panic: timeout_add: to_ticks (-1223206686) < 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *258227 33370 0 0 0x4000000 0 syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:208 timeout_add(ffff8000ffff35d0,b71758e2) at timeout_add+0x179 sys/kern/kern_timeout.c:190 msleep(ffff80000279fc00,ffff80000279fc08,11a,ffffffff81f573dd,b71758e2) at msleep+0x18e sleep_setup_timeout sys/kern/kern_synch.c:330 [inline] msleep(ffff80000279fc00,ffff80000279fc08,11a,ffffffff81f573dd,b71758e2) at msleep+0x18e sys/kern/kern_synch.c:210 bpfread(21700,ffff8000149d8ab0,0) at bpfread+0x1ef sys/net/bpf.c:486 spec_read(ffff8000149d88f0) at spec_read+0xf5 sys/kern/spec_vnops.c:223 VOP_READ(fffffd8028c31b78,ffff8000149d8ab0,0,fffffd803f7c6ae0) at VOP_READ+0x6f sys/kern/vfs_vops.c:247 vn_read(fffffd80361b8f08,ffff8000149d8ab0,0) at vn_read+0x1c3 sys/kern/vfs_vnops.c:365 dofilereadv(ffff8000ffff3530,3,ffff8000149d8ab0,0,ffff8000149d8b90) at dofilereadv+0x19f sys/kern/sys_generic.c:236 sys_read(ffff8000ffff3530,ffff8000149d8ba8,ffff8000149d8b90) at sys_read+0x92 sys/kern/sys_generic.c:156 syscall(ffff8000149d8c40) at syscall+0x541 Xsyscall(6,0,ffffffffffffffb9,0,3,b14eaa81010) at Xsyscall+0x128 end of kernel end trace frame: 0xb17cd9eac70, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic timeout_add: to_ticks (-1223206686) < 0 ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:208 timeout_add(ffff8000ffff35d0,b71758e2) at timeout_add+0x179 sys/kern/kern_timeout.c:190 msleep(ffff80000279fc00,ffff80000279fc08,11a,ffffffff81f573dd,b71758e2) at msleep+0x18e sleep_setup_timeout sys/kern/kern_synch.c:330 [inline] msleep(ffff80000279fc00,ffff80000279fc08,11a,ffffffff81f573dd,b71758e2) at msleep+0x18e sys/kern/kern_synch.c:210 bpfread(21700,ffff8000149d8ab0,0) at bpfread+0x1ef sys/net/bpf.c:486 spec_read(ffff8000149d88f0) at spec_read+0xf5 sys/kern/spec_vnops.c:223 VOP_READ(fffffd8028c31b78,ffff8000149d8ab0,0,fffffd803f7c6ae0) at VOP_READ+0x6f sys/kern/vfs_vops.c:247 vn_read(fffffd80361b8f08,ffff8000149d8ab0,0) at vn_read+0x1c3 sys/kern/vfs_vnops.c:365 dofilereadv(ffff8000ffff3530,3,ffff8000149d8ab0,0,ffff8000149d8b90) at dofilereadv+0x19f sys/kern/sys_generic.c:236 sys_read(ffff8000ffff3530,ffff8000149d8ba8,ffff8000149d8b90) at sys_read+0x92 sys/kern/sys_generic.c:156 syscall(ffff8000149d8c40) at syscall+0x541 Xsyscall(6,0,ffffffffffffffb9,0,3,b14eaa81010) at Xsyscall+0x128 end of kernel end trace frame: 0xb17cd9eac70, count: -12 ddb> show registers rdi 0xffffffff814177e7 db_enter+0x17 rsi 0x1677 __ALIGN_SIZE+0x677 rbp 0xffff8000149d8610 rbx 0xffff8000149d86c0 rdx 0x1678 __ALIGN_SIZE+0x678 rcx 0xffff800001b7b000 rax 0xffff800001b7b000 r8 0xffff8000149d85d0 r9 0x1 r10 0xffff80000173b780 r11 0x6fff6ef4dccda195 r12 0x3000000008 r13 0xffff8000149d8620 r14 0x100 r15 0x1 rip 0xffffffff814177e8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000149d8600 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=258227 stat=onproc flags process=0 proc=4000000 pri=26, usrpri=70, nice=20 forw=0x0, list=0xffff8000ffff39e0,0xffffffff8229aae8 process=0xffff8000149633c8 user=0xffff8000149d3000, vmspace=0xfffffd803f014a50 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 33370 310886 34609 0 2 0 syz-executor.0 *33370 258227 34609 0 7 0x4000000 bpf syz-executor.0 77013 377875 53135 0 3 0x2 biowait syz-executor.1 34609 496182 53135 0 3 0x82 nanosleep syz-executor.0 5689 214184 0 0 3 0x14200 bored sosplice 53135 389347 36333 0 3 0x82 kqread syz-fuzzer 53135 336077 36333 0 3 0x4000082 nanosleep syz-fuzzer 53135 484979 36333 0 3 0x4000082 thrsleep syz-fuzzer 53135 146780 36333 0 3 0x4000082 thrsleep syz-fuzzer 53135 337930 36333 0 3 0x4000082 thrsleep syz-fuzzer 53135 29116 36333 0 3 0x4000082 thrsleep syz-fuzzer 53135 131612 36333 0 3 0x4000082 thrsleep syz-fuzzer 53135 123569 36333 0 3 0x4000082 thrsleep syz-fuzzer 36333 448491 78879 0 3 0x10008a pause ksh 78879 507430 78801 0 3 0x92 select sshd 23625 451516 1 0 3 0x100083 ttyin getty 78801 175840 1 0 3 0x80 select sshd 38950 354300 42637 73 3 0x100090 kqread syslogd 42637 36848 1 0 3 0x100082 netio syslogd 54801 98310 1 77 3 0x100090 poll dhclient 23160 286842 1 0 3 0x80 poll dhclient 79190 103103 0 0 2 0x14200 zerothread 49801 361977 0 0 3 0x14200 aiodoned aiodoned 6676 485163 0 0 3 0x14200 syncer update 1919 347827 0 0 3 0x14200 cleaner cleaner 27594 351304 0 0 3 0x14200 reaper reaper 68423 62423 0 0 3 0x14200 pgdaemon pagedaemon 69266 65406 0 0 3 0x14200 bored crynlk 8781 378707 0 0 3 0x14200 bored crypto 30609 353182 0 0 3 0x40014200 acpi0 acpi0 2189 505545 0 0 3 0x14200 bored softnet 29013 486299 0 0 3 0x14200 bored systqmp 73260 336406 0 0 3 0x14200 bored systq 34605 237275 0 0 3 0x40014200 bored softclock 83429 400037 0 0 3 0x40014200 idle0 48953 258275 0 0 3 0x14200 bored smr 1 5341 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9580 6437K 15190K 78643K 14017 0 0 pcb 23 9K 11K 78643K 3280 0 0 rtable 100 3K 3K 78643K 2712 0 0 ifaddr 81 19K 20K 78643K 1012 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 141 0 0 iov 0 0K 28K 78643K 981 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1197 75K 76K 78643K 5607 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 90 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 0K 1K 78643K 853 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 5 13K 21K 78643K 7508 0 0 sigio 0 0K 0K 78643K 86 0 0 proc 42 30K 54K 78643K 1842 0 0 subproc 64 65538K 67586K 78643K 1560 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 725 0 0 in_multi 33 2K 2K 78643K 739 0 0 ether_multi 1 0K 0K 78643K 51 0 0 mrt 0 0K 0K 78643K 20 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 114 503K 503K 78643K 114 0 0 exec 0 0K 1K 78643K 922 0 0 pfkey data 0 0K 0K 78643K 4 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 103 21K 30K 78643K 18504 0 0 UVM aobj 130 9K 9K 78643K 140 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 327 0 0 NDP 19 0K 1K 78643K 333 0 0 temp 219 2360K 3000K 78643K 25062 0 0 kqueue 0 0K 0K 78643K 60 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 47 0 43 1 0 1 1 0 8 0 inpcbpl 280 2861 0 2854 1 0 1 1 0 8 0 plimitpl 152 1825 0 1818 1 0 1 1 0 8 0 rtentry 112 428 0 388 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpcb 544 1029 0 1025 1 0 1 1 0 8 0 nd6 48 90 0 86 1 0 1 1 0 8 0 ppxss 1128 143 0 143 38 37 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2021 0 1830 12 0 12 12 0 8 0 art_table 32 2022 0 1830 2 0 2 2 0 8 0 art_node 16 427 0 393 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 14 4 4 0 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 849 0 839 1 0 1 1 0 8 0 shmpl 112 138 0 10 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 13968 0 12313 54 0 54 54 0 8 0 ffsino 240 13968 0 12313 100 2 98 98 0 8 0 nchpl 144 24170 0 22408 67 1 66 66 0 8 0 uvmvnodes 72 7174 0 0 131 0 131 131 0 8 0 vnodes 200 7174 0 0 378 0 378 378 0 8 0 namei 1024 97931 0 97931 4 3 1 1 0 8 1 scsiplug 64 24 0 24 13 12 1 1 0 8 1 scxspl 192 90766 0 90765 48 47 1 6 0 8 0 sigapl 432 7549 0 7536 2 0 2 2 0 8 0 futexpl 56 118749 0 118749 4 3 1 1 0 8 1 knotepl 112 2169 0 2150 1 0 1 1 0 8 0 kqueuepl 104 1734 0 1732 1 0 1 1 0 8 0 pipepl 112 3792 0 3773 11 10 1 2 0 8 0 fdescpl 424 7550 0 7536 2 0 2 2 0 8 0 filepl 120 60482 0 60387 9 5 4 5 0 8 1 lockfpl 104 1787 0 1787 11 10 1 1 0 8 1 lockfspl 32 1219 0 1219 11 10 1 1 0 8 1 sessionpl 112 60 0 50 1 0 1 1 0 8 0 pgrppl 48 108 0 98 1 0 1 1 0 8 0 ucredpl 96 26142 0 26135 1 0 1 1 0 8 0 zombiepl 144 7536 0 7536 1 0 1 1 0 8 1 processpl 840 7565 0 7536 4 0 4 4 0 8 0 procpl 600 16780 0 16743 4 0 4 4 0 8 0 sosppl 128 73 0 73 22 22 0 1 0 8 0 sockpl 384 5680 0 5663 16 13 3 4 0 8 1 mcl64k 65536 2378 0 2378 262 262 0 65 0 8 0 mcl16k 16384 15 0 15 14 14 0 1 0 8 0 mcl12k 12288 127 0 127 28 28 0 1 0 8 0 mcl9k 9216 97 0 97 34 33 1 1 0 8 1 mcl8k 8192 116 0 116 35 34 1 1 0 8 1 mcl4k 4096 1895 0 1895 11 10 1 1 0 8 1 mcl2k2 2112 54 0 54 25 25 0 1 0 8 0 mcl2k 2048 59611 0 59575 21 16 5 9 0 8 0 mtagpl 80 4 0 4 2 2 0 1 0 8 0 mbufpl 256 155235 0 155170 212 206 6 44 0 8 1 bufpl 256 26617 0 19443 450 1 449 449 0 8 0 anonpl 16 778777 0 770706 287 243 44 56 0 62 0 amapchunkpl 152 32618 0 32524 77 72 5 15 0 158 0 amappl16 192 42513 0 42002 356 329 27 38 0 8 0 amappl15 184 1451 0 1445 1 0 1 1 0 8 0 amappl14 176 1574 0 1570 1 0 1 1 0 8 0 amappl13 168 412 0 409 1 0 1 1 0 8 0 amappl12 160 826 0 824 1 0 1 1 0 8 0 amappl11 152 1258 0 1247 1 0 1 1 0 8 0 amappl10 144 2985 0 2983 1 0 1 1 0 8 0 amappl9 136 1145 0 1142 1 0 1 1 0 8 0 amappl8 128 726 0 696 2 0 2 2 0 8 0 amappl7 120 2765 0 2758 1 0 1 1 0 8 0 amappl6 112 595 0 584 1 0 1 1 0 8 0 amappl5 104 903 0 892 1 0 1 1 0 8 0 amappl4 96 7268 0 7241 2 1 1 2 0 8 0 amappl3 88 2019 0 2014 1 0 1 1 0 8 0 amappl2 80 66807 0 66755 2 0 2 2 0 8 0 amappl1 72 139841 0 139436 24 15 9 19 0 8 0 amappl 72 17356 0 17321 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 139 0 10 3 0 3 3 0 8 0 uaddrrnd 24 7550 0 7536 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7550 0 7536 1 0 1 1 0 8 0 vmmpekpl 168 47416 0 47397 2 0 2 2 0 8 0 vmmpepl 168 784556 0 783099 359 272 87 93 0 357 15 vmsppl 264 7549 0 7536 4 2 2 2 0 8 1 pdppl 4096 15106 0 15072 5 0 5 5 0 8 0 pvpl 32 2489338 0 2478058 685 560 125 239 0 265 15 pmappl 200 7549 0 7536 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 1133 0 550 22 3 19 19 0 8 0