panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe0007fc5140 first->prev != head
cpuid = 0
time = 1747198686
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00574015b0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057401710
vpanic() at vpanic+0x257/frame 0xfffffe00574018d0
panic() at panic+0xb5/frame 0xfffffe0057401990
callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe00574019f0
callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe0057401b10
sleepq_set_timeout_sbt() at sleepq_set_timeout_sbt+0x20b/frame 0xfffffe0057401bd0
_sleep() at _sleep+0x468/frame 0xfffffe0057401d30
random_kthread() at random_kthread+0x6d7/frame 0xfffffe0057401ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0057401f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0057401f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 7 tid 100073 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25bda67(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe00033eee30
rdx                          0
rbx         0xffffffff827b0020  .str.27
rsp         0xfffffe00574016f0
rbp         0xfffffe0057401710
rsi                          0
rdi         0xffffffff816145b9  printf+0x149
r8                           0
r9                  0xffffffff
r10          0xd7cbd255c118639
r11                       0x17
r12         0xfffffe00081fb000
r13         0xfffffffffffffffe
r14         0xffffffff827b0020  .str.27
r15                          0
rip         0xffffffff815fe72e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x25bda67(%rip)
db>