login: witness: lock order reversal: 1st 0xffff80002a261b38 fdlock (&newfdp->fd_fd.fd_lock) 2nd 0xfffff18070374d70 inode (&ip->i_lock) lock order [1] fdlock (&newfdp->fd_fd.fd_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff834d0d50 -> 0xffffffff834cb58f is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 #1 sblock+0xb6 sys/kern/uipc_socket2.c:536 #2 soreceive+0x27d sys/kern/uipc_socket.c:890 #3 fifo_read+0x117 sys/miscfs/fifofs/fifo_vnops.c:264 #4 VOP_READ+0x101 sys/kern/vfs_vops.c:227 #5 vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1 #6 vndsetcred+0xa1 sys/dev/vnd.c:685 #7 vndioctl+0xdfc sys/dev/vnd.c:486 #8 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #9 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] fdlock (&newfdp->fd_fd.fd_lock) #0 rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 #1 unp_externalize+0x3cf sys/kern/uipc_usrreq.c:1077 #2 soreceive+0xc24 sys/kern/uipc_socket.c:1029 #3 recvit+0x40b sys/kern/uipc_syscalls.c:1078 #4 sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:878 #5 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #6 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 witness_checkorder(fffff18070374d70,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1 rw_do_enter_write(fffff18070374d58,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234 rrw_enter(fffff18070374d58,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 VOP_LOCK(fffff18070475370,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 vn_lock(fffff18070475370,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576 vn_closefile(fffff1806dda20b8,ffff80002a21b240) at vn_closefile+0x111 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffff1806dda20b8,ffff80002a21b240) at vn_closefile+0x111 sys/kern/vfs_vnops.c:621 fdrop(fffff1806dda20b8,ffff80002a21b240) at fdrop+0x121 sys/kern/kern_descrip.c:1281 knote_remove(ffff80002a21b240,fffff1807af8a0e0,fffff1807af8a170,4,0) at knote_remove+0x368 sys/kern/kern_event.c:2186 knote_fdclose(ffff80002a21b240,4) at knote_fdclose+0xf9 sys/kern/kern_event.c:2221 fdrelease(ffff80002a21b240,4) at fdrelease+0xf9 sys/kern/kern_descrip.c:761 sys_closefrom(ffff80002a21b240,ffff80002a29e810,ffff80002a29e760) at sys_closefrom+0x13c sys/kern/kern_descrip.c:1471 syscall(ffff80002a29e810) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a29e810) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x664cdde0150, count: -14 ddb{0}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80002a29e2a0 rbx 0 rdx 0xffff800001603380 rcx 0xffff80002a21b240 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80002a29e180 r9 0x8080808080808080 r10 0x9be3c7d489f21389 r11 0xabb25393e68bdddd r12 0xfffff18004103d80 r13 0xfffff180048f1670 r14 0x3 r15 0xffffffff8355c928 substchar+0x6817 rip 0xffffffff82a40625 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a29e290 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=423813 pid=65212 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=16, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a21aa78,0xffff800045ffc018 process=0xffff800045feb090 user=0xffff80002a299000, vmspace=0xfffff1800b1f77a0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}>