pf: key search, in on vio0: witness: TCPlock order reversal:
 wire: (0)  1st 0xffff8000015aafb0 sbufrcv (&so->so_rcv.sb_lock)
10.128.15.235 2nd 0xfffff6006a229d80 inode (&ip->i_lock)
:30002lock order [1] sbufrcv (&so->so_rcv.sb_lock) -> [2] inode (&ip->i_lock)
 lock order data 0xffffffff8343de93 -> 0xffffffff834927a5 is missing
10.128.0.91lock order [2] inode (&ip->i_lock) -> [1] sbufrcv (&so->so_rcv.sb_lock)
:21930#0  
pf: key search, in on vio0: TCP wire: (0) rw_do_enter_write10.128.15.235+0xba:30002
 #1  10.128.0.91:21930
pf: key search, in on vio0: sblockTCP+0xb6 wire: (0) 
10.128.15.235#2  :30002 10.128.0.91:21930
soreceivepf: key search, out on vio0: +0x27dTCP
 wire: (0) #3  10.128.15.235:30002 10.128.0.91fifo_read:21930+0x117

#4  VOP_READ+0x101 sys/kern/vfs_vops.c:227
#5  vn_rdwr+0x15b sys/kern/vfs_vnops.c:-1
#6  vndsetcred+0xa1 sys/dev/vnd.c:685
#7  vndioctl+0xdfc sys/dev/vnd.c:486
#8  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537
#10 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#11 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#11 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
#12 Xsyscall+0x128
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffff6006a229d80,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1
rw_do_enter_write(fffff6006a229d68,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
rrw_enter(fffff6006a229d68,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
VOP_LOCK(fffff600609e56f0,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
vn_lock(fffff600609e56f0,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576
vfs_getcwd_common(fffff600609e56f0,fffff6005f88de90,0,0,200,0,d69ccbf3908f7554) at vfs_getcwd_common+0xd1 sys/kern/vfs_getcwd.c:287
vn_isunder(fffff600609e56f0,fffff6005f88de90,ffff800045fee548) at vn_isunder+0x56 sys/kern/vfs_vnops.c:700
unp_externalize(fffff6006d915400,33,0) at unp_externalize+0x26f sys/kern/uipc_usrreq.c:1090
soreceive(ffff8000015aaec0,ffff80003abc5428,ffff80003abc53d8,0,ffff80003abc5410,ffff80003abc559c,146c914bf6bbd154) at soreceive+0xc24 sys/kern/uipc_socket.c:1029
recvit(ffff800045fee548,1,ffff80003abc5570,0,ffff80003abc5620) at recvit+0x40b sys/kern/uipc_syscalls.c:1078
sys_recvmsg(ffff800045fee548,ffff80003abc56d0,ffff80003abc5620) at sys_recvmsg+0x1bf sys/kern/uipc_syscalls.c:878
syscall(ffff80003abc56d0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003abc56d0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x98be43c3fb0, count: -14
ddb{0}> show registers
rdi                                0
rsi                          0x80000    acpi_pdirpa+0x6be71
rbp               0xffff80003abc4eb0
rbx                                0
rdx               0xffff8000015fc4c0
rcx               0xffff800045fee548
rax                          0x7ffff    acpi_pdirpa+0x6be70
r8                0xffff80003abc4d90
r9                0x8080808080808080
r10               0x3c445f6aaa732515
r11                0x503e456304b34b2
r12               0xfffff600040be880
r13               0xfffff600048a69b0
r14                              0x3
r15               0xffffffff83521880    substchar+0x3a69
rip               0xffffffff81740505    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003abc4ea0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=269706 pid=14682 tcnt=2 stat=onproc
    flags process=1000000<CHROOT> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800045fef240,0xffff800045feefb8
    process=0xffff80003638d368 user=0xffff80003abc0000, vmspace=0xfffff6006cd535d0
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}>