panic: pool_do_get: mbufpl free list modified: page 0xfffffd8066360000; item addr 0xfffffd8066360900; offset 0x0=0x0 != 0xa7ff689e0ee9b56b Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 196337 36529 0 0x2 0x4000000 1 syz-fuzzer db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff82493053) at panic+0x15c sys/kern/subr_prf.c:207 pool_do_get(ffffffff828d0610,2,ffff800020d913c8) at pool_do_get+0x439 sys/kern/subr_pool.c:738 pool_get(ffffffff828d0610,2) at pool_get+0xeb sys/kern/subr_pool.c:581 m_clget(0,2,800) at m_clget+0x1c9 m_gethdr sys/kern/uipc_mbuf.c:283 [inline] m_clget(0,2,800) at m_clget+0x1c9 sys/kern/uipc_mbuf.c:400 vio_populate_rx_mbufs(ffff80000017b000) at vio_populate_rx_mbufs+0xf9 vio_add_rx_mbuf sys/dev/pv/if_vio.c:908 [inline] vio_populate_rx_mbufs(ffff80000017b000) at vio_populate_rx_mbufs+0xf9 sys/dev/pv/if_vio.c:951 vio_rx_intr(ffff80000017b050) at vio_rx_intr+0x69 intr_handler(ffff800020d915c0,ffff800000255b80) at intr_handler+0x8f sys/arch/amd64/amd64/intr.c:536 Xintr_ioapic_edge19_untramp() at Xintr_ioapic_edge19_untramp+0x19f acpicpu_idle() at acpicpu_idle+0x331 sys/dev/acpi/acpicpu.c:1187 sched_idle(ffffffff82793ff0) at sched_idle+0x3f7 sys/kern/kern_sched.c:178 end trace frame: 0x0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs.