kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Wed Apr 3 06:14:24 PDT 2019 OpenBSD/amd64 (ci-openbsd-multicore-5.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2019/04/03 06:14:42 parsed 1 programs 2019/04/03 06:14:50 executed programs: 0 login: panic: timeout_add: to_ticks (-409500) < 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 55971 11973 0 0 0 1K syz-executor.0 db_enter() at db_enter+0x18 panic() at panic+0x174 timeout_add(ffff800020b147b0,fff9c064) at timeout_add+0x194 msleep(ffff80000091d200,ffff80000091d208,11a,ffffffff81f93f9b,fff9c064) at msleep+0xdd bpfread(31700,ffff800020c07930,0) at bpfread+0x23f spec_read(ffff800020c07770) at spec_read+0xfd VOP_READ(fffffd8079ffeca0,ffff800020c07930,0,fffffd807f7c68a0) at VOP_READ+0x6f vn_read(fffffd806d07aac0,ffff800020c07930,0) at vn_read+0x1c3 dofilereadv(ffff800020b14710,3,ffff800020c07930,0,ffff800020c07a10) at dofilereadv+0x19f sys_read(ffff800020b14710,ffff800020c07a28,ffff800020c07a10) at sys_read+0x92 syscall(ffff800020c07ac0) at syscall+0x5b8 Xsyscall(6,0,ffffffffffffffb9,0,3,51eef76d010) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffff6d10, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic timeout_add: to_ticks (-409500) < 0 ddb{1}> trace db_enter() at db_enter+0x18 panic() at panic+0x174 timeout_add(ffff800020b147b0,fff9c064) at timeout_add+0x194 msleep(ffff80000091d200,ffff80000091d208,11a,ffffffff81f93f9b,fff9c064) at msleep+0xdd bpfread(31700,ffff800020c07930,0) at bpfread+0x23f spec_read(ffff800020c07770) at spec_read+0xfd VOP_READ(fffffd8079ffeca0,ffff800020c07930,0,fffffd807f7c68a0) at VOP_READ+0x6f vn_read(fffffd806d07aac0,ffff800020c07930,0) at vn_read+0x1c3 dofilereadv(ffff800020b14710,3,ffff800020c07930,0,ffff800020c07a10) at dofilereadv+0x19f sys_read(ffff800020b14710,ffff800020c07a28,ffff800020c07a10) at sys_read+0x92 syscall(ffff800020c07ac0) at syscall+0x5b8 Xsyscall(6,0,ffffffffffffffb9,0,3,51eef76d010) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffff6d10, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800020c07490 rbx 0xffff800020c07540 rdx 0xffffffff81f8bb72 apollo_pio_rec+0x9b0d rcx 0x201 rax 0x1 r8 0xffffffff8106e1a3 kprintf+0x183 r9 0x1 r10 0x3aa8478f1a253452 r11 0xf8230309f0bb2bda r12 0x3000000008 r13 0xffff800020c074a0 r14 0x100 r15 0x1 rip 0xffffffff819c3ce8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020c07480 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.0) pid=55971 stat=onproc flags process=0 proc=0 pri=26, usrpri=52, nice=20 forw=0x0, list=0xffff800020b144b8,0xffffffff823811f0 process=0xffff800020b8d3c8 user=0xffff800020c02000, vmspace=0xfffffd807effeb40 estcpu=21, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}>