login: panic: timeout_add: to_ticks (-1612018980) < 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *375334 9048 0 0 0x4000000 0 syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x15c sys/kern/subr_prf.c:208 timeout_add(ffff800000669260,9fea8adc) at timeout_add+0x179 sys/kern/kern_timeout.c:190 pcppi_bell(ffff800000669200,f26746b5,9fea8adc,1) at pcppi_bell+0x2a0 sys/dev/isa/pcppi.c:234 spkrioctl(1b00,20005302,ffff800014a234c0,2,ffff80001494a980) at spkrioctl+0x230 tone sys/dev/isa/spkr.c:89 [inline] spkrioctl(1b00,20005302,ffff800014a234c0,2,ffff80001494a980) at spkrioctl+0x230 sys/dev/isa/spkr.c:503 VOP_IOCTL(fffffd802fb9b040,20005302,ffff800014a234c0,2,fffffd803f7c79c0,ffff80001494a980) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290 vn_ioctl(fffffd802ff9ccb8,20005302,ffff800014a234c0,ffff80001494a980) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512 sys_ioctl(ffff80001494a980,ffff800014a23608,ffff800014a235f0) at sys_ioctl+0x62d syscall(ffff800014a236a0) at syscall+0x535 Xsyscall(6,0,ffffffffffffff88,0,3,52036af6010) at Xsyscall+0x128 end of kernel end trace frame: 0x522a65b50b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic timeout_add: to_ticks (-1612018980) < 0 ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x15c sys/kern/subr_prf.c:208 timeout_add(ffff800000669260,9fea8adc) at timeout_add+0x179 sys/kern/kern_timeout.c:190 pcppi_bell(ffff800000669200,f26746b5,9fea8adc,1) at pcppi_bell+0x2a0 sys/dev/isa/pcppi.c:234 spkrioctl(1b00,20005302,ffff800014a234c0,2,ffff80001494a980) at spkrioctl+0x230 tone sys/dev/isa/spkr.c:89 [inline] spkrioctl(1b00,20005302,ffff800014a234c0,2,ffff80001494a980) at spkrioctl+0x230 sys/dev/isa/spkr.c:503 VOP_IOCTL(fffffd802fb9b040,20005302,ffff800014a234c0,2,fffffd803f7c79c0,ffff80001494a980) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290 vn_ioctl(fffffd802ff9ccb8,20005302,ffff800014a234c0,ffff80001494a980) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512 sys_ioctl(ffff80001494a980,ffff800014a23608,ffff800014a235f0) at sys_ioctl+0x62d syscall(ffff800014a236a0) at syscall+0x535 Xsyscall(6,0,ffffffffffffff88,0,3,52036af6010) at Xsyscall+0x128 end of kernel end trace frame: 0x522a65b50b0, count: -10 ddb> show registers rdi 0xffffffff814dfc97 db_enter+0x17 rsi 0x157a __ALIGN_SIZE+0x57a rbp 0xffff800014a230e0 rbx 0xffff800014a23190 rdx 0x157b __ALIGN_SIZE+0x57b rcx 0xffff800000f38000 rax 0xffff800000f38000 r8 0xffff800014a230a0 r9 0x1 r10 0xffff80000413af00 r11 0xc1e59f0f8a56dad6 r12 0x3000000008 r13 0xffff800014a230f0 r14 0x100 r15 0x1 rip 0xffffffff814dfc98 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800014a230d0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=375334 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff80001494a728,0xffffffff8224fcc0 process=0xffff8000149a8020 user=0xffff800014a1e000, vmspace=0xfffffd803f015d68 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 9048 31136 52845 0 2 0 syz-executor.0 * 9048 375334 52845 0 7 0x4000000 syz-executor.0 7247 353397 1 0 3 0x100083 ttyin getty 52845 292275 54126 0 3 0x82 nanosleep syz-executor.0 19556 136789 54126 0 3 0x2 biowait syz-executor.1 5393 502183 0 0 3 0x14200 bored sosplice 54126 122314 17448 0 3 0x82 thrsleep syz-fuzzer 54126 495924 17448 0 3 0x4000082 thrsleep syz-fuzzer 54126 130480 17448 0 3 0x4000082 thrsleep syz-fuzzer 54126 326845 17448 0 3 0x4000082 kqread syz-fuzzer 54126 468104 17448 0 3 0x4000082 thrsleep syz-fuzzer 54126 248038 17448 0 3 0x4000082 thrsleep syz-fuzzer 54126 380239 17448 0 3 0x4000082 thrsleep syz-fuzzer 54126 274239 17448 0 3 0x4000082 thrsleep syz-fuzzer 54126 144306 17448 0 3 0x4000082 thrsleep syz-fuzzer 17448 32889 56781 0 3 0x10008a pause ksh 56781 435893 84527 0 3 0x92 select sshd 84527 28566 1 0 3 0x80 select sshd 64657 255837 43057 73 3 0x100090 kqread syslogd 43057 147951 1 0 3 0x100082 netio syslogd 11177 306753 1 77 3 0x100090 poll dhclient 5849 159822 1 0 3 0x80 poll dhclient 29692 516980 0 0 2 0x14200 zerothread 5634 288056 0 0 3 0x14200 aiodoned aiodoned 13483 95818 0 0 3 0x14200 syncer update 67416 196448 0 0 3 0x14200 cleaner cleaner 65697 341070 0 0 3 0x14200 reaper reaper 57337 446156 0 0 3 0x14200 pgdaemon pagedaemon 15352 313700 0 0 3 0x14200 bored crynlk 31379 146415 0 0 3 0x14200 bored crypto 34485 176965 0 0 3 0x40014200 acpi0 acpi0 55017 403154 0 0 3 0x14200 bored softnet 61464 475956 0 0 3 0x14200 bored systqmp 40392 307894 0 0 3 0x14200 bored systq 91351 149280 0 0 3 0x40014200 bored softclock 24630 391963 0 0 3 0x40014200 idle0 1 75948 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9538 8408K 8418K 78643K 13673 0 0 pcb 23 9K 11K 78643K 5179 0 0 rtable 100 3K 3K 78643K 1878 0 0 ifaddr 61 16K 18K 78643K 970 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 117 0 0 iov 0 0K 24K 78643K 1256 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1187 74K 76K 78643K 7165 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 9K 78643K 138 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 0K 1K 78643K 1135 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1777 193K 286K 78643K 12501 0 0 file desc 5 13K 25K 78643K 9723 0 0 sigio 0 0K 0K 78643K 130 0 0 proc 42 30K 55K 78643K 1796 0 0 subproc 64 65538K 69634K 78643K 413 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 1261 0 0 in_multi 33 2K 2K 78643K 509 0 0 ether_multi 1 0K 0K 78643K 53 0 0 mrt 1 0K 0K 78643K 5 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 126 556K 556K 78643K 126 0 0 exec 0 0K 1K 78643K 1210 0 0 pfkey data 0 0K 4K 78643K 8 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 121 23K 43K 78643K 24751 0 0 UVM aobj 130 8K 8K 78643K 149 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 331 0 0 NDP 13 0K 0K 78643K 272 0 0 temp 178 2347K 2419K 78643K 29440 0 0 kqueue 0 0K 0K 78643K 100 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 13 0 9 1 0 1 1 0 8 0 inpcbpl 280 5297 0 5290 2 1 1 2 0 8 0 plimitpl 152 150 0 143 1 0 1 1 0 8 0 rtentry 112 122 0 82 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpcb 544 2165 0 2161 1 0 1 1 0 8 0 nd6 48 22 0 18 1 0 1 1 0 8 0 ppxss 1128 189 0 189 46 46 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 577 0 389 12 0 12 12 0 8 0 art_table 32 578 0 389 2 0 2 2 0 8 0 art_node 16 121 0 87 1 0 1 1 0 8 0 sysvmsgpl 40 18 0 15 4 3 1 1 0 8 0 semapl 112 1133 0 1123 1 0 1 1 0 8 0 shmpl 112 147 0 19 5 1 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 20366 0 18792 51 0 51 51 0 8 0 ffsino 240 20366 0 18792 93 0 93 93 0 8 0 nchpl 144 34826 0 33205 61 0 61 61 0 8 0 uvmvnodes 72 6553 0 0 120 0 120 120 0 8 0 vnodes 200 6553 0 0 345 0 345 345 0 8 0 namei 1024 110800 0 110799 7 6 1 1 0 8 0 scsiplug 64 28 0 28 17 17 0 1 0 8 0 scxspl 192 138054 0 138053 64 61 3 6 0 8 2 sigapl 432 9876 0 9863 2 0 2 2 0 8 0 futexpl 56 161343 0 161343 8 7 1 1 0 8 1 knotepl 112 2511 0 2484 16 15 1 2 0 8 0 kqueuepl 104 3011 0 3009 1 0 1 1 0 8 0 pipepl 112 6270 0 6251 20 19 1 2 0 8 0 fdescpl 424 9877 0 9863 2 0 2 2 0 8 0 filepl 120 64131 0 64033 16 12 4 6 0 8 1 lockfpl 104 3477 0 3475 18 17 1 1 0 8 0 lockfspl 32 4973 0 4971 18 17 1 1 0 8 0 sessionpl 112 38 0 28 1 0 1 1 0 8 0 pgrppl 48 171 0 161 1 0 1 1 0 8 0 ucredpl 96 18983 0 18976 1 0 1 1 0 8 0 zombiepl 144 9863 0 9863 1 0 1 1 0 8 1 processpl 840 9891 0 9863 5 1 4 4 0 8 0 procpl 600 23428 0 23391 5 1 4 4 0 8 0 sosppl 128 152 0 152 39 38 1 1 0 8 1 sockpl 384 9760 0 9743 20 17 3 4 0 8 1 mcl64k 65536 4148 0 4148 416 387 29 33 0 8 29 mcl16k 16384 31 0 31 23 23 0 1 0 8 0 mcl12k 12288 193 0 193 49 49 0 1 0 8 0 mcl9k 9216 182 0 182 52 51 1 1 0 8 1 mcl8k 8192 162 0 162 44 43 1 1 0 8 1 mcl4k 4096 508 0 508 24 23 1 1 0 8 1 mcl2k2 2112 72 0 72 35 35 0 1 0 8 0 mcl2k 2048 58189 0 58160 12 7 5 8 0 8 0 mtagpl 80 4 0 4 2 2 0 1 0 8 0 mbufpl 256 146300 0 146243 187 170 17 20 0 8 8 bufpl 256 30734 0 24129 414 0 414 414 0 8 0 anonpl 16 1150187 0 1142081 371 317 54 54 0 62 16 amapchunkpl 152 64809 0 64705 407 396 11 97 0 158 6 amappl16 192 62372 0 61962 570 541 29 36 0 8 8 amappl15 184 4701 0 4700 1 0 1 1 0 8 0 amappl14 176 4631 0 4630 2 1 1 1 0 8 0 amappl13 168 52 0 47 1 0 1 1 0 8 0 amappl12 160 224 0 223 4 3 1 1 0 8 0 amappl11 152 4644 0 4635 1 0 1 1 0 8 0 amappl10 144 482 0 477 1 0 1 1 0 8 0 amappl9 136 4730 0 4726 1 0 1 1 0 8 0 amappl8 128 290 0 236 3 1 2 2 0 8 0 amappl7 120 67 0 59 1 0 1 1 0 8 0 amappl6 112 145 0 135 1 0 1 1 0 8 0 amappl5 104 5068 0 5057 1 0 1 1 0 8 0 amappl4 96 413 0 385 2 1 1 2 0 8 0 amappl3 88 952 0 945 1 0 1 1 0 8 0 amappl2 80 97199 0 97144 2 0 2 2 0 8 0 amappl1 72 185323 0 184916 24 15 9 19 0 8 0 amappl 72 23889 0 23852 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 148 0 19 3 0 3 3 0 8 0 uaddrrnd 24 9877 0 9863 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 9877 0 9863 1 0 1 1 0 8 0 vmmpekpl 168 70602 0 70581 2 0 2 2 0 8 0 vmmpepl 168 1056787 0 1055409 343 264 79 79 0 357 10 vmsppl 264 9876 0 9863 3 2 1 2 0 8 0 pdppl 4096 19760 0 19726 7 2 5 6 0 8 0 pvpl 32 3726875 0 3715694 1082 898 184 235 0 265 87 pmappl 192 9876 0 9863 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 1246 0 663 19 2 17 17 0 8 0