ÉRåpanic: pool_do_get: shmpl free list modified: page 0xfffff0006c7c0000; item addr 0xfffff0006c7c04d0; offset 0x40=0x807
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*319994  87775      0        0x10  0x4000000    0  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8347dfc6) at panic+0x1cf sys/kern/subr_prf.c:198
pool_do_get(ffffffff83aba858,1,ffff8000304c99e8) at pool_do_get+0x5bc
pool_get(ffffffff83aba858,1) at pool_get+0x11a sys/kern/subr_pool.c:-1
shmget_allocate_segment(ffff80002f0b02b0,ffff8000304c9c30,0,ffff8000304c9b80) at shmget_allocate_segment+0x1af sys/kern/sysv_shm.c:-1
sys_shmget(ffff80002f0b02b0,ffff8000304c9c30,ffff8000304c9b80) at sys_shmget+0x195 sys/kern/sysv_shm.c:501
syscall(ffff8000304c9c30) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff8000304c9c30) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x83e5e62e180, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb>