login: panic: pool_do_get: mbufpl free list modified: page 0xfffffd806f2b1000; item addr 0xfffffd806f2b1400; offset 0x0=0x0 != 0xf6854d0a023bb1ed Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 473581 72393 0 0x2 0 1K syz-executor.0 * 94234 53395 0 0x12 0 0 sshd db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff824912bf) at panic+0x15c sys/kern/subr_prf.c:207 pool_do_get(ffffffff828b7610,2,ffff800020e3f268) at pool_do_get+0x439 sys/kern/subr_pool.c:738 pool_get(ffffffff828b7610,2) at pool_get+0xeb sys/kern/subr_pool.c:581 m_copym(fffffd806f617b00,0,54,2) at m_copym+0x174 m_get sys/kern/uipc_mbuf.c:250 [inline] m_copym(fffffd806f617b00,0,54,2) at m_copym+0x174 sys/kern/uipc_mbuf.c:667 tcp_output(ffff800000ada760) at tcp_output+0x15ba sys/netinet/tcp_output.c:673 tcp_usrreq(fffffd806eae9af8,9,fffffd806f617b00,0,0,ffff800020e4f120) at tcp_usrreq+0xa55 sosend(fffffd806eae9af8,0,ffff800020e3f748,0,0,80) at sosend+0x671 sys/kern/uipc_socket.c:555 dofilewritev(ffff800020e4f120,4,ffff800020e3f748,0,ffff800020e3f830) at dofilewritev+0x1b6 sys/kern/sys_generic.c:365 sys_write(ffff800020e4f120,ffff800020e3f7e0,ffff800020e3f830) at sys_write+0x83 sys/kern/sys_generic.c:285 syscall(ffff800020e3f8b0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800020e3f8b0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd0230, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}>