witness: lock order reversal: 1st 0xfffffd806bfc0f18 vmmaplk (&map->lock) 2nd 0xfffffd806dfe8808 inode (&ip->i_lock) lock order [1] vmmaplk (&map->lock) -> [2] inode (&ip->i_lock) #0 rw_enter+0x122 #1 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #2 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #3 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #4 vn_rdwr+0xd1 sys/kern/vfs_vnops.c:320 #5 vndstrategy+0x4ff sys/dev/vnd.c:342 #6 physio+0x2f6 sys/kern/kern_physio.c:162 #7 spec_read+0x155 sys/kern/spec_vnops.c:215 #8 VOP_READ+0x102 sys/kern/vfs_vops.c:227 #9 vn_read+0x17b sys/kern/vfs_vnops.c:369 #10 dofilereadv+0x230 sys/kern/sys_generic.c:252 #11 sys_read+0xa2 sys/kern/sys_generic.c:172 #12 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] #12 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #13 Xsyscall+0x128 lock order [2] inode (&ip->i_lock) -> [1] vmmaplk (&map->lock) #0 rw_enter_read+0xab sys/kern/kern_rwlock.c:112 #1 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1819 #2 uvm_fault_check+0x49 sys/uvm/uvm_fault.c:672 #3 uvm_fault+0xf5 sys/uvm/uvm_fault.c:600 #4 kpageflttrap+0x2d0 sys/arch/amd64/amd64/trap.c:279 #5 kerntrap+0x14a sys/arch/amd64/amd64/trap.c:332 #6 alltraps_kern_meltdown+0x7b #7 copyout+0x57 #8 ffs_read+0x422 sys/ufs/ffs/ffs_vnops.c:254 #9 VOP_READ+0x102 sys/kern/vfs_vops.c:227 #10 vn_rdwr+0x15b #11 vmcmd_map_readvn+0x142 sys/kern/exec_subr.c:249 #12 exec_process_vmcmds+0xfb sys/kern/exec_subr.c:139 #13 sys_execve+0xbe4 sys/kern/kern_exec.c:468 #14 start_init+0x3c6 sys/kern/init_main.c:714 #15 proc_trampoline+0x10 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 witness_checkorder(fffffd806dfe8808,9,0) at witness_checkorder+0x1047 rw_enter(fffffd806dfe87f8,1) at rw_enter+0x122 rrw_enter(fffffd806dfe87f8,1) at rrw_enter+0xbe sys/kern/kern_rwlock.c:464 VOP_LOCK(fffffd80780d2368,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 vn_lock(fffffd80780d2368,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:564 vn_rdwr(0,fffffd80780d2368,ffff800011a26140,df,0,1,2c71e99566d0ea31,0,ffff800000b3e000,0) at vn_rdwr+0xd1 sys/kern/vfs_vnops.c:320 vndstrategy(fffffd805f224d38) at vndstrategy+0x4ff sys/dev/vnd.c:342 physio(ffffffff8131d350,2902,8000,ffffffff818b3880,ffff800033d91c98) at physio+0x2f6 sys/kern/kern_physio.c:162 spec_read(ffff800033d91b00) at spec_read+0x155 sys/kern/spec_vnops.c:215 VOP_READ(fffffd806e6dad08,ffff800033d91c98,0,fffffd807f7d3680) at VOP_READ+0x102 sys/kern/vfs_vops.c:227 vn_read(fffffd805f66bef8,ffff800033d91c98,0) at vn_read+0x17b sys/kern/vfs_vnops.c:369 dofilereadv(ffff8000ffff22a8,7,ffff800033d91c98,0,ffff800033d91d50) at dofilereadv+0x230 sys/kern/sys_generic.c:252 sys_read(ffff8000ffff22a8,ffff800033d91e00,ffff800033d91d50) at sys_read+0xa2 sys/kern/sys_generic.c:172 syscall(ffff800033d91e00) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff800033d91e00) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd3bfa5c130, count: -16 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800033d915c0 rbx 0xfffffd80042c7250 rdx 0 rcx 0xffff8000ffff22a8 rax 0xffff800029b7bff0 r8 0xffff800033d914a0 r9 0x8080808080808080 r10 0x8bbe41dcffd98e2c r11 0xa7829a6751552e67 r12 0 r13 0xfffffd8003adfe00 r14 0x3 r15 0xffffffff rip 0xffffffff817a0ea5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800033d915b0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=475619 pid=74769 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff3bf8,0xffff8000ffff36f8 process=0xffff8000fffee448 user=0xffff800033d8c000, vmspace=0xfffffd806bfc0e20 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 74769 463947 21568 0 2 0 syz-executor *74769 475619 21568 0 7 0x4000000 syz-executor 74769 373557 21568 0 3 0x4000080 fsleep syz-executor 74769 150486 21568 0 3 0x4000080 fsleep syz-executor 4747 426571 94428 60928 3 0x90 nanoslp syz-executor 4747 184694 94428 60928 3 0x4000090 kqsel syz-executor 4747 87144 94428 60928 3 0x4000090 fsleep syz-executor 50623 282830 55690 0 3 0x80 nanoslp syz-executor 50623 280742 55690 0 7 0x4000000 syz-executor 50623 154607 55690 0 3 0x4000080 fsleep syz-executor 50623 168082 55690 0 2 0x4000000 syz-executor 80908 174941 3448 0 2 0 syz-executor 80908 477163 3448 0 3 0x4000080 fsleep syz-executor 57485 105108 42799 -1 2 0x10 syz-executor 57485 147398 42799 -1 3 0x4000090 fsleep syz-executor 51156 459469 72865 0 2 0 syz-executor 51156 434457 72865 0 2 0x4000000 syz-executor 88940 402444 1 0 3 0x100083 ttyin getty 48044 267985 0 0 3 0x14200 acct acct 16732 320302 0 0 3 0x14280 nfsidl nfsio 70671 39049 0 0 3 0x14280 nfsidl nfsio 30585 421483 0 0 3 0x14280 nfsidl nfsio 94329 150600 0 0 3 0x14280 nfsidl nfsio 72181 19257 0 0 3 0x14280 nfsidl nfsio 18781 178270 0 0 3 0x14280 nfsidl nfsio 91140 465751 0 0 3 0x14280 nfsidl nfsio 19666 394233 0 0 3 0x14280 nfsidl nfsio 62808 514282 0 0 3 0x14280 nfsidl nfsio 95422 363073 0 0 3 0x14280 nfsidl nfsio 73676 241772 0 0 3 0x14280 nfsidl nfsio 48721 103088 0 0 3 0x14280 nfsidl nfsio 97269 134549 0 0 3 0x14280 nfsidl nfsio 85072 458497 0 0 3 0x14280 nfsidl nfsio 17683 45380 0 0 3 0x14280 nfsidl nfsio 88360 154905 0 0 3 0x14280 nfsidl nfsio 20424 125022 0 0 3 0x14280 nfsidl nfsio 81343 234861 0 0 3 0x14280 nfsidl nfsio 21299 519654 0 0 3 0x14280 nfsidl nfsio 9554 257749 0 0 3 0x14280 nfsidl nfsio 72261 337597 0 0 3 0x14200 bored sosplice 55690 8746 27347 0 3 0x82 nanoslp syz-executor 94428 496937 27347 0 3 0x82 nanoslp syz-executor 48090 518532 27347 0 3 0x82 nanoslp syz-executor 21568 17737 27347 0 3 0x82 nanoslp syz-executor 3448 370522 27347 0 3 0x82 nanoslp syz-executor 72865 444307 27347 0 2 0x482 syz-executor 42799 143922 27347 0 2 0x2 syz-executor 4739 235589 27347 0 3 0x82 nanoslp syz-executor 27347 338461 64325 0 3 0x82 kqread syz-executor 64325 188052 13538 0 3 0x10008a sigsusp ksh 13538 78732 39009 0 3 0x98 kqread sshd-session 39009 19334 7833 0 3 0x92 kqread sshd-session 7833 106242 1 0 3 0x88 kqread sshd 11421 33559 75429 74 3 0x1100092 bpf pflogd 75429 443761 1 0 3 0x80 sbwait pflogd 24827 176396 63556 73 3 0x1100090 kqread syslogd 63556 200425 1 0 3 0x100082 sbwait syslogd 93582 91621 1 0 3 0x100080 kqread resolvd 80691 492660 97377 77 3 0x100092 kqread dhcpleased 52790 496236 97377 77 3 0x100092 kqread dhcpleased 97377 69635 1 0 3 0x80 kqread dhcpleased 97166 421710 0 0 2 0x40014200 smr 70363 155899 0 0 2 0x14200 zerothread 53562 210168 0 0 3 0x14200 aiodoned aiodoned 77459 16204 0 0 3 0x14200 syncer update 89683 413357 0 0 3 0x14200 cleaner cleaner 66673 495269 0 0 3 0x14200 reaper reaper 86088 207408 0 0 3 0x14200 pgdaemon pagedaemon 94678 284673 0 0 3 0x14200 bored viomb 4565 366232 0 0 3 0x40014200 acpi0 acpi0 30256 462316 0 0 3 0x40014200 idle1 41489 368926 0 0 3 0x14200 bored softnet3 8651 219744 0 0 3 0x14200 bored softnet2 90727 467774 0 0 3 0x14200 bored softnet1 91209 431419 0 0 3 0x14200 bored softnet0 10387 458623 0 0 3 0x14200 bored systqmp 5864 415462 0 0 3 0x14200 bored systq 30437 74939 0 0 3 0x14200 tmoslp softclockmp 76517 171721 0 0 2 0x40014200 softclock 38200 186026 0 0 3 0x40014200 idle0 1 435215 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 74769 (syz-executor) thread 0xffff8000ffff22a8 (475619) shared rwlock vmmaplk r = 0 (0xfffffd806bfc0f18) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 uvm_vslock_device+0x149 sys/uvm/uvm_glue.c:172 #2 physio+0x277 sys/kern/kern_physio.c:139 #3 spec_read+0x155 sys/kern/spec_vnops.c:215 #4 VOP_READ+0x102 sys/kern/vfs_vops.c:227 #5 vn_read+0x17b sys/kern/vfs_vnops.c:369 #6 dofilereadv+0x230 sys/kern/sys_generic.c:252 #7 sys_read+0xa2 sys/kern/sys_generic.c:172 #8 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] #8 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8363b0f8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 vn_read+0x56 sys/kern/vfs_vnops.c:351 #2 dofilereadv+0x230 sys/kern/sys_generic.c:252 #3 sys_read+0xa2 sys/kern/sys_generic.c:172 #4 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] #4 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #5 Xsyscall+0x128 Process 50623 (syz-executor) thread 0xffff8000ffff1988 (280742) shared rwlock vmmaplk r = 0 (0xfffffd806bfc0818) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1819 #2 uvm_fault_check+0x49 sys/uvm/uvm_fault.c:672 #3 uvm_fault+0xf5 sys/uvm/uvm_fault.c:600 #4 kpageflttrap+0x2d0 sys/arch/amd64/amd64/trap.c:279 #5 kerntrap+0x14a sys/arch/amd64/amd64/trap.c:332 #6 alltraps_kern_meltdown+0x7b #7 copyout+0x57 #8 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] #8 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10236 11315K 11511K 166960K 12763 0 pcb 17 17K 22K 166960K 393 0 rtable 190 6K 7K 166960K 461 0 pf 36 18K 273K 166960K 119 0 ifaddr 39 6K 7K 166960K 81 0 ifgroup 53 2K 2K 166960K 125 0 sysctl 3 1K 3K 166960K 4 0 counters 64 36K 36K 166960K 108 0 ioctlops 0 0K 4K 166960K 1574 0 iov 0 0K 16K 166960K 61 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1487 93K 94K 166960K 2484 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 21 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 39 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 18 65K 93K 166960K 1073 0 sigio 0 0K 0K 166960K 27 0 proc 72 91K 140K 166960K 635 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 110 0 in_multi 80 6K 7K 166960K 165 0 ether_multi 1 0K 0K 166960K 17 0 mrt 2 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 181 811K 811K 166960K 181 0 exec 0 0K 1K 166960K 595 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 262 74K 87K 166960K 11757 0 UVM aobj 63 4K 4K 166960K 66 0 pinsyscall 43 86K 104K 166960K 2159 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 58 0 NDP 12 0K 2K 166960K 54 0 temp 79 6828K 6912K 166960K 34784 0 kqueue 14 22K 28K 166960K 170 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 120 0 117 2 0 2 2 0 8 1 rtentry 112 145 0 60 4 0 4 4 0 8 0 unpcb 144 1153 0 1135 12 10 2 7 0 8 1 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 808 402 0 396 15 13 2 14 0 8 1 arp 120 21 0 4 1 0 1 1 0 8 0 inpcb 336 1493 0 1483 25 18 7 15 0 8 5 nd6 136 31 0 10 1 0 1 1 0 8 0 pkpcb 40 7 0 7 3 2 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 12 0 11 3 2 1 1 0 8 0 pffrag 232 5 0 1 1 0 1 1 0 482 0 pffrnode 88 5 0 1 1 0 1 1 0 8 0 pffrent 40 16 0 12 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 108 0 28 1 0 1 1 0 8 0 pfstkey 128 114 0 34 3 0 3 3 0 8 0 pfstate 376 111 0 31 8 0 8 8 0 8 0 pfrule 1344 26 0 17 2 0 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 669 0 284 29 3 26 29 0 8 0 art_table 32 671 0 284 4 0 4 4 0 8 0 art_node 16 142 0 65 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semupl 112 3 0 3 2 1 1 1 0 8 1 semapl 112 34 0 24 1 0 1 1 0 8 0 shmpl 112 63 0 3 2 0 2 2 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 3336 0 1837 95 0 95 95 0 8 0 ffsino 272 3336 0 1837 101 0 101 101 0 8 0 nchpl 144 4854 0 3165 63 0 63 63 0 8 0 uvmvnodes 80 4169 0 0 86 0 86 86 0 8 0 vnodes 216 4169 0 0 232 0 232 232 0 8 0 namei 1024 17210 0 17210 3 2 1 2 0 8 1 percpumem 16 68 0 22 1 0 1 1 0 8 0 kstatmem 264 68 0 44 2 0 2 2 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 5 0 5 3 2 1 1 0 8 1 scxspl 216 13884 0 13884 12 9 3 8 1 8 3 plimitpl 152 286 0 266 1 0 1 1 0 8 0 sigapl 424 1397 0 1325 10 1 9 9 0 8 0 futexpl 64 16721 0 16715 1 0 1 1 0 8 0 knotepl 120 578 0 0 18 0 18 18 0 8 0 kqueuepl 216 338 0 324 5 4 1 5 0 8 0 pipepl 320 412 0 385 12 9 3 8 0 8 0 fdescpl 496 1357 0 1325 5 0 5 5 0 8 0 filepl 152 10574 0 10315 27 11 16 21 0 8 5 lockfpl 104 327 0 324 1 0 1 1 0 8 0 lockfspl 48 140 0 137 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 87 0 70 1 0 1 1 0 8 0 ucredpl 104 1660 0 1644 1 0 1 1 0 8 0 zombiepl 144 1327 0 1325 1 0 1 1 0 8 0 processpl 1160 1397 0 1325 7 1 6 6 0 8 0 procpl 648 2964 0 2881 8 0 8 8 0 8 0 srpgc 96 12 0 12 3 2 1 1 0 8 1 sosppl 168 5 0 5 1 1 0 1 0 8 0 sockpl 664 2791 0 2760 54 45 9 26 0 8 5 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 148 0 0 19 0 19 19 0 8 0 mcl2k 2048 90 0 0 12 0 12 12 0 8 0 mtagpl 96 161 0 0 4 0 4 4 0 8 0 mbufpl 256 377 0 0 24 0 24 24 0 8 0 bufpl 280 3926 0 103 274 0 274 274 0 8 0 anonpl 24 225958 0 219570 70 31 39 51 0 185 0 amapchunkpl 152 38739 0 38105 41 11 30 30 0 158 5 amappl16 200 5109 0 4969 23 15 8 15 0 8 0 amappl15 192 12 0 12 1 1 0 1 0 8 0 amappl14 184 117 0 105 1 0 1 1 0 8 0 amappl13 176 12 0 12 1 1 0 1 0 8 0 amappl12 168 2002 0 1970 4 2 2 3 0 8 0 amappl11 160 59 0 44 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 140 0 140 1 1 0 1 0 8 0 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 116 0 102 1 0 1 1 0 8 0 amappl6 120 166 0 164 1 0 1 1 0 8 0 amappl5 112 132 0 120 1 0 1 1 0 8 0 amappl4 104 319 0 301 1 0 1 1 0 8 0 amappl3 96 7117 0 7005 3 0 3 3 0 8 0 amappl2 88 1640 0 1552 4 1 3 3 0 8 0 amappl1 80 10591 0 10020 16 2 14 15 0 8 0 amappl 88 11309 0 11110 5 0 5 5 0 92 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 3 0 3 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 65 0 3 2 0 2 2 0 8 0 uaddrrnd 24 1357 0 1325 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1357 0 1325 1 0 1 1 0 8 0 vmmpekpl 168 12275 0 12231 3 0 3 3 0 8 0 vmmpepl 168 88070 0 86003 101 11 90 96 0 357 0 vmsppl 448 1356 0 1325 6 2 4 5 0 8 0 rwobjpl 56 29707 0 24393 76 1 75 75 0 8 0 pdppl 4096 2721 0 2650 107 36 71 85 0 8 0 pvpl 32 15154 0 0 123 1 122 122 0 265 0 pmappl 248 1356 0 1325 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 454 0 82 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff834b9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8363aef0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff8363aef0) at __mp_lock+0x192 sys/kern/kern_lock.c:144 intr_handler(ffff8000371c5490,ffff800000069c00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153 __mp_lock(ffffffff8363aef0) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff8363aef0) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144 intr_handler(ffff8000371c5600,ffff800000079e00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __mp_lock(ffffffff8363aef0) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff8363aef0) at __mp_lock+0x199 sys/kern/kern_lock.c:144 softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_const_cmp4(0,0) at __sanitizer_cov_trace_const_cmp4+0x35 kd_curproc sys/dev/kcov.c:585 [inline] __sanitizer_cov_trace_const_cmp4(0,0) at __sanitizer_cov_trace_const_cmp4+0x35 sys/dev/kcov.c:230 witness_assert(fffffd806bfc0818,2) at witness_assert+0x71 sys/kern/subr_witness.c:2001 rw_exit_read(fffffd806bfc0808) at rw_exit_read+0x75 rw_assert_rdlock sys/kern/kern_rwlock.c:398 [inline] rw_exit_read(fffffd806bfc0808) at rw_exit_read+0x75 sys/kern/kern_rwlock.c:137 uvmfault_lookup(ffff8000371c5ac8,0) at uvmfault_lookup+0x22a sys/uvm/uvm_fault.c:1821 uvm_fault_check(ffff8000371c5ac8,ffff8000371c5b00,ffff8000371c5b30,0) at uvm_fault_check+0x49 sys/uvm/uvm_fault.c:672 uvm_fault(fffffd806bfc0720,5ed000,0,2) at uvm_fault+0xf5 sys/uvm/uvm_fault.c:600 kpageflttrap(ffff8000371c5c70,5eda80) at kpageflttrap+0x2d0 sys/arch/amd64/amd64/trap.c:279 kerntrap(ffff8000371c5c70) at kerntrap+0x14a sys/arch/amd64/amd64/trap.c:332 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyout() at copyout+0x57 syscall(ffff8000371c60c0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff8000371c60c0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8df5408000, count: -25 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 witness_checkorder(fffffd806dfe8808,9,0) at witness_checkorder+0x1047 rw_enter(fffffd806dfe87f8,1) at rw_enter+0x122 rrw_enter(fffffd806dfe87f8,1) at rrw_enter+0xbe sys/kern/kern_rwlock.c:464 VOP_LOCK(fffffd80780d2368,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 vn_lock(fffffd80780d2368,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:564 vn_rdwr(0,fffffd80780d2368,ffff800011a26140,df,0,1,2c71e99566d0ea31,0,ffff800000b3e000,0) at vn_rdwr+0xd1 sys/kern/vfs_vnops.c:320 vndstrategy(fffffd805f224d38) at vndstrategy+0x4ff sys/dev/vnd.c:342 physio(ffffffff8131d350,2902,8000,ffffffff818b3880,ffff800033d91c98) at physio+0x2f6 sys/kern/kern_physio.c:162 spec_read(ffff800033d91b00) at spec_read+0x155 sys/kern/spec_vnops.c:215 VOP_READ(fffffd806e6dad08,ffff800033d91c98,0,fffffd807f7d3680) at VOP_READ+0x102 sys/kern/vfs_vops.c:227 vn_read(fffffd805f66bef8,ffff800033d91c98,0) at vn_read+0x17b sys/kern/vfs_vnops.c:369 dofilereadv(ffff8000ffff22a8,7,ffff800033d91c98,0,ffff800033d91d50) at dofilereadv+0x230 sys/kern/sys_generic.c:252 sys_read(ffff8000ffff22a8,ffff800033d91e00,ffff800033d91d50) at sys_read+0xa2 sys/kern/sys_generic.c:172 syscall(ffff800033d91e00) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff800033d91e00) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd3bfa5c130, count: -16