witness: lock order reversal: 1st 0xffffffff828fc2c0 pf_lock (pf_lock) 2nd 0xffffffff82952300 netlock (netlock) lock order "netlock"(rwlock) -> "pf_lock"(rwlock) first seen at: #0 rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 #1 pfioctl+0x3fbc sys/net/pf_ioctl.c:2968 #2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #4 sys_ioctl+0x4a2 #5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #6 Xsyscall+0x128 lock order "pf_lock"(rwlock) -> "netlock"(rwlock) first seen at: #0 rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 #1 uvn_io+0x418 sys/uvm/uvm_vnode.c:1243 #2 uvn_get+0x1df sys/uvm/uvm_vnode.c:1076 #3 uvm_fault_lower+0x36c sys/uvm/uvm_fault.c:1275 #4 uvm_fault+0x248 #5 kpageflttrap+0x209 #6 kerntrap+0xef sys/arch/amd64/amd64/trap.c:318 #7 alltraps_kern_meltdown+0x7b #8 copyin+0x53 #9 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #10 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #11 sys_ioctl+0x4a2 #12 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #12 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #13 Xsyscall+0x128 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 witness_checkorder(ffffffff82952300,9,0) at witness_checkorder+0x10b7 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffffffff82952300,9,0) at witness_checkorder+0x10b7 sys/kern/subr_witness.c:1105 rw_enter_write(ffffffff829522f0) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 uvn_io(fffffd8068fdb130,ffff80002e33c3c8,1,202,0) at uvn_io+0x418 sys/uvm/uvm_vnode.c:1243 uvn_get(fffffd8068fdb130,0,ffff80002e33c488,ffff80002e33c458,0,1,1e6f94c85faf33d5,0) at uvn_get+0x1df sys/uvm/uvm_vnode.c:1076 uvm_fault_lower(ffff80002e33c5f0,ffff80002e33c628,ffff80002e33c570,0) at uvm_fault_lower+0x36c sys/uvm/uvm_fault.c:1275 uvm_fault(fffffd806aa02a20,20001000,0,1) at uvm_fault+0x248 kpageflttrap(ffff80002e33c780,20001000) at kpageflttrap+0x209 kerntrap(ffff80002e33c780) at kerntrap+0xef sys/arch/amd64/amd64/trap.c:318 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyin() at copyin+0x53 VOP_IOCTL(fffffd806f6898e8,c0104453,ffff80002e33cb70,2,fffffd807f7d8600,ffff8000ffff5ce0) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8079b20280,c0104453,ffff80002e33cb70,ffff8000ffff5ce0) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 sys_ioctl(ffff8000ffff5ce0,ffff80002e33cc88,ffff80002e33cce0) at sys_ioctl+0x4a2 syscall(ffff80002e33cd50) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff80002e33cd50) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4afec235520, count: -16 ddb{1}> show registers rdi 0x3 rsi 0x40000 acpi_pdirpa+0x2be68 rbp 0xffff80002e33c190 rbx 0x3 rdx 0xffff800000c04500 rcx 0 rax 0x3ffff acpi_pdirpa+0x2be67 r8 0xffff80002e33c100 r9 0x8080808080808080 r10 0x6a55b1634caf93ee r11 0x375038852069a854 r12 0xffffffff82aa0890 w_lodata+0x52960 r13 0 r14 0xffffffff82a8ff30 w_lodata+0x42000 r15 0xfffffd8002f6a780 rip 0xffffffff81d38498 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80002e33c180 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.4) pid=193463 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=83, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff4a80,0xffff800024ea82b8 process=0xffff8000ffff29a8 user=0xffff80002e337000, vmspace=0xfffffd806aa02a20 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 29364 369780 47661 0 2 0 syz-executor.1 29364 118840 47661 0 3 0x4000080 fsleep syz-executor.1 56682 308653 77811 0 2 0 syz-executor.3 56682 308164 77811 0 3 0x4000080 fsleep syz-executor.3 56998 471917 23956 0 2 0 syz-executor.7 56998 126533 23956 0 3 0x4000080 fsleep syz-executor.7 89414 111484 51032 0 2 0 syz-executor.4 *89414 193463 51032 0 7 0x4000000 syz-executor.4 30490 507463 58329 0 2 0 syz-executor.6 30490 386683 58329 0 2 0x4000000 syz-executor.6 45517 461668 36828 0 2 0 syz-executor.5 45517 154905 36828 0 3 0x4000080 fsleep syz-executor.5 77811 212309 25596 0 3 0x82 nanoslp syz-executor.3 23956 262019 25596 0 3 0x82 nanoslp syz-executor.7 58329 102062 25596 0 3 0x82 nanoslp syz-executor.6 51032 352477 25596 0 3 0x82 nanoslp syz-executor.4 36828 17317 25596 0 3 0x82 nanoslp syz-executor.5 58097 147480 0 0 3 0x14200 acct acct 13113 11637 25596 0 3 0x82 nanoslp syz-executor.0 52394 111506 25596 0 3 0x82 nanoslp syz-executor.2 47661 53381 25596 0 3 0x82 nanoslp syz-executor.1 88467 157376 0 0 3 0x14280 nfsidl nfsio 22319 16992 0 0 3 0x14280 nfsidl nfsio 96384 58067 0 0 3 0x14280 nfsidl nfsio 32347 121566 0 0 3 0x14280 nfsidl nfsio 66706 377289 0 0 3 0x14280 nfsidl nfsio 72493 362741 0 0 3 0x14280 nfsidl nfsio 72134 89951 0 0 3 0x14280 nfsidl nfsio 76343 424198 0 0 3 0x14280 nfsidl nfsio 46349 481102 0 0 3 0x14280 nfsidl nfsio 19281 506225 0 0 3 0x14280 nfsidl nfsio 65083 508575 0 0 3 0x14280 nfsidl nfsio 26419 42104 0 0 3 0x14280 nfsidl nfsio 58716 493705 0 0 3 0x14280 nfsidl nfsio 47606 108488 0 0 3 0x14280 nfsidl nfsio 67456 60066 0 0 3 0x14280 nfsidl nfsio 72725 2630 0 0 3 0x14280 nfsidl nfsio 5265 522947 0 0 3 0x14280 nfsidl nfsio 22447 103007 0 0 3 0x14280 nfsidl nfsio 32037 8006 0 0 3 0x14280 nfsidl nfsio 44719 170128 0 0 3 0x14280 nfsidl nfsio 15457 174968 0 0 3 0x14200 bored sosplice 25596 410721 73584 0 3 0x82 thrsleep syz-fuzzer 25596 497189 73584 0 3 0x4000082 thrsleep syz-fuzzer 25596 194665 73584 0 3 0x4000082 kqread syz-fuzzer 25596 432394 73584 0 3 0x4000082 thrsleep syz-fuzzer 25596 193145 73584 0 3 0x4000082 thrsleep syz-fuzzer 25596 180296 73584 0 3 0x4000082 thrsleep syz-fuzzer 25596 454757 73584 0 3 0x4000082 thrsleep syz-fuzzer 25596 181779 73584 0 3 0x4000082 thrsleep syz-fuzzer 25596 454426 73584 0 3 0x4000082 thrsleep syz-fuzzer 73584 238686 43264 0 3 0x10008a sigsusp ksh 43264 413930 82003 0 3 0x9a kqread sshd 145 505987 1 0 3 0x100083 ttyin getty 82003 462029 1 0 3 0x88 kqread sshd 43277 47554 93886 74 3 0x1100092 bpf pflogd 93886 471365 1 0 3 0x80 netio pflogd 76356 120791 29697 73 3 0x1100090 kqread syslogd 29697 238795 1 0 3 0x100082 netio syslogd 47094 146153 1 0 3 0x100080 kqread resolvd 68843 339486 60012 77 3 0x100092 kqread dhcpleased 75098 366172 60012 77 3 0x100092 kqread dhcpleased 60012 467084 1 0 3 0x80 kqread dhcpleased 72632 136442 0 0 3 0x14200 bored smr 54994 382180 0 0 2 0x14200 zerothread 7206 250138 0 0 3 0x14200 aiodoned aiodoned 25144 275015 0 0 3 0x14200 syncer update 97499 124582 0 0 3 0x14200 cleaner cleaner 13266 246744 0 0 7 0x14200 reaper 73480 188219 0 0 3 0x14200 pgdaemon pagedaemon 36192 267233 0 0 3 0x14200 bored viomb 27844 69883 0 0 3 0x40014200 acpi0 acpi0 67483 183920 0 0 3 0x40014200 idle1 26761 329225 0 0 3 0x14200 bored softnet 15017 402570 0 0 3 0x14200 bored systqmp 76255 130169 0 0 3 0x14200 bored systq 46279 376168 0 0 3 0x40014200 bored softclock 58577 313974 0 0 3 0x40014200 idle0 1 193171 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 89414 (syz-executor.4) thread 0xffff8000ffff5ce0 (193463) exclusive rwlock pf_lock r = 0 (0xffffffff828fc2c0) #0 witness_lock+0x44d #1 pfioctl+0x4397 #2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #4 sys_ioctl+0x4a2 #5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #6 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff828fc320) #0 witness_lock+0x44d #1 pfioctl+0x15e sys/net/pf_ioctl.c:1148 #2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 #3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 #4 sys_ioctl+0x4a2 #5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82aeb288) #0 witness_lock+0x44d #1 vn_ioctl+0x41 sys/kern/vfs_vnops.c:514 #2 sys_ioctl+0x4a2 #3 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #3 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #4 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10216 6562K 7539K 78643K 49903 0 pcb 13 14K 16K 78643K 606 0 rtable 239 11K 14K 78643K 1797 0 ifaddr 99 21K 23K 78643K 929 0 sysctl 3 1K 1K 78643K 3 0 counters 56 35K 36K 78643K 182 0 ioctlops 0 0K 8K 78643K 5874 0 iov 0 0K 16K 78643K 721 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1493 93K 94K 78643K 11806 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 53 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 1269 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 16 57K 82K 78643K 7673 0 sigio 0 0K 0K 78643K 43 0 proc 71 87K 112K 78643K 1462 0 subproc 104 6K 6K 78643K 403 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 363 0 in_multi 91 6K 6K 78643K 542 0 ether_multi 1 0K 0K 78643K 39 0 mrt 1 0K 0K 78643K 6 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 223 996K 996K 78643K 223 0 exec 0 0K 2K 78643K 2365 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 346 426K 441K 78643K 46454 0 UVM aobj 131 8K 8K 78643K 142 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 190 0 NDP 13 0K 2K 78643K 154 0 temp 158 4772K 4902K 78643K 70434 0 kqueue 12 18K 28K 78643K 675 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 215 0 212 2 1 1 2 0 8 0 rtentry 112 510 0 409 4 1 3 4 0 8 0 unpcb 136 4543 0 4528 51 47 4 9 0 8 3 syncache 296 29 0 29 9 9 0 1 0 8 0 tcpqe 32 74 0 74 5 5 0 1 0 8 0 tcpcb 736 1385 0 1375 60 55 5 8 0 8 2 arp 120 71 0 52 1 0 1 1 0 8 0 inpcb 312 4643 0 4630 85 78 7 11 0 8 5 nd6 48 115 0 93 1 0 1 1 0 8 0 pkpcb 40 7 0 7 1 1 0 1 0 8 0 kcovpl 48 31 0 23 1 0 1 1 0 8 0 ppxss 1248 13 0 13 4 4 0 1 0 8 0 pfstscr 40 15 0 14 1 0 1 1 0 8 0 pffrag 232 54 0 50 4 3 1 1 0 482 0 pffrnode 88 54 0 50 4 3 1 1 0 8 0 pffrent 40 128 0 124 5 4 1 1 0 8 0 pfosfp 40 4241 0 3766 5 0 5 5 0 8 0 pfosfpen 112 4241 0 3357 26 0 26 26 0 8 0 pfrktable 1344 125 0 118 5 3 2 2 0 8 1 pftag 88 5 0 0 1 0 1 1 0 8 0 pfqueue 264 3 0 3 1 1 0 1 0 8 0 pfstitem 24 32 0 28 1 0 1 1 0 8 0 pfstkey 112 46 0 42 1 0 1 1 0 8 0 pfstate 320 34 0 31 2 1 1 2 0 8 0 pfrule 1360 288 0 278 5 4 1 4 0 8 0 art_heap8 4096 5 0 4 3 2 1 3 0 8 0 art_heap4 256 2317 0 1880 41 10 31 31 0 8 3 art_table 32 2322 0 1884 4 0 4 4 0 8 0 art_node 16 506 0 417 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 3 1 0 1 1 0 8 0 semapl 112 1267 0 1257 1 0 1 1 0 8 0 shmpl 112 139 0 11 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 10523 0 9069 92 1 91 92 0 8 0 ffsino 272 10523 0 9069 98 1 97 98 0 8 0 nchpl 144 19924 0 18275 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 77357 0 77357 7 6 1 2 0 8 1 percpumem 16 103 0 63 1 0 1 1 0 8 0 vcpupl 2048 55 0 0 7 0 7 7 0 8 0 vmpool 560 65 0 10 5 1 4 4 0 8 0 pfiaddrpl 120 55 0 46 1 0 1 1 0 8 0 scsiplug 72 5 0 5 1 1 0 1 0 8 0 scxspl 216 57204 0 57204 21 20 1 8 0 8 1 plimitpl 152 1013 0 998 1 0 1 1 0 8 0 sigapl 424 7948 0 7881 8 0 8 8 0 8 0 futexpl 64 63523 0 63519 4 3 1 1 0 8 0 knotepl 120 573 0 0 10 1 9 10 0 8 0 kqueuepl 216 1790 0 1782 39 34 5 5 0 8 4 pipepl 336 2009 0 1981 40 37 3 11 0 8 0 fdescpl 496 7912 0 7883 7 3 4 5 0 8 0 filepl 152 53587 0 53343 105 90 15 22 0 8 5 lockfpl 104 12534 0 12532 18 16 2 5 0 8 1 lockfspl 48 6133 0 6131 4 3 1 3 0 8 0 sessionpl 144 47 0 30 1 0 1 1 0 8 0 pgrppl 48 54 0 37 1 0 1 1 0 8 0 ucredpl 96 4910 0 4898 1 0 1 1 0 8 0 zombiepl 144 7883 0 7881 5 4 1 1 0 8 0 processpl 1064 7948 0 7881 5 0 5 5 0 8 0 procpl 672 22121 0 22040 16 7 9 9 0 8 2 srpgc 96 26 0 26 7 7 0 1 0 8 0 sosppl 168 58 0 58 14 13 1 1 0 8 1 sockpl 480 9408 0 9377 254 241 13 34 0 8 8 mcl64k 65536 25 0 0 4 1 3 3 0 8 0 mcl16k 16384 17 0 0 3 0 3 3 0 8 1 mcl12k 12288 17 0 0 2 0 2 2 0 8 0 mcl9k 9216 17 0 0 2 0 2 2 0 8 0 mcl8k 8192 25 0 0 4 1 3 3 0 8 0 mcl4k 4096 25 0 0 4 1 3 3 0 8 0 mcl2k2 2112 11 0 0 1 0 1 1 0 8 0 mcl2k 2048 416 0 0 24 1 23 24 0 8 0 mtagpl 96 1765 0 0 42 0 42 42 0 8 0 mbufpl 256 5624 0 0 334 0 334 334 0 8 0 bufpl 288 13749 0 7419 453 0 453 453 0 8 0 anonpl 24 1505090 0 1487280 221 107 114 140 0 186 0 amapchunkpl 152 140039 0 139336 73 31 42 42 0 158 11 amappl16 200 20693 0 20146 114 84 30 48 0 8 0 amappl15 192 2642 0 2639 1 0 1 1 0 8 0 amappl14 184 216 0 215 1 0 1 1 0 8 0 amappl13 176 1719 0 1712 1 0 1 1 0 8 0 amappl12 168 850 0 843 1 0 1 1 0 8 0 amappl11 160 122 0 103 1 0 1 1 0 8 0 amappl10 152 243 0 236 1 0 1 1 0 8 0 amappl9 144 959 0 954 1 0 1 1 0 8 0 amappl8 136 2750 0 2650 6 2 4 4 0 8 0 amappl7 128 1855 0 1837 1 0 1 1 0 8 0 amappl6 120 809 0 787 2 0 2 2 0 8 0 amappl5 112 6481 0 6463 1 0 1 1 0 8 0 amappl4 104 1522 0 1488 3 2 1 2 0 8 0 amappl3 96 24745 0 24693 2 0 2 2 0 8 0 amappl2 88 10112 0 10040 4 1 3 3 0 8 0 amappl1 80 187912 0 187254 21 6 15 20 0 8 0 amappl 88 45403 0 45207 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 141 0 11 3 0 3 3 0 8 0 uaddrrnd 24 7977 0 7893 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7977 0 7893 1 0 1 1 0 8 0 vmmpekpl 168 65255 0 65185 4 0 4 4 0 8 0 vmmpepl 168 769687 0 766873 259 127 132 158 0 357 0 vmsppl 368 7976 0 7892 9 1 8 8 0 8 0 rwobjpl 56 192717 0 185019 127 17 110 112 0 8 0 pdppl 4096 15961 0 15839 520 396 124 124 0 8 2 pvpl 32 2992888 0 2970411 420 230 190 242 0 265 4 pmappl 248 7976 0 7892 7 1 6 6 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 1799 0 597 35 0 35 35 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff82973ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff82aeb080) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82aeb080) at __mp_lock+0x122 sys/kern/kern_lock.c:147 intr_handler(ffff800021135150,ffff800000077500) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff82aeb080) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82aeb080) at __mp_lock+0x122 sys/kern/kern_lock.c:147 softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:88 Xsoftclock() at Xsoftclock+0x1f __mp_lock(ffffffff82aeb080) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82aeb080) at __mp_lock+0x122 sys/kern/kern_lock.c:147 uvm_unmap_detach(ffff800021135410,1) at uvm_unmap_detach+0x113 sys/uvm/uvm_map.c:1615 uvm_map_teardown(fffffd805b7ef008) at uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789 uvmspace_free(fffffd805b7ef008) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 reaper(ffff8000210f9a40) at reaper+0x19a sys/kern/kern_exit.c:454 end trace frame: 0x0, count: -14 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 witness_checkorder(ffffffff82952300,9,0) at witness_checkorder+0x10b7 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffffffff82952300,9,0) at witness_checkorder+0x10b7 sys/kern/subr_witness.c:1105 rw_enter_write(ffffffff829522f0) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 uvn_io(fffffd8068fdb130,ffff80002e33c3c8,1,202,0) at uvn_io+0x418 sys/uvm/uvm_vnode.c:1243 uvn_get(fffffd8068fdb130,0,ffff80002e33c488,ffff80002e33c458,0,1,1e6f94c85faf33d5,0) at uvn_get+0x1df sys/uvm/uvm_vnode.c:1076 uvm_fault_lower(ffff80002e33c5f0,ffff80002e33c628,ffff80002e33c570,0) at uvm_fault_lower+0x36c sys/uvm/uvm_fault.c:1275 uvm_fault(fffffd806aa02a20,20001000,0,1) at uvm_fault+0x248 kpageflttrap(ffff80002e33c780,20001000) at kpageflttrap+0x209 kerntrap(ffff80002e33c780) at kerntrap+0xef sys/arch/amd64/amd64/trap.c:318 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyin() at copyin+0x53 VOP_IOCTL(fffffd806f6898e8,c0104453,ffff80002e33cb70,2,fffffd807f7d8600,ffff8000ffff5ce0) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8079b20280,c0104453,ffff80002e33cb70,ffff8000ffff5ce0) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531 sys_ioctl(ffff8000ffff5ce0,ffff80002e33cc88,ffff80002e33cce0) at sys_ioctl+0x4a2 syscall(ffff80002e33cd50) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff80002e33cd50) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4afec235520, count: -16