witness: lock order reversal: 1st 0xffff800010fe10a0 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffa006e2e1548 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff83525b48 -> 0xffffffff834944ad is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 soreceive+0x27d sys/kern/uipc_socket.c:890 #3 fifo_read+0x117 sys/miscfs/fifofs/fifo_vnops.c:264 #4 VOP_READ+0x101 sys/kern/vfs_vops.c:227 #5 vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1 #6 vndsetcred+0xa1 sys/dev/vnd.c:685 #7 vndioctl+0xdfc sys/dev/vnd.c:486 #8 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #9 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 sosplice+0x32b sys/kern/uipc_socket.c:1352 #3 sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1226 #4 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 witness_checkorder(fffffa006e2e1548,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1 rw_do_enter_write(fffffa006e2e1530,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 rrw_enter(fffffa006e2e1530,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 VOP_LOCK(fffffa005eb7d398,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 vn_lock(fffffa005eb7d398,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576 vfs_lookup(ffff80003a3a38f0) at vfs_lookup+0x12b sys/kern/vfs_lookup.c:431 namei(ffff80003a3a38f0) at namei+0x7c5 sys/kern/vfs_lookup.c:250 unp_connect(ffff800010fe0eb8,fffffa006d8e3d00,ffff800038b9c028) at unp_connect+0x29d sys/kern/uipc_usrreq.c:872 uipc_dgram_send(ffff800010fe0eb8,fffffa006ce3c200,fffffa006d8e3d00,0) at uipc_dgram_send+0x163 sys/kern/uipc_usrreq.c:609 sosend(ffff800010fe0eb8,fffffa006d8e3d00,ffff80003a3a3b78,0,0,c) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff800038b9c028,3,ffff80003a3a3cf8,c,ffff80003a3a3db0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendmsg(ffff800038b9c028,ffff80003a3a3e60,ffff80003a3a3db0) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:603 syscall(ffff80003a3a3e60) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003a3a3e60) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xfc1f7272620, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003a3a3560 rbx 0 rdx 0xffff8000015d89c0 rcx 0xffff800038b9c028 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003a3a3440 r9 0x8080808080808080 r10 0x8a6586ae48c8d88a r11 0xe5c579ad9b5f10c8 r12 0xfffffa00040d0980 r13 0xfffffa00048b7d78 r14 0x3 r15 0xffffffff8352d5eb substchar+0xfcaf rip 0xffffffff8202e225 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003a3a3550 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=40107 pid=66416 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=77, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffd9f8,0xffff800038b9da28 process=0xffff80003a3a61d0 user=0xffff80003a39e000, vmspace=0xfffffa006c1d17c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 84964 343413 30469 0 2 0 0 syz-executor 84964 452970 30469 0 3 0 0x4000080 fsleep syz-executor 66416 457500 66971 0 7 0 0 syz-executor *66416 40107 66971 0 7 0 0x4000000 syz-executor 86120 424022 59267 0 2 0 0 syz-executor 86120 43730 59267 0 3 0 0x4000080 rest syz-executor 76833 207511 61733 0 3 0 0x80 nanoslp syz-executor 76833 18240 61733 0 3 0 0x4000080 netcon syz-executor 76833 258528 61733 0 3 0 0x4000080 fsleep syz-executor 15477 54654 0 0 3 0x14000 0x280 nfsidl nfsio 24759 275877 0 0 3 0x14000 0x280 nfsidl nfsio 56335 523053 0 0 3 0x14000 0x280 nfsidl nfsio 83177 242298 0 0 3 0x14000 0x280 nfsidl nfsio 96921 285225 0 0 3 0x14000 0x280 nfsidl nfsio 66249 231786 0 0 3 0x14000 0x280 nfsidl nfsio 63110 482010 0 0 3 0x14000 0x280 nfsidl nfsio 59534 387588 0 0 3 0x14000 0x280 nfsidl nfsio 77980 291559 0 0 3 0x14000 0x280 nfsidl nfsio 17855 474923 0 0 3 0x14000 0x280 nfsidl nfsio 88822 26055 0 0 3 0x14000 0x280 nfsidl nfsio 67631 320957 0 0 3 0x14000 0x280 nfsidl nfsio 41822 480902 0 0 3 0x14000 0x280 nfsidl nfsio 17562 18087 0 0 3 0x14000 0x280 nfsidl nfsio 29848 449467 0 0 3 0x14000 0x280 nfsidl nfsio 17400 1465 0 0 3 0x14000 0x280 nfsidl nfsio 54147 152281 0 0 3 0x14000 0x280 nfsidl nfsio 26548 413594 0 0 3 0x14000 0x280 nfsidl nfsio 17263 82325 0 0 3 0x14000 0x280 nfsidl nfsio 75500 478133 0 0 3 0x14000 0x280 nfsidl nfsio 28413 277958 76215 0 3 0x10 0x80 nanoslp syz-executor 28413 45705 76215 0 3 0x10 0x4000080 kqread syz-executor 28413 221805 76215 0 3 0x10 0x4000080 kqread syz-executor 28413 122398 76215 0 3 0x10 0x4000080 kqsel syz-executor 28413 184670 76215 0 3 0x10 0x4000080 fsleep syz-executor 50965 398174 63732 0 3 0 0x80 nanoslp syz-executor 50965 486470 63732 0 3 0 0x4000080 msgwait syz-executor 50965 467258 63732 0 3 0 0x4000080 fsleep syz-executor 59411 223010 24466 0 4 0x40000010 0x8000000 syz-executor 59411 467913 24466 0 4 0x40000010 0xc000000 syz-executor 61307 205630 1 0 3 0 0x80 nanoslp init 2508 71492 46383 0 3 0x100002 0x80 sbwait arp 46383 131493 18656 0 3 0x100002 0x88 sigsusp sh 30469 356820 72522 0 3 0x2 0x80 nanoslp syz-executor 61733 215119 72522 0 3 0x2 0x80 nanoslp syz-executor 59267 182453 72522 0 3 0x2 0x80 nanoslp syz-executor 24466 407325 72522 0 3 0x2 0x80 nanoslp syz-executor 63732 278866 72522 0 3 0x2 0x80 nanoslp syz-executor 76215 29109 72522 0 3 0x2 0x80 nanoslp syz-executor 18656 17741 72522 0 3 0x2 0x80 wait syz-executor 66971 367554 72522 0 3 0x2 0x80 nanoslp syz-executor 72522 106758 1 0 3 0x2 0x80 kqread syz-executor 22276 206199 0 0 3 0x14000 0x200 bored smr 96686 380645 0 0 3 0x14000 0x200 pgzero zerothread 28070 406944 0 0 3 0x14000 0x200 aiodoned aiodoned 92624 369151 0 0 3 0x14000 0x200 syncer update 33996 514397 0 0 3 0x14000 0x200 cleaner cleaner 74761 504393 0 0 3 0x14000 0x200 reaper reaper 37587 439337 0 0 3 0x14000 0x200 pgdaemon pagedaemon 27681 293160 0 0 3 0x14000 0x200 bored viomb 77786 312013 0 0 3 0x14000 0x40000200 acpi0 acpi0 42252 359328 0 0 3 0x14000 0x40000200 idle1 36106 348104 0 0 3 0x14000 0x200 bored softnet1 62919 102259 0 0 2 0x14000 0x200 softnet0 28693 95813 0 0 3 0x14000 0x200 bored systqmp 50886 84381 0 0 3 0x14000 0x200 bored systq 76924 249273 0 0 3 0x14000 0x200 tmoslp softclockmp 69870 33714 0 0 3 0x14000 0x40000200 tmoslp softclock 10443 47372 0 0 3 0x14000 0x40000200 idle0 1 11934 0 0 4 0x40000002 0x8000080 init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb{1}>