witness: userret: returning with the following locks held:
exclusive rrwlock inode r = 0 (0xfffffd807aafe4e8) locked @ /syzkaller/managers/setuid/kernel/sys/ufs/ufs/ufs_vnops.c:1547
panic: witness_warn
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*  6943  48503  32767      0x1010  0x4080000    1  syz-executor0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399
panic() at panic+0x16c sys/kern/subr_prf.c:208
witness_warn(b08633fb97c7142b,0,ffff800020b92bd0) at witness_warn+0x700 witness_debugger sys/kern/subr_witness.c:2549 [inline]
witness_warn(b08633fb97c7142b,0,ffff800020b92bd0) at witness_warn+0x700 sys/kern/subr_witness.c:1465
userret(66bf01255f9546af) at userret+0x361 sys/kern/kern_sig.c:1899
syscall(36f531b916307af0) at syscall+0x680 mi_syscall_return sys/sys/syscall_mi.h:122 [inline]
syscall(36f531b916307af0) at syscall+0x680 sys/arch/amd64/amd64/trap.c:605
Xsyscall(6,0,ffffffffffffffb9,0,3,a8036c89010) at Xsyscall+0x128
end of kernel
end trace frame: 0xa82d3dedcb0, count: 9
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> show panic
witness_warn
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399
panic() at panic+0x16c sys/kern/subr_prf.c:208
witness_warn(b08633fb97c7142b,0,ffff800020b92bd0) at witness_warn+0x700 witness_debugger sys/kern/subr_witness.c:2549 [inline]
witness_warn(b08633fb97c7142b,0,ffff800020b92bd0) at witness_warn+0x700 sys/kern/subr_witness.c:1465
userret(66bf01255f9546af) at userret+0x361 sys/kern/kern_sig.c:1899
syscall(36f531b916307af0) at syscall+0x680 mi_syscall_return sys/sys/syscall_mi.h:122 [inline]
syscall(36f531b916307af0) at syscall+0x680 sys/arch/amd64/amd64/trap.c:605
Xsyscall(6,0,ffffffffffffffb9,0,3,a8036c89010) at Xsyscall+0x128
end of kernel
end trace frame: 0xa82d3dedcb0, count: -6
ddb{1}>