panic: pr_find_pagehead: mbufpl: page header missing
Stopped at      db_enter+0xa:   popq    %rbp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 83223  27025      0           0  0x4000000    0  syz-executor0
db_enter() at db_enter+0xa
panic() at panic+0x147
pool_do_put(ffffff0006000100,ffffffff81edd2c0) at pool_do_put+0x339
pool_put(0,ffffff0006000100) at pool_put+0x37
m_free(ffffff0006000100) at m_free+0x12c
tun_dev_read(ffff800021192688,ffffff006e3e19d0,ffffff006e3e19d0) at tun_dev_read+0x237
spec_read(10) at spec_read+0x9d
VOP_READ(ffff800021192688,ffffff006e3e19d0,ffffff0068f50c40,0) at VOP_READ+0x5e
vn_read(ffffff0068f50c40,ffff8000ffffc710,3e8) at vn_read+0x130
dofilereadv(ffff8000ffffc710,ffff800021192730,3e8,ffff800021192740,51474f1bd88) at dofilereadv+0x14f
sys_read(ffff8000211927d0,ffff8000ffffc710,ffff80002105ffd0) at sys_read+0x6e
syscall(0) at syscall+0x3e4
Xsyscall(6,3,3,3,3e2,514b4c97600) at Xsyscall+0x128
end of kernel
end trace frame: 0x51474f1bda0, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.