panic: lock (rwlock) solock not locked Stopped at db_enter+0x18: addq $0x8,%rsp --db_more--  TID PID UID PRFLAGS PFLAGS CPU COMMAND --db_more-- *503135 87349 0 0 0x4000000 0K syz-executor.7 --db_more-- db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 --db_more-- panic(ffffffff82583901) at panic+0x177 sys/kern/subr_prf.c:198 --db_more-- witness_assert(fffffd806d6b37d0,4) at witness_assert+0x3ef sys/kern/subr_witness.c:1950 sbunlock(fffffd806d6b37b8,fffffd806d6b3900) at sbunlock+0xc9 soassertlocked sys/kern/uipc_socket2.c:414 [inline] sbunlock(fffffd806d6b37b8,fffffd806d6b3900) at sbunlock+0xc9 sys/kern/uipc_socket2.c:479 sosplice(fffffd806d6b39a0,5,0,0) at sosplice+0x550 --db_more-- sosetopt(fffffd806d6b39a0,ffff,1023,fffffd807230c000) at sosetopt+0x7f4 --db_more-- sys_setsockopt(ffff80002130efc0,ffff80002e3107a8,ffff80002e3107f0) at sys_setsockopt+0x1f6 sys/kern/uipc_syscalls.c:1233 --db_more-- syscall(ffff80002e310870) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline] --db_more-- syscall(ffff80002e310870) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585 --db_more-- Xsyscall() at Xsyscall+0x128 --db_more-- end of kernel --db_more-- end trace frame: 0x57fb7db38a0, count: 6 --db_more-- https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> = 0 ? ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: lock (rwlock) solock not locked ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82583901) at panic+0x177 sys/kern/subr_prf.c:198 --db_more-- witness_assert(fffffd806d6b37d0,4) at witness_assert+0x3ef sys/kern/subr_witness.c:1950 --db_more-- sbunlock(fffffd806d6b37b8,fffffd806d6b3900) at sbunlock+0xc9 soassertlocked sys/kern/uipc_socket2.c:414 [inline] --db_more-- sbunlock(fffffd806d6b37b8,fffffd806d6b3900) at sbunlock+0xc9 sys/kern/uipc_socket2.c:479 --db_more-- sosplice(fffffd806d6b39a0,5,0,0) at sosplice+0x550 --db_more-- sosetopt(fffffd806d6b39a0,ffff,1023,fffffd807230c000) at sosetopt+0x7f4 --db_more-- sys_setsockopt(ffff80002130efc0,ffff80002e3107a8,ffff80002e3107f0) at sys_setsockopt+0x1f6 sys/kern/uipc_syscalls.c:1233 syscall(ffff80002e310870) at syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline] syscall(ffff80002e310870) at syscall+0x435 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 --db_more-- end of kernel --db_more-- end trace frame: 0x57fb7db38a0, count: -9 ddb{0}> gisters No such command ddb{0}> show proc PROC (syz-executor.7) pid=503135 stat=onproc flags process=0 proc=4000000 --db_more--  pri=32, usrpri=50, nice=20 --db_more--  forw=0xffffffffffffffff, list=0xffff80002130fce0,0xffffffff82ba8c88 --db_more--  process=0xffff8000ffff2580 user=0xffff80002e30b000, vmspace=0xfffffd8075a23018 --db_more--  estcpu=0, cpticks=0, pctcpu=0.0 --db_more--  user=0, sys=0, intr=0 ddb{0}> ow all locks No such command ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10241 6511K 10591K 78643K 40091 0 --db_more--  pcb 13 20K 23K 78643K 3277 0 --db_more--  rtable 231 21K 22K 78643K 4481 0 --db_more--  ifaddr 108 27K 33K 78643K 1639 0 --db_more--  sysctl 2 0K 2K 78643K 70 0 --db_more--  counters 56 35K 36K 78643K 578 0 ioctlops 0 0K 4K 78643K 3739 0 iov 0 0K 16K 78643K 1990 0 --db_more--  mount 1 1K 1K 78643K 1 0 --db_more--  log 0 0K 0K 78643K 4 0 --db_more--  vnodes 1510 94K 95K 78643K 12511 0 --db_more--  UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 128 0 --db_more--  VM map 2 1K 1K 78643K 2 0 --db_more--  sem 17 28K 56K 78643K 2338 0 --db_more--  dirhash 12 2K 2K 78643K 12 0 --db_more--  ACPI 1697 195K 286K 78643K 12548 0 --db_more--  file desc 18 65K 77K 78643K 15509 0 --db_more--  sigio 0 0K 0K 78643K 423 0 --db_more--  proc 70 91K 128K 78643K 3774 0 --db_more--  subproc 104 6K 7K 78643K 1209 0 --db_more-- ddb{0}> hine ddbcpu 0 No such command ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82583901) at panic+0x177 sys/kern/subr_prf.c:198 --db_more-- witness_assert(fffffd806d6b37d0,4) at witness_assert+0x3ef sys/kern/subr_witness.c:1950 --db_more-- sbunlock(fffffd806d6b37b8,fffffd806d6b3900) at sbunlock+0xc9 soassertlocked sys/kern/uipc_socket2.c:414 [inline] --db_more-- sbunlock(fffffd806d6b37b8,fffffd806d6b3900) at sbunlock+0xc9 sys/kern/uipc_socket2.c:479 --db_more-- ddb{0}> hine ddbcpu 1 No such command ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82583901) at panic+0x177 sys/kern/subr_prf.c:198