witness: lock_object uninitialized: 0xffff800000e90028 Starting stack trace... witness_checkorder(ffff800000e90028,9,0) at witness_checkorder+0x133 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffff800000e90028,9,0) at witness_checkorder+0x133 sys/kern/subr_witness.c:772 rw_enter_write(ffff800000e90018) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 unveil_delete_names(ffff800000e90000) at unveil_delete_names+0x30 unvname_rbt_RBT_MIN sys/kern/kern_unveil.c:90 [inline] unveil_delete_names(ffff800000e90000) at unveil_delete_names+0x30 sys/kern/kern_unveil.c:100 unveil_destroy(ffff8000211f10b0) at unveil_destroy+0xad sys/kern/kern_unveil.c:191 exit1(ffff800027bd7a50,0,0,1) at exit1+0x3d5 sys/kern/kern_exit.c:225 sys_exit(ffff800027bd7a50,ffff800027b022b0,ffff800027b02310) at sys_exit+0x16 sys/kern/kern_exit.c:95 syscall(ffff800027b02380) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027b02380) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffffafc0, count: 249 End of stack trace. Stopped at db_enter+0x18: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 witness_checkorder(ffff800000e90028,9,0) at witness_checkorder+0x138 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffff800000e90028,9,0) at witness_checkorder+0x138 sys/kern/subr_witness.c:772 rw_enter_write(ffff800000e90018) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 unveil_delete_names(ffff800000e90000) at unveil_delete_names+0x30 unvname_rbt_RBT_MIN sys/kern/kern_unveil.c:90 [inline] unveil_delete_names(ffff800000e90000) at unveil_delete_names+0x30 sys/kern/kern_unveil.c:100 unveil_destroy(ffff8000211f10b0) at unveil_destroy+0xad sys/kern/kern_unveil.c:191 exit1(ffff800027bd7a50,0,0,1) at exit1+0x3d5 sys/kern/kern_exit.c:225 sys_exit(ffff800027bd7a50,ffff800027b022b0,ffff800027b02310) at sys_exit+0x16 sys/kern/kern_exit.c:95 syscall(ffff800027b02380) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027b02380) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffffafc0, count: -9 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800027b02050 rbx 0x3 rdx 0 rcx 0 rax 0xffff800027bd7a50 r8 0xffff800027b01ff0 r9 0x8080808080808080 r10 0xb24609408fc7e270 r11 0x6ff0e5614eaa654b r12 0xffff800000e90001 r13 0xffff800000e90028 r14 0 r15 0 rip 0xffffffff820ea248 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800027b02040 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.0) pid=50078 stat=onproc flags process=1008 proc=2000 pri=32, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000212522a8,0xffffffff8293a028 process=0xffff8000211f10b0 user=0xffff800027afd000, vmspace=0xfffffd8078214010 estcpu=36, cpticks=8, pctcpu=0.0 user=0, sys=8, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 63566 362751 41504 0 2 0x2 syz-executor.1 36274 256501 41504 0 3 0x82 nanoslp syz-executor.0 87615 496411 41504 0 3 0x2 biowait syz-executor.2 94025 249417 0 0 3 0x14200 acct acct 53232 264903 41504 0 3 0x2 biowait syz-executor.3 62003 477681 1 0 3 0x100083 ttyopn getty 97340 104475 0 0 3 0x14200 bored sosplice 41504 175795 38009 0 3 0x82 thrsleep syz-fuzzer 41504 475789 38009 0 3 0x4000082 nanoslp syz-fuzzer 41504 115536 38009 0 3 0x4000082 thrsleep syz-fuzzer 41504 130701 38009 0 3 0x4000082 thrsleep syz-fuzzer 41504 516692 38009 0 3 0x4000082 thrsleep syz-fuzzer 41504 106842 38009 0 3 0x4000082 thrsleep syz-fuzzer 41504 94130 38009 0 3 0x4000082 thrsleep syz-fuzzer 41504 402104 38009 0 3 0x4000082 kqread syz-fuzzer 38009 114374 29315 0 3 0x10008a sigsusp ksh 29315 267871 17954 0 3 0x9a poll sshd 17954 445890 1 0 3 0x88 poll sshd 29114 120388 18399 74 3 0x100092 bpf pflogd 18399 217994 1 0 3 0x80 netio pflogd 11559 277463 21118 73 3 0x100090 kqread syslogd 21118 164466 1 0 3 0x100082 netio syslogd 80508 484833 1 0 3 0x100080 kqread resolvd 46583 286576 45229 77 3 0x100092 kqread dhcpleased 58922 384093 45229 77 3 0x100092 kqread dhcpleased 45229 245177 1 0 3 0x80 kqread dhcpleased 45812 216457 0 0 3 0x14200 bored smr 67469 47203 0 0 3 0x14200 pgzero zerothread 6504 278813 0 0 3 0x14200 aiodoned aiodoned 849 31967 0 0 3 0x14200 syncer update 48635 477979 0 0 3 0x14200 cleaner cleaner 21137 484324 0 0 7 0x14200 reaper 85481 280554 0 0 3 0x14200 pgdaemon pagedaemon 54285 521174 0 0 3 0x14200 bored viomb 58966 250273 0 0 3 0x40014200 acpi0 acpi0 77110 478823 0 0 3 0x40014200 idle1 39370 449597 0 0 3 0x14200 bored softnet 53208 480240 0 0 3 0x14200 bored systqmp 12835 441680 0 0 3 0x14200 bored systq 82108 331973 0 0 3 0x40014200 bored softclock 64430 419974 0 0 3 0x40014200 idle0 1 254290 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 63566 (syz-executor.1) thread 0xffff8000212522a8 (362751) exclusive rwlock vmmaplk r = 0 (0xfffffd8075526a50) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5458 #3 uvmspace_fork+0x37 sys/uvm/uvm_map.c:4101 #4 process_new+0x181 sys/kern/kern_fork.c:263 #5 fork1+0x30b sys/kern/kern_fork.c:382 #6 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #6 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #7 Xsyscall+0x128 Process 87615 (syz-executor.2) thread 0xffff800027bd6010 (496411) exclusive rrwlock inode r = 0 (0xfffffd8074b982c8) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vget+0x1d3 sys/kern/vfs_subr.c:677 #6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119 #7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1318 #8 ufs_lookup+0x13ba sys/ufs/ufs/ufs_lookup.c:487 #9 VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561 #11 namei+0x36a sys/kern/vfs_lookup.c:245 #12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1849 #13 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #13 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806e619e70) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1849 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 Process 53232 (syz-executor.3) thread 0xffff8000212537a8 (264903) exclusive rrwlock inode r = 0 (0xfffffd8074b98708) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vget+0x1d3 sys/kern/vfs_subr.c:677 #6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119 #7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1318 #8 ufs_lookup+0x13ba sys/ufs/ufs/ufs_lookup.c:487 #9 VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561 #11 namei+0x36a sys/kern/vfs_lookup.c:245 #12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1849 #13 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #13 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80776bba30) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1849 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 Process 21137 (reaper) thread 0xffff800021149a40 (484324) exclusive rwlock kmmaplk r = 0 (0xffffffff8297bf58) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5458 #3 uvm_unmap+0x78 sys/uvm/uvm_map.c:2068 #4 uvm_uarea_free+0x35 sys/uvm/uvm_glue.c:287 #5 reaper+0x158 sys/kern/kern_exit.c:451 #6 proc_trampoline+0x1c ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10207 6505K 7211K 78643K 96579 0 pcb 13 24K 29K 78643K 4602 0 rtable 190 15K 17K 78643K 6416 0 ifaddr 82 26K 30K 78643K 2110 0 sysctl 3 1K 1K 78643K 7 0 counters 48 34K 35K 78643K 730 0 ioctlops 0 0K 8K 78643K 7402 0 iov 0 0K 28K 78643K 3318 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1432 90K 90K 78643K 33398 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 3 5K 9K 78643K 289 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 3666 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12598 0 file desc 7 21K 49K 78643K 29448 0 sigio 0 0K 0K 78643K 408 0 proc 77 111K 124K 78643K 5154 0 subproc 52 3K 3K 78643K 1785 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 1440 0 in_multi 55 3K 4K 78643K 2896 0 ether_multi 1 0K 0K 78643K 384 0 mrt 1 0K 0K 78643K 84 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 271 1208K 1208K 78643K 271 0 exec 0 0K 2K 78643K 7638 0 pfkey data 0 0K 0K 78643K 70 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 649 1752K 1753K 78643K 371048 0 UVM aobj 131 4K 4K 78643K 131 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 1674 0 NDP 9 0K 1K 78643K 677 0 temp 116 4230K 8319K 78643K 258347 0 kqueue 10 14K 24K 78643K 1052 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 2423 0 2420 37 36 1 5 0 8 0 rtentry 112 2084 0 2022 2 0 2 2 0 8 0 unpcb 136 18833 0 18818 194 189 5 9 0 8 4 syncache 296 34 0 34 9 9 0 1 0 8 0 tcpqe 32 31 0 31 4 4 0 1 0 8 0 tcpcb 736 8851 0 8847 335 327 8 26 0 8 7 arp 120 313 0 304 1 0 1 1 0 8 0 inpcb 304 27678 0 27671 411 405 6 21 0 8 5 rttmr 72 26 0 26 10 10 0 1 0 8 0 nd6 48 567 0 555 1 0 1 1 0 8 0 pkpcb 40 483 0 483 19 19 0 1 0 8 0 kcovpl 48 136 0 132 1 0 1 1 0 8 0 ppxss 1248 117 0 117 26 26 0 1 0 8 0 pfstscr 40 16 0 16 3 3 0 1 0 8 0 pffrag 232 178 0 176 15 14 1 1 0 482 0 pffrnode 88 178 0 176 15 14 1 1 0 8 0 pffrent 40 1732 0 1730 17 16 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 131 0 113 4 2 2 2 0 8 0 pftag 88 12 0 9 1 0 1 1 0 8 0 pfqueue 264 9 0 9 3 3 0 1 0 8 0 pfstitem 24 50 0 48 1 0 1 1 0 8 0 pfstkey 112 74 0 72 1 0 1 1 0 8 0 pfstate 320 61 0 59 2 1 1 2 0 8 0 pfsrctr 152 82 0 82 1 1 0 1 0 8 0 pfrule 1360 658 0 547 11 1 10 10 0 8 0 art_heap8 4096 8 0 6 7 5 2 4 0 8 0 art_heap4 256 8046 0 7768 47 29 18 20 0 8 0 art_table 32 8054 0 7774 8 5 3 3 0 8 0 art_node 16 2075 0 2023 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 6 1 0 1 1 0 8 0 semapl 112 3664 0 3654 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 40392 0 38870 96 0 96 96 0 8 0 ffsino 272 40392 0 38870 102 0 102 102 0 8 0 nchpl 144 80673 0 79074 61 0 61 61 0 8 0 uvmvnodes 80 7277 0 0 149 0 149 149 0 8 0 vnodes 224 7277 0 0 429 0 429 429 0 8 0 namei 1024 303960 0 303960 8 7 1 2 0 8 1 percpumem 16 377 0 341 1 0 1 1 0 8 0 vcpupl 2048 413 0 0 52 0 52 52 0 8 0 vmpool 560 462 0 49 31 1 30 30 0 8 0 pfiaddrpl 120 68 0 31 3 1 2 2 0 8 0 scsiplug 72 8 0 8 2 2 0 1 0 8 0 scxspl 216 244865 0 244863 54 53 1 8 0 8 0 plimitpl 152 3571 0 3560 1 0 1 1 0 8 0 sigapl 424 29326 0 29289 7 1 6 7 0 8 0 futexpl 64 257128 0 257128 11 10 1 1 0 8 1 knotepl 112 276 0 0 3 0 3 3 0 8 0 kqueuepl 216 5844 0 5834 116 111 5 7 0 8 4 pipepl 336 6554 0 6538 156 154 2 9 0 8 0 fdescpl 496 29288 0 29268 7 4 3 4 0 8 0 filepl 152 217502 0 217352 342 331 11 21 0 8 5 lockfpl 104 19438 0 19436 37 35 2 2 0 8 1 lockfspl 48 4730 0 4728 1 0 1 1 0 8 0 sessionpl 144 164 0 151 1 0 1 1 0 8 0 pgrppl 48 507 0 494 1 0 1 1 0 8 0 ucredpl 96 23522 0 23507 1 0 1 1 0 8 0 zombiepl 144 30383 0 30382 4 3 1 1 0 8 0 processpl 1064 29326 0 29289 4 0 4 4 0 8 0 procpl 672 85225 0 85179 28 22 6 8 0 8 0 srpgc 96 174 0 174 29 29 0 1 0 8 0 sosppl 168 257 0 257 34 34 0 1 0 8 0 sockpl 480 49447 0 49422 1100 1080 20 52 0 8 16 mcl64k 65536 56 0 0 4 1 3 3 0 8 0 mcl16k 16384 33 0 0 4 1 3 3 0 8 0 mcl12k 12288 57 0 0 2 0 2 2 0 8 0 mcl9k 9216 91 0 0 3 1 2 2 0 8 0 mcl8k 8192 89 0 0 6 3 3 3 0 8 0 mcl4k 4096 41 0 0 5 2 3 3 0 8 0 mcl2k2 2112 24 0 0 2 0 2 2 0 8 0 mcl2k 2048 368 0 0 23 6 17 20 0 8 0 mtagpl 96 1033 0 0 11 0 11 11 0 8 0 mbufpl 256 8093 0 0 497 1 496 496 0 8 0 bufpl 288 56611 0 49332 521 0 521 521 0 8 0 anonpl 24 8469248 0 8447159 441 289 152 196 0 186 0 amapchunkpl 152 953835 0 953095 288 253 35 59 0 158 0 amappl16 200 81177 0 80254 313 261 52 67 0 8 0 amappl15 192 5385 0 5384 12 11 1 1 0 8 0 amappl14 184 2866 0 2859 1 0 1 1 0 8 0 amappl13 176 4809 0 4807 1 0 1 1 0 8 0 amappl12 168 2750 0 2747 1 0 1 1 0 8 0 amappl11 160 2382 0 2366 1 0 1 1 0 8 0 amappl10 152 6053 0 6044 1 0 1 1 0 8 0 amappl9 144 2096 0 2093 1 0 1 1 0 8 0 amappl8 136 8202 0 8053 7 1 6 6 0 8 0 amappl7 128 5710 0 5698 1 0 1 1 0 8 0 amappl6 120 2602 0 2577 1 0 1 1 0 8 0 amappl5 112 27753 0 27723 2 0 2 2 0 8 0 amappl4 104 8948 0 8914 1 0 1 1 0 8 0 amappl3 96 7548 0 7522 1 0 1 1 0 8 0 amappl2 88 8012 0 7946 2 0 2 2 0 8 0 amappl1 80 532744 0 532274 15 4 11 13 0 8 0 amappl 88 367773 0 367464 9 1 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 29749 0 29316 3 0 3 3 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 29749 0 29316 3 0 3 3 0 8 0 vmmpekpl 168 206154 0 206068 6 1 5 5 0 8 0 vmmpepl 168 2738171 0 2734847 897 724 173 219 0 357 8 vmsppl 368 29749 0 29316 41 1 40 40 0 8 0 rwobjpl 56 656608 0 647177 182 47 135 135 0 8 0 pdppl 4096 59508 0 59045 608 141 467 467 0 8 4 pvpl 32 14083446 0 14061082 740 531 209 294 0 265 0 pmappl 248 29749 0 29316 29 1 28 28 0 8 0 extentpl 40 57 0 38 1 0 1 1 0 8 0 phpool 112 2529 0 681 53 0 53 53 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff82829ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff82969998) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82969998) at __mp_lock+0x122 sys/kern/kern_lock.c:147 __mp_acquire_count(ffffffff82969998,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 mi_switch() at mi_switch+0x3d3 sys/kern/sched_bsd.c:416 yield() at yield+0x5a sys/kern/sched_bsd.c:291 pool_get(ffffffff82864828,1) at pool_get+0x199 sys/kern/subr_pool.c:591 uvm_mapent_alloc(ffffffff8297bf40,0) at uvm_mapent_alloc+0x2fe sys/uvm/uvm_map.c:1773 uvm_unmap_remove(ffffffff8297bf40,ffff800027af7000,ffff800027afd000,ffff800021185aa0,0,1) at uvm_unmap_remove+0x2d7 uvm_map_clip_end sys/uvm/uvm_map.c:4815 [inline] uvm_unmap_remove(ffffffff8297bf40,ffff800027af7000,ffff800027afd000,ffff800021185aa0,0,1) at uvm_unmap_remove+0x2d7 sys/uvm/uvm_map.c:2243 uvm_unmap(ffffffff8297bf40,ffff800027af7000,ffff800027afd000) at uvm_unmap+0x92 vm_map_unlock_ln sys/uvm/uvm_map.c:5494 [inline] uvm_unmap(ffffffff8297bf40,ffff800027af7000,ffff800027afd000) at uvm_unmap+0x92 sys/uvm/uvm_map.c:2069 uvm_uarea_free(ffff800027bd6d30) at uvm_uarea_free+0x35 sys/uvm/uvm_glue.c:287 reaper(ffff800021149a40) at reaper+0x158 sys/kern/kern_exit.c:451 end trace frame: 0x0, count: -13 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 witness_checkorder(ffff800000e90028,9,0) at witness_checkorder+0x138 witness_debugger sys/kern/subr_witness.c:2502 [inline] witness_checkorder(ffff800000e90028,9,0) at witness_checkorder+0x138 sys/kern/subr_witness.c:772 rw_enter_write(ffff800000e90018) at rw_enter_write+0x5b sys/kern/kern_rwlock.c:128 unveil_delete_names(ffff800000e90000) at unveil_delete_names+0x30 unvname_rbt_RBT_MIN sys/kern/kern_unveil.c:90 [inline] unveil_delete_names(ffff800000e90000) at unveil_delete_names+0x30 sys/kern/kern_unveil.c:100 unveil_destroy(ffff8000211f10b0) at unveil_destroy+0xad sys/kern/kern_unveil.c:191 exit1(ffff800027bd7a50,0,0,1) at exit1+0x3d5 sys/kern/kern_exit.c:225 sys_exit(ffff800027bd7a50,ffff800027b022b0,ffff800027b02310) at sys_exit+0x16 sys/kern/kern_exit.c:95 syscall(ffff800027b02380) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027b02380) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffffafc0, count: -9