witness: lock order reversal: 1st 0xffffffff82903a50 pf_lock (pf_lock) 2nd 0xffffffff829a0950 netlock (netlock) lock order "netlock"(rwlock) -> "pf_lock"(rwlock) first seen at: #0 rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 #1 pfioctl+0x3fba sys/net/pf_ioctl.c:2966 #2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #4 sys_ioctl+0x4a2 #5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #6 Xsyscall+0x128 lock order "pf_lock"(rwlock) -> "netlock"(rwlock) first seen at: #0 rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 #1 uvn_io+0x418 sys/uvm/uvm_vnode.c:1243 #2 uvn_get+0x1df sys/uvm/uvm_vnode.c:1076 #3 uvm_fault_lower+0x36c sys/uvm/uvm_fault.c:1275 #4 uvm_fault+0x248 #5 kpageflttrap+0x209 #6 kerntrap+0xef sys/arch/amd64/amd64/trap.c:318 #7 alltraps_kern_meltdown+0x7b #8 copyin+0x53 #9 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #10 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #11 sys_ioctl+0x4a2 #12 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #12 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #13 Xsyscall+0x128 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 witness_checkorder(ffffffff829a0950,9,0) at witness_checkorder+0x10b7 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffffffff829a0950,9,0) at witness_checkorder+0x10b7 sys/kern/subr_witness.c:1105 rw_enter_write(ffffffff829a0940) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 uvn_io(fffffd805fa237d8,ffff8000294cbff8,1,202,0) at uvn_io+0x418 sys/uvm/uvm_vnode.c:1243 uvn_get(fffffd805fa237d8,1000,ffff8000294cc0b8,ffff8000294cc088,0,1,e87ff0fa9cd820d6,0) at uvn_get+0x1df sys/uvm/uvm_vnode.c:1076 uvm_fault_lower(ffff8000294cc220,ffff8000294cc258,ffff8000294cc1a0,0) at uvm_fault_lower+0x36c sys/uvm/uvm_fault.c:1275 uvm_fault(fffffd8067e95020,20001000,0,1) at uvm_fault+0x248 kpageflttrap(ffff8000294cc3b0,20001000) at kpageflttrap+0x209 kerntrap(ffff8000294cc3b0) at kerntrap+0xef sys/arch/amd64/amd64/trap.c:318 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyin() at copyin+0x53 VOP_IOCTL(fffffd806f6d1c68,c0104451,ffff8000294cc790,3,fffffd807f7d84e0,ffff8000ffff5cf0) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd806d3c0268,c0104451,ffff8000294cc790,ffff8000ffff5cf0) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 sys_ioctl(ffff8000ffff5cf0,ffff8000294cc8a8,ffff8000294cc900) at sys_ioctl+0x4a2 syscall(ffff8000294cc970) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000294cc970) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb444d94ec20, count: -16 ddb{0}> show registers rdi 0x3 rsi 0x40000 acpi_pdirpa+0x2be68 rbp 0xffff8000294cbdc0 rbx 0x3 rdx 0xffff800000ca4640 rcx 0 rax 0x3ffff acpi_pdirpa+0x2be67 r8 0xffff8000294cbd30 r9 0x8080808080808080 r10 0x44a576d1e3870aa8 r11 0xe005596cbe392575 r12 0xffffffff82a82430 w_lodata+0x52d80 r13 0 r14 0xffffffff82a6f710 w_lodata+0x40060 r15 0xfffffd8002f51780 rip 0xffffffff813817a8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000294cbdb0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.3) pid=347542 stat=onproc flags process=0 proc=4000000 pri=84, usrpri=84, nice=20 forw=0xffffffffffffffff, list=0xffff800021229ce8,0xffff800021142fd8 process=0xffff8000ffffa998 user=0xffff8000294c7000, vmspace=0xfffffd8067e95020 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 85726 20310 78137 0 2 0 syz-executor.7 50878 11908 96199 0 3 0x80 nanoslp syz-executor.6 50878 193934 96199 0 3 0x4000080 fsleep syz-executor.6 50878 27893 96199 0 3 0x4000080 fsleep syz-executor.6 50878 291975 96199 0 3 0x4000080 fsleep syz-executor.6 30556 335123 54142 0 7 0 syz-executor.2 30556 438252 54142 0 2 0x4000080 syz-executor.2 30556 145977 54142 0 2 0x4000080 syz-executor.2 84338 83821 72144 0 3 0x80 nanoslp syz-executor.5 84338 214818 72144 0 3 0x4000080 fsleep syz-executor.5 18788 72565 98296 0 3 0x80 nanoslp syz-executor.4 18788 8167 98296 0 3 0x4000080 fsleep syz-executor.4 18788 134443 98296 0 3 0x4000080 fsleep syz-executor.4 68784 333106 44023 0 2 0 syz-executor.3 *68784 347542 44023 0 7 0x4000000 syz-executor.3 68784 120816 44023 0 3 0x4000080 fsleep syz-executor.3 98296 506500 86630 0 2 0x2 syz-executor.4 23089 187804 0 0 3 0x14200 acct acct 72144 443441 86630 0 3 0x82 nanoslp syz-executor.5 27787 338619 1 0 3 0x100083 ttyin getty 44023 36353 86630 0 2 0x2 syz-executor.3 78137 479547 86630 0 3 0x82 nanoslp syz-executor.7 26412 117623 86630 0 3 0x2 biowait syz-executor.1 35735 318160 0 0 3 0x14200 bored sosplice 96199 100343 86630 0 3 0x82 nanoslp syz-executor.6 54142 292783 86630 0 3 0x82 nanoslp syz-executor.2 1535 437762 86630 0 3 0x82 piperd syz-executor.0 86630 466008 30051 0 3 0x82 thrsleep syz-fuzzer 86630 512959 30051 0 3 0x4000082 nanoslp syz-fuzzer 86630 512393 30051 0 3 0x4000082 kqread syz-fuzzer 86630 322796 30051 0 3 0x4000082 thrsleep syz-fuzzer 86630 176018 30051 0 3 0x4000082 thrsleep syz-fuzzer 86630 498823 30051 0 3 0x4000082 thrsleep syz-fuzzer 86630 301909 30051 0 3 0x4000082 thrsleep syz-fuzzer 86630 441929 30051 0 3 0x4000082 thrsleep syz-fuzzer 86630 389740 30051 0 3 0x4000082 thrsleep syz-fuzzer 30051 453152 89483 0 3 0x10008a sigsusp ksh 89483 96419 62500 0 3 0x9a kqread sshd 62500 399873 1 0 3 0x88 kqread sshd 64980 291907 81610 74 3 0x1100092 bpf pflogd 81610 9557 1 0 3 0x80 netio pflogd 80 500063 31147 73 3 0x1100090 kqread syslogd 31147 322464 1 0 3 0x100082 netio syslogd 36803 153452 1 0 3 0x100080 kqread resolvd 55420 381659 47324 77 3 0x100092 kqread dhcpleased 41493 218865 47324 77 3 0x100092 kqread dhcpleased 47324 48876 1 0 3 0x80 kqread dhcpleased 91294 221469 0 0 3 0x14200 bored smr 62177 379794 0 0 2 0x14200 zerothread 8776 153322 0 0 3 0x14200 aiodoned aiodoned 54892 393240 0 0 3 0x14200 syncer update 85521 102046 0 0 3 0x14200 cleaner cleaner 79478 466961 0 0 3 0x14200 reaper reaper 54680 238347 0 0 3 0x14200 pgdaemon pagedaemon 29735 52353 0 0 3 0x14200 bored viomb 10467 281456 0 0 3 0x40014200 acpi0 acpi0 6086 261413 0 0 3 0x40014200 idle1 48704 276570 0 0 3 0x14200 bored softnet 3831 319564 0 0 3 0x14200 bored systqmp 16562 139285 0 0 3 0x14200 bored systq 31773 456769 0 0 3 0x40014200 bored softclock 91130 357799 0 0 3 0x40014200 idle0 1 290973 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 68784 (syz-executor.3) thread 0xffff8000ffff5cf0 (347542) exclusive rwlock pf_lock r = 0 (0xffffffff82903a50) #0 witness_lock+0x44d #1 pfioctl+0x413b sys/net/pf_ioctl.c:2476 #2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #4 sys_ioctl+0x4a2 #5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82acc2a8) #0 witness_lock+0x44d #1 vn_ioctl+0x41 sys/kern/vfs_vnops.c:514 #2 sys_ioctl+0x4a2 #3 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #3 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #4 Xsyscall+0x128 Process 26412 (syz-executor.1) thread 0xffff800021228d28 (117623) exclusive rrwlock inode r = 0 (0xfffffd8071b013d0) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140 #5 ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347 #6 ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394 #7 ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162 #8 VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404 #9 domkdirat+0x121 sys/kern/vfs_syscalls.c:3101 #10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d3d4b48) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 domkdirat+0x75 sys/kern/vfs_syscalls.c:3086 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10204 6503K 7120K 78643K 18016 0 pcb 13 18K 23K 78643K 4421 0 rtable 200 6K 14K 78643K 21172 0 ifaddr 88 19K 22K 78643K 1399 0 sysctl 3 1K 1K 78643K 3 0 counters 58 35K 36K 78643K 180 0 ioctlops 0 0K 4K 78643K 9566 0 iov 0 0K 32K 78643K 903 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1326 83K 83K 78643K 4448 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 66 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 819 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 16 57K 97K 78643K 17690 0 sigio 0 0K 0K 78643K 100 0 proc 71 87K 136K 78643K 1172 0 subproc 104 6K 6K 78643K 221 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 363 0 in_multi 83 5K 7K 78643K 5585 0 ether_multi 1 0K 0K 78643K 74 0 mrt 1 0K 0K 78643K 1725 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 169 758K 758K 78643K 169 0 exec 0 0K 2K 78643K 1308 0 pfkey data 0 0K 1K 78643K 9 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 460 288K 305K 78643K 222177 0 UVM aobj 28 6K 6K 78643K 36 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 1K 78643K 323 0 NDP 13 0K 2K 78643K 974 0 temp 430 5293K 8813K 78643K 110102 0 kqueue 12 18K 28K 78643K 761 0 SYN cache 2 16K 24K 78643K 3 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 14057 0 14053 65 62 3 7 0 8 2 rtentry 112 5105 0 5016 4 0 4 4 0 8 0 unpcb 136 7012 0 6995 64 63 1 9 0 8 0 syncache 296 48 0 48 9 9 0 1 0 8 0 tcpqe 32 100 0 100 9 9 0 1 0 8 0 tcpcb 736 4170 0 4166 117 116 1 16 0 8 0 arp 120 38 0 20 1 0 1 1 0 8 0 inpcb 304 13665 0 13658 117 115 2 12 0 8 1 rttmr 72 503 0 503 3 3 0 1 0 8 0 nd6 48 917 0 901 1 0 1 1 0 8 0 pkpcb 40 27 0 27 6 6 0 1 0 8 0 kcovpl 48 17 0 9 1 0 1 1 0 8 0 ppxss 1248 18 0 18 6 6 0 1 0 8 0 pfstscr 40 12 0 12 4 4 0 1 0 8 0 pffrag 232 19 0 19 1 1 0 1 0 482 0 pffrnode 88 19 0 19 1 1 0 1 0 8 0 pffrent 40 50 3 50 2 2 0 1 0 8 0 pfosfp 40 6559 0 6026 6 0 6 6 0 8 0 pfosfpen 112 6559 0 4181 68 0 68 68 0 8 0 pfrktable 1344 104 0 104 6 6 0 2 0 8 0 pftag 88 9 0 3 1 0 1 1 0 8 0 pfqueue 264 5 0 5 2 2 0 1 0 8 0 pfstitem 24 86 0 84 1 0 1 1 0 8 0 pfstkey 112 101 0 99 2 1 1 2 0 8 0 pfstate 320 93 0 91 4 3 1 4 0 8 0 pfrule 1360 216 0 215 7 6 1 3 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 21701 0 21338 34 9 25 29 0 8 0 art_table 32 21702 0 21338 4 0 4 4 0 8 0 art_node 16 4502 0 4421 1 0 1 1 0 8 0 sysvmsgpl 40 39 0 18 1 0 1 1 0 8 0 semapl 112 817 0 807 1 0 1 1 0 8 0 shmpl 112 33 0 8 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 22900 0 21449 91 0 91 91 0 8 0 ffsino 272 22900 0 21449 97 0 97 97 0 8 0 nchpl 144 44510 0 42875 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 135972 0 135971 10 9 1 2 0 8 0 percpumem 16 102 0 61 1 0 1 1 0 8 0 vcpupl 2048 14 0 1 2 0 2 2 0 8 0 vmpool 560 16 0 3 1 0 1 1 0 8 0 pfiaddrpl 120 56 0 56 2 2 0 1 0 8 0 scxspl 216 131097 0 131096 27 26 1 7 0 8 0 plimitpl 152 1259 0 1244 1 0 1 1 0 8 0 sigapl 424 17981 0 17936 6 0 6 6 0 8 0 futexpl 64 131307 0 131300 9 8 1 1 0 8 0 knotepl 120 567 0 0 11 2 9 11 0 8 0 kqueuepl 216 3755 0 3747 43 42 1 5 0 8 0 pipepl 336 2092 0 2063 54 46 8 8 0 8 5 fdescpl 496 17964 0 17935 5 1 4 5 0 8 0 filepl 152 106339 0 106082 151 133 18 23 0 8 8 lockfpl 104 2153 0 2150 3 2 1 2 0 8 0 lockfspl 48 608 0 605 1 0 1 1 0 8 0 sessionpl 144 37 0 20 1 0 1 1 0 8 0 pgrppl 48 52 0 35 1 0 1 1 0 8 0 ucredpl 96 6506 0 6494 1 0 1 1 0 8 0 zombiepl 144 17936 0 17936 9 8 1 1 0 8 1 processpl 1064 17981 0 17936 4 0 4 4 0 8 0 procpl 672 47075 0 47012 29 22 7 7 0 8 1 srpgc 96 9 0 9 5 5 0 1 0 8 0 sosppl 168 92 0 92 11 11 0 1 0 8 0 sockpl 480 34771 0 34743 502 490 12 36 0 8 8 mcl64k 65536 20 0 0 3 0 3 3 0 8 0 mcl16k 16384 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 33 0 0 2 0 2 2 0 8 0 mcl9k 9216 25 0 0 2 1 1 2 0 8 0 mcl8k 8192 33 0 0 4 1 3 3 0 8 0 mcl4k 4096 33 0 0 4 1 3 3 0 8 0 mcl2k2 2112 13 0 0 1 0 1 1 0 8 0 mcl2k 2048 715 0 0 20 0 20 20 0 8 0 mtagpl 96 669 0 0 13 0 13 13 0 8 0 mbufpl 256 14313 0 0 861 0 861 861 0 8 0 bufpl 288 28631 0 22298 453 0 453 453 0 8 0 anonpl 24 4810841 0 4798069 175 93 82 103 0 186 0 amapchunkpl 152 530761 0 530038 100 70 30 36 0 158 1 amappl16 200 41795 0 41471 115 97 18 30 0 8 0 amappl15 192 561 0 556 1 0 1 1 0 8 0 amappl14 184 1513 0 1503 1 0 1 1 0 8 0 amappl13 176 8334 0 8328 1 0 1 1 0 8 0 amappl12 168 23 0 22 3 2 1 1 0 8 0 amappl11 160 1091 0 1077 1 0 1 1 0 8 0 amappl10 152 4061 0 4048 1 0 1 1 0 8 0 amappl9 144 480 0 477 1 0 1 1 0 8 0 amappl8 136 3865 0 3702 6 0 6 6 0 8 0 amappl7 128 2900 0 2887 1 0 1 1 0 8 0 amappl6 120 252 0 224 2 1 1 2 0 8 0 amappl5 112 20283 0 20260 1 0 1 1 0 8 0 amappl4 104 3057 0 3026 2 1 1 2 0 8 0 amappl3 96 1281 0 1267 1 0 1 1 0 8 0 amappl2 88 9296 0 9241 3 1 2 3 0 8 0 amappl1 80 312495 0 311896 25 11 14 19 0 8 0 amappl 88 221349 0 221077 8 1 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 35 0 8 1 0 1 1 0 8 0 uaddrrnd 24 17980 0 17938 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 17980 0 17938 1 0 1 1 0 8 0 vmmpekpl 168 116553 0 116492 4 0 4 4 0 8 0 vmmpepl 168 1568043 0 1565604 233 119 114 121 0 357 4 vmsppl 368 17979 0 17938 6 2 4 5 0 8 0 rwobjpl 56 370862 0 363469 113 8 105 108 0 8 0 pdppl 4096 35967 0 35889 494 412 82 85 0 8 4 pvpl 32 8206850 0 8189650 514 369 145 262 0 265 3 pmappl 248 17979 0 17938 4 1 3 3 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 2267 0 604 48 0 48 48 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 witness_checkorder(ffffffff829a0950,9,0) at witness_checkorder+0x10b7 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffffffff829a0950,9,0) at witness_checkorder+0x10b7 sys/kern/subr_witness.c:1105 rw_enter_write(ffffffff829a0940) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 uvn_io(fffffd805fa237d8,ffff8000294cbff8,1,202,0) at uvn_io+0x418 sys/uvm/uvm_vnode.c:1243 uvn_get(fffffd805fa237d8,1000,ffff8000294cc0b8,ffff8000294cc088,0,1,e87ff0fa9cd820d6,0) at uvn_get+0x1df sys/uvm/uvm_vnode.c:1076 uvm_fault_lower(ffff8000294cc220,ffff8000294cc258,ffff8000294cc1a0,0) at uvm_fault_lower+0x36c sys/uvm/uvm_fault.c:1275 uvm_fault(fffffd8067e95020,20001000,0,1) at uvm_fault+0x248 kpageflttrap(ffff8000294cc3b0,20001000) at kpageflttrap+0x209 kerntrap(ffff8000294cc3b0) at kerntrap+0xef sys/arch/amd64/amd64/trap.c:318 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyin() at copyin+0x53 VOP_IOCTL(fffffd806f6d1c68,c0104451,ffff8000294cc790,3,fffffd807f7d84e0,ffff8000ffff5cf0) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd806d3c0268,c0104451,ffff8000294cc790,ffff8000ffff5cf0) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 sys_ioctl(ffff8000ffff5cf0,ffff8000294cc8a8,ffff8000294cc900) at sys_ioctl+0x4a2 syscall(ffff8000294cc970) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000294cc970) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb444d94ec20, count: -16 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff82acc0a0) at __mp_lock+0x129 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82acc0a0) at __mp_lock+0x129 sys/kern/kern_lock.c:147 syscall(ffff8000246761d0) at syscall+0x3ef mi_syscall sys/sys/syscall_mi.h:93 [inline] syscall(ffff8000246761d0) at syscall+0x3ef sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe5cb0, count: -6