syzbot

panic: pool_do_get: shmpl free list modified: page 0xfffffd806c520000; item addr 0xfffffd806c520000; offset 0x40=0x40500e1
Starting stack trace...
panic(ffffffff833a610c) at panic+0x1d0 sys/kern/subr_prf.c:229
pool_do_get(ffffffff83a0a3f8,1,ffff80003c529128) at pool_do_get+0x5df
pool_get(ffffffff83a0a3f8,1) at pool_get+0x162 sys/kern/subr_pool.c:-1
shmget_allocate_segment(ffff800038fd7260,ffff80003c529380,a0,ffff80003c5292d0) at shmget_allocate_segment+0x1af sys/kern/sysv_shm.c:-1
sys_shmget(ffff800038fd7260,ffff80003c529380,ffff80003c5292d0) at sys_shmget+0x195 sys/kern/sysv_shm.c:482
syscall(ffff80003c529380) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c529380) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x76882cec2a0, count: 250
End of stack trace.
syncing disks...