl        nfsio
 14333  211334      0      0  3     0x14280  nfsidl        nfsio
 12128  497961      0      0  3     0x14280  nfsidl        nfsio
  4433  192097      0      0  3     0x14280  nfsidl        nfsio
 86401  123285      0      0  3     0x14280  nfsidl        nfsio
 74846  174846      0      0  3     0x14280  nfsidl        nfsio
 28599  463157      0      0  3     0x14280  nfsidl        nfsio
 48466  408790      0      0  3     0x14280  nfsidl        nfsio
 66728  116035      0      0  3     0x14280  nfsidl        nfsio
 78481  444544      0      0  3     0x14280  nfsidl        nfsio
  7828   84258  34130      0  2         0x2                syz-executor
 81456  397481      0      0  3     0x14200  acct          acct
   430   11562      0      0  3     0x14200  bored         sosplice
 96816   63100  96231      0  3    0x100082  sbwait        arp
 96231  361840  18972      0  3    0x10008a  sigsusp       sh
 56112    1210  34130      0  3        0x82  nanoslp       syz-executor
 20275  194777  34130      0  3        0x82  nanoslp       syz-executor
 18972  165140  34130      0  3        0x82  wait          syz-executor
 56694  351657  34130      0  3        0x82  nanoslp       syz-executor
 81452  344074  34130      0  3        0x82  nanoslp       syz-executor
  7818   30690  34130      0  3        0x82  wait          syz-executor
 34130   90492  29986      0  3        0x82  kqread        syz-executor
 29986  389950  12286      0  3    0x10008a  sigsusp       ksh
 12286   33793  37651      0  3        0x98  kqread        sshd-session
 37651  105660  82522      0  3        0x92  kqread        sshd-session
 85532  222653      1      0  3    0x100083  ttyin         getty
 82522  491620      1      0  3        0x88  kqread        sshd
 39404  436253  90474     74  3   0x1100092  bpf           pflogd
 90474  506420      1      0  3        0x80  sbwait        pflogd
 66016  401371  58380     73  3   0x1100090  kqread        syslogd
 58380   54855      1      0  3    0x100082  sbwait        syslogd
 23845  425322      1      0  3    0x100080  kqread        resolvd
 13340  371183  69948     77  3    0x100092  kqread        dhcpleased
 11512  150366  69948     77  3    0x100092  kqread        dhcpleased
 69948  370923      1      0  3        0x80  kqread        dhcpleased
 66236  153639      0      0  3     0x14200  bored         smr
 40877   31401      0      0  2     0x14200                zerothread
 43722  193593      0      0  3     0x14200  aiodoned      aiodoned
 54391  297526      0      0  3     0x14200  syncer        update
 75998  185015      0      0  3     0x14200  cleaner       cleaner
 11506  440290      0      0  3     0x14200  reaper        reaper
  5359    4919      0      0  3     0x14200  pgdaemon      pagedaemon
 89902  219538      0      0  3     0x14200  bored         viomb
 31904  417756      0      0  3  0x40014200  acpi0         acpi0
  6748  287611      0      0  7  0x40014200                idle1
 55819    8559      0      0  3     0x14200  bored         softnet3
 60777  390940      0      0  3     0x14200  bored         softnet2
 69944    1184      0      0  3     0x14200  bored         softnet1
 59840    8942      0      0  3     0x14200  bored         softnet0
 34801  320016      0      0  3     0x14200  bored         systqmp
 42179  150393      0      0  3     0x14200  bored         systq
 31510  444454      0      0  3     0x14200  tmoslp        softclockmp
 60274  259784      0      0  3  0x40014200  tmoslp        softclock
  8250    4173      0      0  3  0x40014200                idle0
     1  258850      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 6452 (syz-executor) thread 0xffff800037fee030 (342634)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8391fc68)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  unp_connect+0x26c sys/kern/uipc_usrreq.c:868
#2  uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:607
#3  sosend+0x804 sys/kern/uipc_socket.c:-1
#4  sendit+0x721 sys/kern/uipc_syscalls.c:779
#5  sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
#6  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#7  Xsyscall+0x128
exclusive rwlock sbufsnd r = 0 (0xffff800010fddb80)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  sblock+0xb7 sys/kern/uipc_socket2.c:536
#3  sosend+0x2e2 sys/kern/uipc_socket.c:630
#4  sendit+0x721 sys/kern/uipc_syscalls.c:779
#5  sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
#6  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10211  11100K   11283K 166960K     11772        0
            pcb    17     16K      18K 166960K       207        0
         rtable   215      8K       9K 166960K       455        0
             pf    43     19K      19K 166960K        88        0
         ifaddr    44      7K       7K 166960K        73        0
        ifgroup    62      2K       2K 166960K       108        0
         sysctl     4      1K       9K 166960K         8        0
       counters    72     37K      37K 166960K       130        0
       ioctlops     0      0K       4K 166960K      1765        0
            iov     0      0K      12K 166960K        50        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1333     84K      84K 166960K      1737        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        13        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        21        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      93K 166960K       535        0
          sigio     0      0K       0K 166960K        75        0
           proc    72     91K     140K 166960K       618        0
        subproc    72      4K       4K 166960K        90        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        51        0
       in_multi    89      6K       7K 166960K       129        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     0      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       428        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   223    154K     168K 166960K      6374        0
       UVM aobj    21      4K       4K 166960K        21        0
     pinsyscall    44     88K     106K 166960K      1696        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        24        0
            NDP    14      0K       1K 166960K        48        0
           temp    79   8696K    8761K 166960K     14748        0
         kqueue    14     22K      26K 166960K        86        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       73    0       69     1     0     1     1     0     8    0
rtentry    176      135    0       41     5     0     5     5     0     8    0
unpcb      144      239    0      221     3     1     2     2     0     8    1
syncache   336        5    0        5     1     1     0     1     0     8    0
tcpcb      808      100    0       96     1     0     1     1     0     8    0
arp        128       21    0        4     1     0     1     1     0     8    0
inpcb      328      655    0      647    19    12     7    13     0     8    6
nd6        144       28    0        6     1     0     1     1     0     8    0
pkpcb       40        5    0        5     1     1     0     1     0     8    0
kcovpl      48       10    0        2     1     0     1     1     0     8    0
ppxss      1192      24    0       23     2     1     1     1     0     8    0
pppxif     1504       1    0        1     1     0     1     1     0     8    1
pfstscr     40        1    0        1     1     1     0     1     0     8    0
pffrag     232        2    0        0     1     0     1     1     0   482    0
pffrnode    88        2    0        0     1     0     1     1     0     8    0
pffrent     40       71    0       68     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       46    0        1     1     0     1     1     0     8    0
pfstkey    128       50    0        5     2     0     2     2     0     8    0
pfstate    384       47    0        3     5     0     5     5     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      554    0      147    27     1    26    26     0     8    0
art_table   32      556    0      147     4     0     4     4     0     8    0
art_node    16      131    0       47     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        3     2     2     0     1     0     8    0
semapl     112       17    0        7     1     0     1     1     0     8    0
shmpl      112       18    0        0     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2343    0      841    95     0    95    95     0     8    0
ffsino     288     2343    0      841   109     0   109   109     0     8    0
nchpl      144     3067    0     1373    64     0    64    64     0     8    0
rtmask      32        8    0        8     1     1     0     1     0     8    0
uvmvnodes   80     2597    0        0    53     0    53    53     0     8    0
vnodes     216     2597    0        0   145     0   145   145     0     8    0
namei      1024   10456    0    10455     2     1     1     2     0     8    0
percpumem   16       80    0       29     1     0     1     1     0     8    0
kstatmem   264       62    0       32     4     1     3     3     0     8    1
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216     9202    0     9202     3     2     1     2     1     8    1
plimitpl   152       76    0       58     1     0     1     1     0     8    0
sigapl     424      862    0      790     9     0     9     9     0     8    0
knotepl    120      313    0        0    10     0    10    10     0     8    0
kqueuepl   224      188    0      176     3     0     3     3     0     8    2
pipepl     336      143    0      116     3     0     3     3     0     8    0
fdescpl    520      822    0      790     3     0     3     3     0     8    0
filepl     160     4640    0     4355    20     6    14    16     0     8    1
lockfpl    104      235    0      233     2     1     1     2     0     8    0
lockfspl    48       53    0       51     1     0     1     1     0     8    0
sessionpl  144       26    0       17     1     0     1     1     0     8    0
pgrppl      48       40    0       23     1     0     1     1     0     8    0
ucredpl    104      716    0      702     1     0     1     1     0     8    0
zombiepl   144      791    0      790     1     0     1     1     0     8    0
processpl  1240     862    0      790     6     0     6     6     0     8    0
procpl     656     1448    0     1372     8     0     8     8     0     8    1
srpgc       96        4    0        4     1     1     0     1     0     8    0
sosppl     168        4    0        4     1     1     0     1     0     8    0
sockpl     728      981    0      947    24    14    10    16     0     8    6
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     127    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      28    0        0     4     0     4     4     0     8    0
mtagpl      96        8    0        0     1     0     1     1     0     8    0
mbufpl     256      268    0        0    17     0    17    17     0     8    0
bufpl      280     3035    0      125   208     0   208   208     0     8    0
anonpl      32     9724    0        0    79     0    79    79     0   246    0
amapchunkpl 152   21058    0    20634    36    10    26    31     0   158    5
amappl16   200     2542    0     2517    18    16     2    15     0     8    0
amappl15   192       13    0       12     1     0     1     1     0     8    0
amappl14   184      125    0      112     1     0     1     1     0     8    0
amappl13   176        3    0        3     1     1     0     1     0     8    0
amappl12   168     1505    0     1471     3     1     2     2     0     8    0
amappl11   160       49    0       35     1     0     1     1     0     8    0
amappl10   152       12    0       12     1     1     0     1     0     8    0
amappl9    144      244    0      244     1     1     0     1     0     8    0
amappl8    136       24    0       22     1     0     1     1     0     8    0
amappl7    128      123    0      110     1     0     1     1     0     8    0
amappl6    120      198    0      194     1     0     1     1     0     8    0
amappl5    112      136    0      126     1     0     1     1     0     8    0
amappl4    104      331    0      311     1     0     1     1     0     8    0
amappl3     96     3787    0     3688     5     1     4     4     0     8    0
amappl2     88      690    0      622     2     0     2     2     0     8    0
amappl1     80    10540    0     9917    15     1    14    15     0     8    0
amappl      88     5568    0     5422     5     0     5     5     0    92    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        7    0        7     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       20    0        0     1     0     1     1     0     8    0
uaddrrnd    24      822    0      790     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      822    0      790     1     0     1     1     0     8    0
vmmpekpl   168     8250    0     8200     3     0     3     3     0     8    0
vmmpepl    168    57768    0    55798   101     8    93   101     0   357    2
vmsppl     480      821    0      790     5     0     5     5     0     8    0
rwobjpl     72    20212    0    16656    66     0    66    66     0     8    0
pdppl      4096    1651    0     1580   109    34    75    85     0     8    4
pvpl        32    17623    0        0   144     1   143   143     0   265    0
pmappl     256      821    0      790     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      399    0       40    11     0    11    11     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffffd806f5321e0,9,0) at witness_checkorder+0x10fb sys/kern/subr_witness.c:-1
rw_do_enter_write(fffffd806f5321c8,1) at rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:232
rrw_enter(fffffd806f5321c8,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
VOP_LOCK(fffffd806d1b2878,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
vn_lock(fffffd806d1b2878,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_lookup(ffff800034fe9208) at vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
namei(ffff800034fe9208) at namei+0x7aa sys/kern/vfs_lookup.c:250
unp_connect(ffff800010fdd9a8,fffffd806c30e800,ffff800037fee030) at unp_connect+0x27d sys/kern/uipc_usrreq.c:868
uipc_dgram_send(ffff800010fdd9a8,fffffd806bfcaf00,fffffd806c30e800,0) at uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:607
sosend(ffff800010fdd9a8,fffffd806c30e800,ffff800034fe9488,0,0,8) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff800037fee030,3,ffff800034fe9600,8,ffff800034fe96c0) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendmsg(ffff800037fee030,ffff800034fe9770,ffff800034fe96c0) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
syscall(ffff800034fe9770) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800034fe9770) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x5cd0b5903d0, count: -15
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu_x86.c:1218
sched_idle(ffff8000299ddff0) at sched_idle+0x448 sys/kern/kern_sched.c:178
end trace frame: 0x0, count: -5

Crashes (89066):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/08 10:45 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 10:35 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 10:21 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 10:07 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 09:49 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 09:30 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 09:15 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 09:00 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 08:36 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 08:23 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 08:02 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 07:35 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 07:15 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 06:53 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 06:40 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 06:25 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 06:07 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 05:56 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 05:39 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 05:20 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 05:03 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 04:39 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 04:17 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 03:55 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 03:36 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 03:14 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 02:50 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 02:28 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 02:09 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 01:48 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 01:30 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 01:10 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 00:49 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 00:32 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/08 00:10 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 23:50 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 23:27 openbsd 44b12aca1c11 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 22:34 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 22:12 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 21:47 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 21:23 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/06/07 20:52 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
2025/02/03 09:06 openbsd db5d28f093d6 568559e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: reversal: lock order data missing
* Struck through repros no longer work on HEAD.