panic: ifa_update_broadaddr does not support dynamic length
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*209624  49846      0           0  0x4000000    0  syz-executor.1
 440456  44287      0           0          0    1  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic() at panic+0x15c sys/kern/subr_prf.c:207
ifa_update_broadaddr(ffff800000ad0800,ffff800000ad2300,ffff80002396f070) at ifa_update_broadaddr+0x61 sys/net/if.c:2986
in_ioctl(80206913,ffff80002396f060,ffff800000ad0800,1) at in_ioctl+0x463 sys/netinet/in.c:311
ifioctl(fffffd8070667c20,80206913,ffff80002396f060,ffff800020ab0508) at ifioctl+0xb64 sys/net/if.c:2218
sys_ioctl(ffff800020ab0508,ffff80002396f178,ffff80002396f1c0) at sys_ioctl+0x5b9
syscall(ffff80002396f240) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline]
syscall(ffff80002396f240) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555
Xsyscall(6,0,ffffffffffffff36,0,3,19f65e2a0e0) at Xsyscall+0x128
end of kernel
end trace frame: 0x1a23b9c49b0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.