syzbot

panic: pool_p_free: rttmr free list modified: page 0xfffffd8063983000; item addr 0xfffffd8063983ee8; offset 0x10=0x838f6dd0
Starting stack trace...
panic(ffffffff8332d991) at panic+0x1ba sys/kern/subr_prf.c:229
pool_p_free(ffffffff838f0978,fffffd8063983f90) at pool_p_free+0x2d1 sys/kern/subr_pool.c:986
pool_reclaim(ffffffff838f0978) at pool_reclaim+0x2c2 sys/kern/subr_pool.c:1152
pool_reclaim_all() at pool_reclaim_all+0x48 sys/kern/subr_pool.c:-1
kern_sysctl(ffff80002a8afc54,1,0,ffff80002a8afc88,200000000040,4,69eeb87e3d1f89b3) at kern_sysctl+0x1094 sys/kern/kern_sysctl.c:686
sys_sysctl(ffff80002a7f5a10,ffff80002a8afdb0,ffff80002a8afd00) at sys_sysctl+0x3e5 sys/kern/kern_sysctl.c:-1
syscall(ffff80002a8afdb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a8afdb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7b13a8b060, count: 249
End of stack trace.