²panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock Stopped at db_enter+0x1c: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 59861 46156 0 0x8000000 0 1 syz-executor.6 * 8673 46156 0 0x8000000 0x4000000 0 syz-executor.6 db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff828ea292) at panic+0x17b sys/kern/subr_prf.c:198 witness_checkorder(ffffffff82da79b8,9,0) at witness_checkorder+0xd03 witness_debugger sys/kern/subr_witness.c:2524 [inline] witness_checkorder(ffffffff82da79b8,9,0) at witness_checkorder+0xd03 sys/kern/subr_witness.c:786 __mp_lock(ffffffff82da77b0) at __mp_lock+0xa2 read_rflags machine/cpufunc.h:193 [inline] __mp_lock(ffffffff82da77b0) at __mp_lock+0xa2 intr_disable machine/cpufunc.h:214 [inline] __mp_lock(ffffffff82da77b0) at __mp_lock+0xa2 sys/kern/kern_lock.c:142 intr_handler(ffff80002c9266f0,ffff80000006bc00) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:539 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f pool_do_get(ffffffff82deed50,9,ffff80002c926898) at pool_do_get+0x99 sys/kern/subr_pool.c:720 pool_get(ffffffff82deed50,9) at pool_get+0xf0 sys/kern/subr_pool.c:582 uvmspace_alloc(0,411ef000,1,0) at uvmspace_alloc+0x41 sys/uvm/uvm_map.c:3279 vm_impl_init(ffff80002c6fb050,ffff80002a1fb730) at vm_impl_init+0x92 sys/arch/amd64/amd64/vmm_machdep.c:1244 vm_create(ffff800000e78400,ffff80002a1fb730) at vm_create+0x13e sys/dev/vmm/vmm.c:388 vmmioctl(a00,c2585601,ffff800000e78400,1,ffff80002a1fb730) at vmmioctl+0x2de VOP_IOCTL(fffffd806e2f1d88,c2585601,ffff800000e78400,1,fffffd807f7d36e8,ffff80002a1fb730) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8069582ab0,c2585601,ffff800000e78400,ffff80002a1fb730) at vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525 end trace frame: 0xffff80002c926d50, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs.