login: witness: lock order reversal: 1st 0xffff800001585c60 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd80708e8910 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff8350c936 -> 0xffffffff834792c6 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 soreceive+0x27d sys/kern/uipc_socket.c:890 #3 fifo_read+0x117 sys/miscfs/fifofs/fifo_vnops.c:264 #4 VOP_READ+0x101 sys/kern/vfs_vops.c:227 #5 vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1 #6 vndsetcred+0xa1 sys/dev/vnd.c:685 #7 vndioctl+0xdfc sys/dev/vnd.c:486 #8 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #9 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 sosplice+0x312 sys/kern/uipc_socket.c:1347 #3 sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1226 #4 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 witness_checkorder(fffffd80708e8910,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1 rw_do_enter_write(fffffd80708e88f8,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 rrw_enter(fffffd80708e88f8,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 VOP_LOCK(fffffd8067c9b1e0,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 vn_lock(fffffd8067c9b1e0,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576 vfs_lookup(ffff800036f9cef0) at vfs_lookup+0x10f sys/kern/vfs_lookup.c:431 namei(ffff800036f9cef0) at namei+0x7c5 sys/kern/vfs_lookup.c:250 unp_connect(ffff800001585a78,fffffd806f10a100,ffff8000fffef240) at unp_connect+0x29d sys/kern/uipc_usrreq.c:872 uipc_dgram_send(ffff800001585a78,fffffd806f109600,fffffd806f10a100,0) at uipc_dgram_send+0x163 sys/kern/uipc_usrreq.c:609 sosend(ffff800001585a78,fffffd806f10a100,ffff800036f9d178,0,0,402) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff8000fffef240,3,ffff800036f9d2f0,402,ffff800036f9d328) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendmmsg(ffff8000fffef240,ffff800036f9d4a0,ffff800036f9d3f0) at sys_sendmmsg+0x3f3 sys/kern/uipc_syscalls.c:676 syscall(ffff800036f9d4a0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800036f9d4a0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc684d6f3af0, count: -15 ddb{0}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff800036f9cb60 rbx 0 rdx 0xffff8000015d2b80 rcx 0xffff8000fffef240 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff800036f9ca40 r9 0x8080808080808080 r10 0x2004079c54245f8e r11 0xb0c650be3e16ba2e r12 0xfffffd80040ad8c0 r13 0xfffffd8004894828 r14 0x3 r15 0xffffffff83514d06 substchar+0x11a61 rip 0xffffffff8194f6b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800036f9cb50 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=154025 pid=42688 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffeed10,0xffff8000fffefa18 process=0xffff80003c46d368 user=0xffff800036f98000, vmspace=0xfffffd806c6945d0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 19201 400417 60254 0 7 0 syz-executor 83854 81685 99556 0 2 0 syz-executor 83854 407817 99556 0 3 0x4000000 biowait syz-executor 83854 263908 99556 0 3 0x4000080 fsleep syz-executor 83854 338583 99556 0 2 0x4000000 syz-executor 87240 148652 10379 0 2 0 syz-executor 87240 515333 10379 0 3 0x4000080 fsleep syz-executor 87240 170720 10379 0 3 0x4000080 fsleep syz-executor 68122 312952 72822 0 2 0 syz-executor 68122 466014 72822 0 3 0x4000080 fsleep syz-executor 68122 259030 72822 0 3 0x4000080 fsleep syz-executor 42688 68807 83974 0 2 0 syz-executor *42688 154025 83974 0 7 0x4000000 syz-executor 73588 68242 10038 0 3 0x90 nanoslp syz-executor 73588 263342 10038 0 3 0x4000090 lockf syz-executor 73588 309192 10038 0 3 0x4000090 lockf syz-executor 73588 109911 10038 0 3 0x4000090 fsleep syz-executor 58164 2798 22605 0 3 0x80 nanoslp syz-executor 58164 157965 22605 0 3 0x4000080 fifor syz-executor 58164 37217 22605 0 3 0x4000080 fsleep syz-executor 58164 225810 22605 0 3 0x4000080 fsleep syz-executor 47992 167144 1 0 3 0x100083 ttyin getty 78605 187442 0 0 3 0x14280 nfsidl nfsio 2695 313403 0 0 3 0x14280 nfsidl nfsio 23186 467126 0 0 3 0x14280 nfsidl nfsio 44208 451553 0 0 3 0x14280 nfsidl nfsio 41782 402423 0 0 3 0x14280 nfsidl nfsio 26649 327097 0 0 3 0x14280 nfsidl nfsio 34722 150576 0 0 3 0x14280 nfsidl nfsio 6725 280666 0 0 3 0x14280 nfsidl nfsio 94961 403511 0 0 3 0x14280 nfsidl nfsio 8624 71259 0 0 3 0x14280 nfsidl nfsio 87623 275964 0 0 3 0x14280 nfsidl nfsio 40700 505003 0 0 3 0x14280 nfsidl nfsio 9780 143996 0 0 3 0x14280 nfsidl nfsio 68969 394769 0 0 3 0x14280 nfsidl nfsio 44765 471891 0 0 3 0x14280 nfsidl nfsio 1445 481995 0 0 3 0x14280 nfsidl nfsio 83313 286066 0 0 3 0x14280 nfsidl nfsio 38803 74710 0 0 3 0x14280 nfsidl nfsio 9944 472015 0 0 3 0x14280 nfsidl nfsio 4535 329353 0 0 3 0x14280 nfsidl nfsio 22605 19677 53136 0 3 0x82 nanoslp syz-executor 60254 179184 53136 0 3 0x82 nanoslp syz-executor 10038 221359 53136 0 3 0x82 nanoslp syz-executor 69565 424664 53136 0 3 0x2 biowait syz-executor 99556 463926 53136 0 3 0x82 nanoslp syz-executor 83974 101396 53136 0 3 0x82 nanoslp syz-executor 10379 510194 53136 0 3 0x82 nanoslp syz-executor 72822 376869 53136 0 3 0x82 nanoslp syz-executor 53136 289910 1 0 3 0x82 kqread syz-executor 69139 458903 1 74 3 0x1100092 bpf pflogd 77094 430997 1 73 3 0x1100090 kqread syslogd 29269 256370 0 0 3 0x14200 bored smr 60764 11666 0 0 2 0x14200 zerothread 7775 105523 0 0 3 0x14200 aiodoned aiodoned 4474 86730 0 0 3 0x14200 synce