panic: Bad list head 0xfffffe0007fd5570 first->prev != head
cpuid = 0
time = 14
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575125d0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057512730
vpanic() at vpanic+0x257/frame 0xfffffe00575128f0
panic() at panic+0xb5/frame 0xfffffe00575129b0
callout_cc_add() at callout_cc_add+0x32b/frame 0xfffffe0057512a10
callout_reset_sbt_on() at callout_reset_sbt_on+0x72d/frame 0xfffffe0057512b30
sleepq_set_timeout_sbt() at sleepq_set_timeout_sbt+0x20b/frame 0xfffffe0057512bf0
_cv_timedwait_sbt() at _cv_timedwait_sbt+0x2be/frame 0xfffffe0057512d30
sched_sync() at sched_sync+0xe64/frame 0xfffffe0057512ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0057512f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0057512f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 17 tid 100085 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x23e7cb7(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe00033eee30
rdx                          0
rbx         0xffffffff827575a0  .str.27
rsp         0xfffffe0057512710
rbp         0xfffffe0057512730
rsi                          0
rdi         0xffffffff815dca59  printf+0x149
r8                           0
r9                  0xffffffff
r10         0xaec44e5a511a33ab
r11                          0
r12         0xfffffe00548a0740
r13         0xfffffffffffffffe
r14         0xffffffff827575a0  .str.27
r15                          0
rip         0xffffffff815c73de  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x23e7cb7(%rip)
db> show proc
Process 17 (syncer) at 0xfffffe0008025ae0:
 state: NORMAL
 uid: 0  gids: 0
 parent: pid 0 at 0xffffffff839397c0
 ABI: null
 flag: 0x10000204  flag2: 0
 reaper: 0xffffffff839397c0 reapsubtree: 17
 sigparent: 20
 vmspace: 0xffffffff8393a760
   (map 0xffffffff8393a760)
   (map.pmap 0xffffffff8393a800)
   (pmap 0xffffffff8393a870)
 threads: 1
100085                   Run     syncer  0xffffffff83aadca0  [syncer]
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 1551  1550   767     0  S       uwait   0xfffffe0059f11c80  syz-executor
 1550   767   767     0  R       (threaded)                  syz-executor
100266                   RunQ                                syz-executor
101466                   RunQ                                syz-executor
 1549   766   766     0  T       (threaded)                  syz-executor
101456                   s                                   syz-executor
101462                   D       biowr   0xfffffe000866ff