witness: lock order reversal: 1st 0xffffffff839a00f8 pf_lock (pf_lock) 2nd 0xffffffff83973b10 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 #1 uvn_io+0x54c sys/uvm/uvm_vnode.c:1244 #2 uvn_get+0x31d sys/uvm/uvm_vnode.c:1076 #3 uvm_fault_lower_io+0x2ce sys/uvm/uvm_fault.c:1612 #4 uvm_fault_lower+0x274 sys/uvm/uvm_fault.c:1381 #5 uvm_fault+0x274 sys/uvm/uvm_fault.c:-1 #6 kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285 #7 kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532 #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x5b #10 pfioctl+0x1377 sys/net/pf_ioctl.c:3284 #11 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #12 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #13 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #14 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #14 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 #1 pfi_attach_ifgroup+0x2a sys/net/pf_if.c:357 #2 if_addgroup+0x2f8 if_creategroup sys/net/if.c:3059 [inline] #2 if_addgroup+0x2f8 sys/net/if.c:3097 #3 if_attachsetup+0xcf sys/net/if.c:512 #4 if_attach+0x6d sys/net/if.c:604 #5 vio_attach+0x182b sys/dev/pv/if_vio.c:935 #6 config_attach+0x449 sys/kern/subr_autoconf.c:421 #7 virtio_pci_attach+0x4fd sys/dev/pci/virtio_pci.c:673 #8 config_attach+0x449 sys/kern/subr_autoconf.c:421 #9 pci_probe_device+0x917 sys/dev/pci/pci.c:574 #10 pci_enumerate_bus+0x358 sys/dev/pci/pci.c:877 #11 config_attach+0x449 sys/kern/subr_autoconf.c:421 #12 acpipci_attach_bus+0x381 sys/arch/amd64/pci/acpipci.c:257 #13 acpipci_attach_busses+0x93 sys/arch/amd64/pci/acpipci.c:265 #14 mainbus_attach+0x304 sys/arch/amd64/amd64/mainbus.c:222 #15 config_attach+0x449 sys/kern/subr_autoconf.c:421 #16 cpu_configure+0x47 sys/arch/amd64/amd64/autoconf.c:124 #17 main+0x4c7 sys/kern/init_main.c:345 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 witness_checkorder(ffffffff83973b10,9,0) at witness_checkorder+0x10cd sys/kern/subr_witness.c:-1 rw_do_enter_write(ffffffff83973af8,0) at rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 uvn_io(fffffb806db14970,ffff80002afa9f98,1,202,0) at uvn_io+0x54c sys/uvm/uvm_vnode.c:1244 uvn_get(fffffb806db14970,0,ffff80002afaa068,ffff80002afaa04c,0,1,c651c9f6dda18d38,1) at uvn_get+0x31d sys/uvm/uvm_vnode.c:1076 uvm_fault_lower_io(ffff80002afaa280,ffff80002afaa2b8,ffff80002afaa0f8,ffff80002afaa0e8) at uvm_fault_lower_io+0x2ce sys/uvm/uvm_fault.c:1612 uvm_fault_lower(ffff80002afaa280,ffff80002afaa2b8,ffff80002afaa200) at uvm_fault_lower+0x274 sys/uvm/uvm_fault.c:1381 uvm_fault(fffffb806ce24020,200000001000,0,1) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1 kpageflttrap(ffff80002afaa430,200000001200) at kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285 kerntrap(ffff80002afaa430) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(14900,c4504441,ffff8000015ed000,1,ffff8000387b14e0) at pfioctl+0x1377 sys/net/pf_ioctl.c:3284 VOP_IOCTL(fffffb8062c037d8,c4504441,ffff8000015ed000,1,fffffb80097fd5b0,ffff8000387b14e0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 vn_ioctl(fffffb806c40a538,c4504441,ffff8000015ed000,ffff8000387b14e0) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 sys_ioctl(ffff8000387b14e0,ffff80002afaafe0,ffff80002afaaf30) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80002afaafe0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002afaafe0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x87c60db770, count: -18 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80002afa9d50 rbx 0 rdx 0xffff8000015d6b80 rcx 0xffff8000387b14e0 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80002afa9c30 r9 0x8080808080808080 r10 0xd9c534dd9dc85c4b r11 0x5aff224dcdd0cf80 r12 0xfffffb80040f22c0 r13 0xfffffb80048e1130 r14 0x3 r15 0xffffffff83558bdf substchar+0x98c4 rip 0xffffffff81017615 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002afa9d40 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=96530 pid=62843 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=75, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000387b02b8,0xffff8000387b1cb8 process=0xffff800045ff3a40 user=0xffff80002afa6000, vmspace=0xfffffb806ce24020 estcpu=25, cpticks=1, pctcpu=0.0, user=1, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 93799 501185 5026 0 3 0x2 0 clonelk ifconfig 5026 327635 51982 0 3 0x100002 0x88 sigsusp sh 51060 498237 90623 0 3 0x2 0 clonelk ifconfig 90623 310133 56737 0 3 0x100002 0x88 sigsusp sh 56737 344268 21025 0 3 0x2 0x80 wait syz-executor 62843 521485 87575 0 7 0 0 syz-executor *62843 96530 87575 0 7 0 0x4000000 syz-executor 51982 288504 21025 0 3 0x2 0x80 wait syz-executor 86360 135036 81548 0 3 0x2 0 clonelk ifconfig 81548 235509 60267 0 3 0x100002 0x88 sigsusp sh 60267 499000 21025 0 3 0x2 0x80 wait syz-executor 13619 239347 70201 0 3 0x1000 0x2000 suspend syz-executor 13619 333674 70201 0 3 0x1000 0x4080000 biowait syz-executor 13619 52126 70201 0 3 0x1000 0x4080000 inode syz-executor 13619 61019 70201 0 3 0x1000 0x4080000 inode syz-executor 13619 185157 70201 0 3 0x1000 0x4080000 inode syz-executor 70201 309213 21025 0 3 0x2 0x80 wait syz-executor 8939 162893 1 0 3 0x100003 0x80 ttyin getty 88253 55654 21025 0 3 0x2 0 biowait syz-executor 87575 310294 21025 0 3 0x2 0x80 nanoslp syz-executor 67237 52400 21025 0 3 0x2 0x80 piperd syz-executor 21025 389617 11024 0 3 0x2 0x80 wait syz-executor 11024 264975 26393 0 3 0x100002 0x88 sigsusp ksh 26393 113184 76069 0 3 0x10 0x88 kqread sshd-session 76069 462840 3916 0 3 0x12 0x80 kqread sshd-session 3916 66523 1 0 3 0 0x88 kqread sshd 47190 486911 67548 74 3 0x1100012 0x80 bpf pflogd 67548 214947 1 0 3 0 0x80 sbwait pflogd 71798 454531 83539 73 3 0x1100010 0x80 kqread syslogd 83539 352568 1 0 3 0x100002 0x80 sbwait syslogd-parent 21797 188878 1 0 3 0x100000 0x80 kqread resolvd 10142 323205 48778 77 3 0x100012 0x80 kqread dhcpleased 875 317636 48778 77 3 0x100012 0x80 kqread dhcpleased 48778 163277 1 0 3 0 0x80 kqread dhcpleased 81768 118199 0 0 3 0x14000 0x200 bored smr 49092 194452 0 0 3 0x14000 0x200 pgzero zerothread 52521 390437 0 0 3 0x14000 0x200 aiodoned aiodoned 31221 397291 0 0 3 0x14000 0x200 syncer update 79028 312487 0 0 3 0x14000 0x200 cleaner cleaner 63906 99247 0 0 3 0x14000 0x200 reaper reaper 81275 8051 0 0 3 0x14000 0x200 pgdaemon pagedaemon 26100 38120 0 0 3 0x14000 0x200 bored viomb 39379 24981 0 0 3 0x14000 0x40000200 acpi0 acpi0 12684 75293 0 0 3 0x14000 0x40000200 idle1 14350 508225 0 0 3 0x14000 0x200 bored softnet1 10541 313533 0 0 2 0x14000 0x200 softnet0 43028 94730 0 0 3 0x14000 0x200 smrbar systqmp 13811 473060 0 0 3 0x14000 0x200 bored systq 85824 430475 0 0 3 0x14000 0x200 tmoslp softclockmp 46380 237824 0 0 3 0x14000 0x40000200 tmoslp softclock 41916 168347 0 0 3 0x14000 0x40000200 idle0 1 71865 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 62843 (syz-executor) thread 0xffff8000387b14e0 (96530) exclusive rwlock pf_lock r = 0 (0xffffffff839a00f8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x42c sys/kern/kern_rwlock.c:320 #2 pfioctl+0x1342 sys/net/pf_ioctl.c:3284 #3 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #4 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #5 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #6 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff839a0188) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x42c sys/kern/kern_rwlock.c:320 #2 pfioctl+0x1d4 sys/net/pf_ioctl.c:2064 #3 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #4 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 #5 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #6 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a58200) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 vn_ioctl+0x4d sys/kern/vfs_vnops.c:520 #2 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #3 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #3 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #4 Xsyscall+0x128 Process 13619 (syz-executor) thread 0xffff80002a347a18 (333674) exclusive rrwlock inode r = 0 (0xfffffb800c5b9c70) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x42c sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vn_write+0x18f sys/kern/vfs_vnops.c:411 #6 dofilewritev+0x2bd sys/kern/sys_generic.c:384 #7 sys_write+0xa2 sys/kern/sys_generic.c:300 #8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #9 Xsyscall+0x128 Process 13619 (syz-executor) thread 0xffff80002a346fb8 (185157) exclusive rrwlock inode r = 0 (0xfffffb800c5b98f8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x42c sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x10e sys/kern/vfs_lookup.c:431 #6 namei+0x5ea sys/kern/vfs_lookup.c:250 #7 vn_open+0x16c sys/kern/vfs_vnops.c:146 #8 sys_ktrace+0x9a sys/kern/kern_ktrace.c:552 #9 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #9 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791 #10 Xsyscall+0x128 Process 88253 (syz-executor) thread 0xffff8000387b0fb0 (55654) exclusive rrwlock inode r = 0 (0xfffffb807a5a4ec8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x42c sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline] #4 ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:156 #5 ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232 #6 ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394 #9 domkdirat+0x179 sys/kern/vfs_syscalls.c:3060 #10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffb80613cc450) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x42c sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x10e sys/kern/vfs_lookup.c:431 #6 namei+0x5ea sys/kern/vfs_lookup.c:250 #7 domkdirat+0x8b sys/kern/vfs_syscalls.c:3045 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791 #9 Xsyscall+0x128 Process 43028 (systqmp) thread 0xffff800045ffef90 (94730) shared rwlock systqmp r = 0 (0xffffffff839c4a38) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 taskq_thread+0x11a sys/kern/kern_task.c:442 #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12079K 12211K 166960K 12294 0 pcb 19 12K 12K 166960K 48 0 rtable 164 13K 15K 166960K 1001 0 pf 28 16K 24K 166960K 135 0 ifaddr 28 4K 7K 166960K 134 0 ifgroup 43 2K 2K 166960K 147 0 sysctl 1 1K 9K 166960K 6 0 counters 64 36K 37K 166960K 120 0 ioctlops 1 2K 4K 166960K 1526 0 iov 0 0K 8K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1323 83K 83K 166960K 1711 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 598 0 sigio 0 0K 0K 166960K 4 0 proc 93 164K 196K 166960K 1178 0 subproc 72 4K 4K 166960K 279 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 14 0 in_multi 55 3K 6K 166960K 321 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 685 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 220 166K 176K 166960K 6202 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 43 86K 106K 166960K 2310 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 9 0K 2K 166960K 93 0 temp 38 9122K 9142K 166960K 12607 0 kqueue 13 20K 26K 166960K 44 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 127 0 124 2 0 2 2 0 8 1 rtentry 176 333 0 266 6 0 6 6 0 8 0 unpcb 144 77 0 58 1 0 1 1 0 8 0 syncache 336 6 0 6 2 1 1 1 0 8 1 tcpcb 736 40 0 36 1 0 1 1 0 8 0 arp 136 58 0 48 1 0 1 1 0 8 0 inpcb 328 241 0 229 3 1 2 2 0 8 0 nd6 152 85 0 73 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 31 0 23 1 0 1 1 0 8 0 ppxss 1192 4 0 4 1 0 1 1 0 8 1 pffrag 232 4 0 0 1 0 1 1 0 482 0 pffrnode 88 4 0 0 1 0 1 1 0 8 0 pffrent 40 7 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 2 1 0 1 1 0 8 1 pfanchor 1288 7 0 0 1 0 1 1 0 8 0 pftag 88 1 0 1 1 0 1 1 0 8 1 pfstitem 24 44 0 2 1 0 1 1 0 8 0 pfstkey 128 44 0 2 2 0 2 2 0 8 0 pfstate 448 44 0 2 5 0 5 5 0 8 0 pfrule 1360 24 0 18 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1377 0 1018 32 0 32 32 0 8 4 art_table 40 1378 0 1018 6 0 6 6 0 8 1 art_node 32 333 0 263 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 shmpl 120 4 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1884 0 360 96 0 96 96 0 8 0 ffsino 296 1884 0 360 118 0 118 118 0 8 0 nchpl 144 2291 0 484 68 0 68 68 0 8 0 vnodes 216 2271 0 0 127 0 127 127 0 8 0 namei 1024 10473 0 10471 4 3 1 3 0 8 0 percpumem 16 76 0 28 1 0 1 1 0 8 0 kstatmem 264 79 0 56 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 16852 0 16850 3 2 1 2 1 8 0 plimitpl 152 105 0 87 1 0 1 1 0 8 0 sigapl 424 869 0 821 7 1 6 7 0 8 0 knotepl 120 268 0 0 9 0 9 9 0 8 0 kqueuepl 224 89 0 80 3 0 3 3 0 8 2 pipepl 344 209 0 182 4 0 4 4 0 8 0 fdescpl 528 853 0 821 3 0 3 3 0 8 0 filepl 160 3061 0 2845 13 0 13 13 0 8 2 lockfpl 104 137 0 134 1 0 1 1 0 8 0 lockfspl 48 40 0 37 1 0 1 1 0 8 0 sessionpl 144 57 0 48 1 0 1 1 0 8 0 pgrppl 48 88 0 71 1 0 1 1 0 8 0 ucredpl 104 215 0 202 1 0 1 1 0 8 0 zombiepl 144 823 0 821 2 1 1 1 0 8 0 processpl 1240 869 0 821 5 0 5 5 0 8 0 procpl 664 1196 0 1143 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 447 0 413 9 1 8 8 0 8 4 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 116 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mextrefs 64 21 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 1236 0 0 78 0 78 78 0 8 0 bufpl 272 7247 0 1106 410 0 410 410 0 8 0 anonpl 32 8952 0 0 73 0 73 73 0 247 0 amapchunkpl 152 17442 0 17028 26 0 26 26 0 158 5 amappl16 200 2136 0 1880 19 5 14 15 0 8 0 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 681 0 677 1 0 1 1 0 8 0 amappl13 176 168 0 156 1 0 1 1 0 8 0 amappl12 168 1223 0 1195 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 140 0 128 1 0 1 1 0 8 0 amappl9 144 288 0 287 1 0 1 1 0 8 0 amappl8 136 201 0 196 1 0 1 1 0 8 0 amappl7 128 187 0 175 1 0 1 1 0 8 0 amappl6 120 238 0 234 1 0 1 1 0 8 0 amappl5 112 222 0 209 1 0 1 1 0 8 0 amappl4 104 362 0 344 1 0 1 1 0 8 0 amappl3 96 3521 0 3418 4 0 4 4 0 8 0 amappl2 88 547 0 489 2 0 2 2 0 8 0 amappl1 80 13472 0 12868 15 0 15 15 0 8 1 amappl 88 5124 0 4979 5 0 5 5 0 92 1 uvmvnodes 80 107 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 853 0 821 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 853 0 821 1 0 1 1 0 8 0 vmmpekpl 168 8395 0 8341 4 0 4 4 0 8 0 vmmpepl 168 63599 0 61609 101 4 97 97 0 357 5 vmsppl 488 852 0 821 6 1 5 5 0 8 0 rwobjpl 80 20881 0 19594 29 2 27 27 0 8 0 pdppl 4096 1714 0 1642 124 48 76 88 0 8 4 pvpl 32 14528 0 0 119 1 118 118 0 265 0 pmappl 256 852 0 821 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 786 0 55 21 0 21 21 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83991ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a57a00) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83a57a00) at __mp_lock+0x199 sys/kern/kern_lock.c:173 intr_handler(ffff80002a2cd3f0,ffff800000079600) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf kd_curproc sys/dev/kcov.c:580 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf sys/dev/kcov.c:153 intr_handler(ffff80002a2cd560,ffff8000002a3480) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x766aea12dfa0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 witness_checkorder(ffffffff83973b10,9,0) at witness_checkorder+0x10cd sys/kern/subr_witness.c:-1 rw_do_enter_write(ffffffff83973af8,0) at rw_do_enter_write+0xae sys/kern/kern_rwlock.c:234 uvn_io(fffffb806db14970,ffff80002afa9f98,1,202,0) at uvn_io+0x54c sys/uvm/uvm_vnode.c:1244 uvn_get(fffffb806db14970,0,ffff80002afaa068,ffff80002afaa04c,0,1,c651c9f6dda18d38,1) at uvn_get+0x31d sys/uvm/uvm_vnode.c:1076 uvm_fault_lower_io(ffff80002afaa280,ffff80002afaa2b8,ffff80002afaa0f8,ffff80002afaa0e8) at uvm_fault_lower_io+0x2ce sys/uvm/uvm_fault.c:1612 uvm_fault_lower(ffff80002afaa280,ffff80002afaa2b8,ffff80002afaa200) at uvm_fault_lower+0x274 sys/uvm/uvm_fault.c:1381 uvm_fault(fffffb806ce24020,200000001000,0,1) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1 kpageflttrap(ffff80002afaa430,200000001200) at kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285 kerntrap(ffff80002afaa430) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(14900,c4504441,ffff8000015ed000,1,ffff8000387b14e0) at pfioctl+0x1377 sys/net/pf_ioctl.c:3284 VOP_IOCTL(fffffb8062c037d8,c4504441,ffff8000015ed000,1,fffffb80097fd5b0,ffff8000387b14e0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 vn_ioctl(fffffb806c40a538,c4504441,ffff8000015ed000,ffff8000387b14e0) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537 sys_ioctl(ffff8000387b14e0,ffff80002afaafe0,ffff80002afaaf30) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80002afaafe0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002afaafe0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x87c60db770, count: -18