panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
  84066  51457      0   0x8000000          0    1  syz-executor.6
*308835  51457      0   0x8000000  0x4000000    0  syz-executor.6
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828e9fc3) at panic+0x17b sys/kern/subr_prf.c:198
witness_checkorder(ffffffff82dd62f0,9,0) at witness_checkorder+0xd03 witness_debugger sys/kern/subr_witness.c:2524 [inline]
witness_checkorder(ffffffff82dd62f0,9,0) at witness_checkorder+0xd03 sys/kern/subr_witness.c:786
__mp_lock(ffffffff82dd60e8) at __mp_lock+0xa2 read_rflags machine/cpufunc.h:193 [inline]
__mp_lock(ffffffff82dd60e8) at __mp_lock+0xa2 intr_disable machine/cpufunc.h:214 [inline]
__mp_lock(ffffffff82dd60e8) at __mp_lock+0xa2 sys/kern/kern_lock.c:142
softintr_dispatch(0) at softintr_dispatch+0x52 sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
pool_do_get(ffffffff82d92b70,9,ffff8000371ef878) at pool_do_get+0xba sys/kern/subr_pool.c:723
pool_get(ffffffff82d92b70,9) at pool_get+0xf0 sys/kern/subr_pool.c:582
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x41 sys/uvm/uvm_map.c:3279
vm_impl_init(ffff800030b502b8,ffff80002bd2a2b8) at vm_impl_init+0x92 sys/arch/amd64/amd64/vmm_machdep.c:1244
vm_create(ffff800000dfa400,ffff80002bd2a2b8) at vm_create+0x13e sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff800000dfa400,1,ffff80002bd2a2b8) at vmmioctl+0x2de
VOP_IOCTL(fffffd806e919cb0,c2585601,ffff800000dfa400,1,fffffd807f7d3478,ffff80002bd2a2b8) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:264
vn_ioctl(fffffd80690e97c0,c2585601,ffff800000dfa400,ffff80002bd2a2b8) at vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525
end trace frame: 0xffff8000371efd30, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.