login: witness: lock order reversal: 1st 0xffff8000015b1398 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffff0806639c0a0 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff83545619 -> 0xffffffff834bb047 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 soreceive+0x289 sys/kern/uipc_socket.c:890 #3 fifo_read+0x117 sys/miscfs/fifofs/fifo_vnops.c:264 #4 VOP_READ+0x101 sys/kern/vfs_vops.c:227 #5 vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1 #6 vndsetcred+0xa1 sys/dev/vnd.c:685 #7 vndioctl+0xdfc sys/dev/vnd.c:486 #8 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #9 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 sosplice+0x246 sys/kern/uipc_socket.c:1326 #3 sys_setsockopt+0x2ce sys/kern/uipc_syscalls.c:1234 #4 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 witness_checkorder(fffff0806639c0a0,9,0) at witness_checkorder+0x10cd sys/kern/subr_witness.c:-1 rw_do_enter_write(fffff0806639c088,1) at rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 rrw_enter(fffff0806639c088,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 VOP_LOCK(fffff080759a7e98,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 vn_lock(fffff080759a7e98,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576 vfs_lookup(ffff80002a27f1e0) at vfs_lookup+0x10e sys/kern/vfs_lookup.c:431 namei(ffff80002a27f1e0) at namei+0x5ea sys/kern/vfs_lookup.c:250 unp_connect(ffff8000015b11b0,fffff0806d601900,ffff80003bfb82b8) at unp_connect+0x29c sys/kern/uipc_usrreq.c:875 uipc_dgram_send(ffff8000015b11b0,fffff0806dac8100,fffff0806d601900,fffff0806ccf3b00) at uipc_dgram_send+0x152 sys/kern/uipc_usrreq.c:609 sosend(ffff8000015b11b0,fffff0806d601900,ffff80002a27f468,0,fffff0806ccf3b00,c) at sosend+0x7f4 sys/kern/uipc_socket.c:-1 sendit(ffff80003bfb82b8,5,ffff80002a27f5e8,c,ffff80002a27f6a0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendmsg(ffff80003bfb82b8,ffff80002a27f750,ffff80002a27f6a0) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:603 syscall(ffff80002a27f750) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a27f750) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6678ff14e90, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a27ee50 rbx 0 rdx 0 rcx 0xffff80003bfb82b8 rax 0xffff80002999dff0 r8 0xffff80002a27ed30 r9 0x8080808080808080 r10 0xd8a222dc1a0e32c r11 0x200c693277771aae r12 0xfffff080040e1980 r13 0xfffff080048ca6f8 r14 0x3 r15 0xffffffff83552a57 substchar+0xde75 rip 0xffffffff8325a985 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a27ee40 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=44832 pid=72208 tcnt=4 stat=onproc flags process=1 proc=4000000 runpri=32, usrpri=78, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bfb8a80,0xffff80003bfb9258 process=0xffff800045fedd30 user=0xffff80002a27a000, vmspace=0xfffff0800d5a05e0 estcpu=28, cpticks=6, pctcpu=0.6, user=0, sys=6, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 74576 46942 66076 0 2 0 0 syz-executor 45496 418883 2292 0 2 0x2 0 syz-executor 72208 136269 34708 0 2 0x1 0 syz-executor *72208 44832 34708 0 7 0x1 0x4000000 syz-executor 72208 111879 34708 0 2 0x1 0x4000000 syz-executor 72208 179715 34708 0 3 0x1 0x4000080 fsleep syz-executor 6891 376572 86760 0 2 0 0 syz-executor 6891 366653 86760 0 3 0 0x4000080 fsleep syz-executor 6891 218104 86760 0 2 0 0x4000000 syz-executor 93671 298428 2292 0 2 0x2 0 syz-executor 20774 85058 39029 0 3 0 0x80 nanoslp syz-executor 20774 428972 39029 0 3 0 0x4000080 fifor syz-executor 20774 51472 39029 0 3 0 0x4000080 fifor syz-executor 20774 371218 39029 0 3 0 0x4000080 fsleep syz-executor 34708 463133 2292 0 3 0x2 0x80 nanoslp syz-executor 37970 401112 2292 0 2 0x2 0 syz-executor 86760 432205 2292 0 3 0x2 0x80 nanoslp syz-executor 66076 132751 2292 0 3 0x2 0x80 nanoslp syz-executor 47688 360408 2292 0 3 0x2 0x80 nanoslp syz-executor 39029 356675 2292 0 3 0x2 0x80 nanoslp syz-executor 76300 236628 1 0 3 0x100003 0x80 ttyin getty 2292 502897 1 0 2 0x2 0 syz-executor 24074 218028 0 0 3 0x14000 0x200 bored smr 46382 85727 0 0 2 0x14000 0x200 zerothread 86197 510435 0 0 3 0x14000 0x200 aiodoned aiodoned 80938 116397 0 0 3 0x14000 0x200 syncer update 51449 234373 0 0 3 0x14000 0x200 cleaner cleaner 86923 411294 0 0 3 0x14000 0x200 reaper reaper 79362 63359 0 0 3 0x14000 0x200 pgdaemon pagedaemon 36826 512508 0 0 3 0x14000 0x200 bored viomb 79237 159075 0 0 3 0x14000 0x40000200 acpi0 acpi0 96894 337241 0 0 3 0x14000 0x40000200 idle1 86772 87038 0 0 3 0x14000 0x200 bored softnet1 75375 28509 0 0 2 0x14000 0x200 softnet0 54500 361696 0 0 3 0x14000 0x200 smrbar systqmp 29557 345408 0 0 3 0x14000 0x200 bored systq 25190 239773 0 0 3 0x14000 0x200 tmoslp softclockmp 1342 119372 0 0 3 0x14000 0x40000200 tmoslp softclock 26868 337377 0 0 3 0x14000 0x40000200 idle0 1 82954 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb{1}>