panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *264765 47316 0 0 0x4000000 1 syz-executor.7 238764 10248 0 0x14000 0x40000200 0 softclock db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825a4184) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(ffffffff82a6f1a0,9,0) at witness_checkorder+0x116d sys/kern/subr_witness.c:833 __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 read_rflags machine/cpufunc.h:195 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 intr_disable machine/cpufunc.h:216 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 sys/kern/kern_lock.c:142 selwakeup(fffffd80703fd8b0) at selwakeup+0x16 klist_empty sys/sys/event.h:361 [inline] selwakeup(fffffd80703fd8b0) at selwakeup+0x16 sys/kern/sys_generic.c:885 sorwakeup(fffffd80703fd798) at sorwakeup+0xc9 sys/kern/uipc_socket.c:1699 rip6_input(ffff80002e41ecf8,ffff80002e41ed04,85,18) at rip6_input+0x6bc sys/netinet6/raw_ip6.c:224 ip_deliver(ffff80002e41ecf8,ffff80002e41ed04,85,18) at ip_deliver+0x322 sys/netinet/ip_input.c:657 ip6_input_if(ffff80002e41ecf8,ffff80002e41ed04,29,0,ffff80000019f2a8) at ip6_input_if+0x920 ipv6_input(ffff80000019f2a8,fffffd8068800900) at ipv6_input+0x48 sys/netinet6/ip6_input.c:169 if_input_local(ffff80000019f2a8,fffffd8068800900,18) at if_input_local+0x136 sys/net/if.c:778 ip6_output(fffffd80730a8a00,ffff800000de3700,fffffd806f6767c8,0,0,fffffd806f676750) at ip6_output+0xf57 rip6_output(fffffd80730a8a00,fffffd80703fd5b8,ffff80002e41f060,0) at rip6_output+0x4ad sys/netinet6/raw_ip6.c:490 rip6_usrreq(fffffd80703fd5b8,9,fffffd80730a8a00,0,0,ffff80002d5367f0) at rip6_usrreq+0x5d3 sys/netinet6/raw_ip6.c:679 end trace frame: 0xffff80002e41f1e0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs.