Extracting prog: 41m30.641033135s Minimizing prog: 51m5.768904704s Simplifying prog options: 0s Extracting C: 5m33.337555469s Simplifying C: 27m48.634211485s 24 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 24 programs single: executing 4 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-dup2-socket$inet6_sctp-connect$inet6-setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x4, @rand_addr="fee82da2bea332ebd7e364e1998337b7"}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000440)={@in6={{0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xfffffffa}}, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x3}, 0x98) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-open$dir-pwritev-copy_file_range-rfork detailed listing: executing program 0: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) rfork(0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS-setsockopt$inet_sctp_SCTP_ASSOCINFO-socket$inet_sctp-connect$inet-setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={@in={{0x10, 0x2, 0x1, @rand_addr=0xfffffffe}}, 0x0, 0xfffffffd, 0xc6b, 0x0, 0xfffffffe}, 0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000580)={0x10, 0x2, 0x2, @rand_addr=0x7fff}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x1, 0x1, @empty, 0x8}}, 0x0, 0x2, 0x5, 0x88, 0x3, 0x6, 0x9}, 0x98) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-poll-ftruncate-copy_file_range detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 15s testing program (duration=21s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 6, 5, 5, 6, 6, 6, 5, 5, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5] detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x3, 0x84) connect$inet(r0, &(0x7f0000000980)={0x10, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}, 0x10) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000000000)={0x0, 0xa3}, 0xc) executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') executing program 0: r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, 0x1c) r1 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x0, 0xfffffffe, @mcast2, 0x2}, 0x1c) executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet6_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000000c0)={r2, 0x0, 0xb102db6759d31df8}, &(0x7f0000000100)=0x18) executing program 0: symlink(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x4) r1 = dup2(r0, r0) freebsd11_getdents(r0, 0x0, 0x0) kmq_timedsend(r1, 0x0, 0x0, 0x1739, 0x0) executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="00b9000000000000001b00"}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) rfork(0x1000) executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000012c0)="286bb4d455be8429174ddae780e6283a2ceb233610ad7dc53c8735d2cae213164ee66a722e5c0879f458a81e317e75ed203946e3f9f7c648d97329a98bdfaefb12ba9a81b345491f4c2c64c7b32d4eaf665126a9eb19b5c7d7c4800877762775f2530fe59a861470057229152139a0b101bedb3fb994d0a9aa4afee367d0d2", 0x7f}], 0x1}, 0x0) vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0x8, @sigval_int, @spare}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DIOCADDRULE(r0, 0xcbe04404, &(0x7f0000000a40)) executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setuid(0xee01) chdir(&(0x7f0000000240)='./file0\x00') r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0xca0706ee3fd5d6f7) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) executing program 1: socket$inet6_sctp(0x1c, 0x0, 0x84) socket(0x2, 0x1, 0x0) setsockopt$inet6_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x4b) getsockopt$inet6_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) kmq_setattr(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0x101}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0) executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg$inet6_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="66000000840000000a0000001001100002004a5d077a08006f0000010000000010000000930e000000e40000c700000000000fea", @ANYRES32=0x0, @ANYBLOB="1c000000840000000a0000181df90b00000000000000000000000001100000008400000000004000000200002c00000084"], 0xec}, 0x0) sendmsg$inet6_sctp(r0, &(0x7f0000000180)={0x0, 0x6, 0x0}, 0x189) setsockopt$inet6_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x700}, 0x10) sendmsg$inet6_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)={@in6={{0x1c, 0x1c, 0x0, 0x5, @empty, 0x9}}, 0x0, 0x0, 0x7, 0x31c, 0x9, 0x401, 0x1}, 0x98) getsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x23, &(0x7f0000000200)={@in={{0x10, 0x2, 0x1, @broadcast}}, 0x0, 0x1, 0xff30, 0xc5}, &(0x7f0000000040)=0x90) setsockopt$inet6_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000100)={r1, 0x5f7}, 0x8) executing program 2: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) renameat(r1, &(0x7f0000000200)='./file1\x00', r1, &(0x7f0000000140)='./file0/file0\x00') executing program 3: pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000800)=""/4059, 0xfe3}], 0x10000000000002e5) ksem_init(0x0, 0x0) setgroups(0x0, 0x0) dup2(r1, r0) write(r1, &(0x7f0000000040)="b5", 0xfdaa) executing program 3: setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f00000000c0)=r0) rfork(0x3040) executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={@in={{0x10, 0x2, 0x1, @rand_addr=0xfffffffe}}, 0x0, 0xfffffffd, 0xc6b, 0x0, 0xfffffffe}, 0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000580)={0x10, 0x2, 0x2, @rand_addr=0x7fff}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x1, 0x1, @empty, 0x8}}, 0x0, 0x2, 0x5, 0x88, 0x3, 0x6, 0x9}, 0x98) executing program 2: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)={0x0, 0xdf}, 0xb) r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x15, 0xf, 0x18, &(0x7f0000000080)="000000000000d40b0000000000000017b670f5e6613250d5", 0x0, 0x0, 0x0, 0xfdfeffff}) ioctl$CIOCCRYPTAEAD(r1, 0xc040636d, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={r2, 0x4}, 0x8) executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DIOCBEGINADDRS(r1, 0xc4704433, &(0x7f0000000040)) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000080)={{"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", "04004e01004dcf86cae100002fb3aedc0879667ecd16d8360dff5584a00100"}, 0x0}) ioctl$DIOCADDADDR(0xffffffffffffffff, 0xc4704434, &(0x7f0000000480)="02") ioctl$DIOCADDADDR(r0, 0xc4704434, &(0x7f0000000040)) executing program 1: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) rfork(0x0) executing program 2: procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) r0 = fork() fork() sigqueue(r0, 0x2, @sival_ptr=0xfff) wait4(0x0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x4, @rand_addr="fee82da2bea332ebd7e364e1998337b7"}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000440)={@in6={{0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xfffffffa}}, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x3}, 0x98) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-dup2-socket$inet6_sctp-connect$inet6-setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x4, @rand_addr="fee82da2bea332ebd7e364e1998337b7"}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000440)={@in6={{0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xfffffffa}}, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x3}, 0x98) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-open$dir-pwritev-copy_file_range-rfork detailed listing: executing program 0: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) rfork(0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS-setsockopt$inet_sctp_SCTP_ASSOCINFO-socket$inet_sctp-connect$inet-setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={@in={{0x10, 0x2, 0x1, @rand_addr=0xfffffffe}}, 0x0, 0xfffffffd, 0xc6b, 0x0, 0xfffffffe}, 0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000580)={0x10, 0x2, 0x2, @rand_addr=0x7fff}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x1, 0x1, @empty, 0x8}}, 0x0, 0x2, 0x5, 0x88, 0x3, 0x6, 0x9}, 0x98) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-poll-ftruncate-copy_file_range detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 1m40s testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 4, 6, 5, 5, 6, 6, 6, 5, 5, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5] detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x3, 0x84) connect$inet(r0, &(0x7f0000000980)={0x10, 0x2, 0x3, @remote={0xac, 0x14, 0x0}}, 0x10) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000000000)={0x0, 0xa3}, 0xc) executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') executing program 0: r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, 0x1c) r1 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x0, 0xfffffffe, @mcast2, 0x2}, 0x1c) executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet6_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000000c0)={r2, 0x0, 0xb102db6759d31df8}, &(0x7f0000000100)=0x18) executing program 0: symlink(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x4) r1 = dup2(r0, r0) freebsd11_getdents(r0, 0x0, 0x0) kmq_timedsend(r1, 0x0, 0x0, 0x1739, 0x0) executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="00b9000000000000001b00"}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) rfork(0x1000) executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000012c0)="286bb4d455be8429174ddae780e6283a2ceb233610ad7dc53c8735d2cae213164ee66a722e5c0879f458a81e317e75ed203946e3f9f7c648d97329a98bdfaefb12ba9a81b345491f4c2c64c7b32d4eaf665126a9eb19b5c7d7c4800877762775f2530fe59a861470057229152139a0b101bedb3fb994d0a9aa4afee367d0d2", 0x7f}], 0x1}, 0x0) vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0x8, @sigval_int, @spare}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DIOCADDRULE(r0, 0xcbe04404, &(0x7f0000000a40)) executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setuid(0xee01) chdir(&(0x7f0000000240)='./file0\x00') r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0xca0706ee3fd5d6f7) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) executing program 1: socket$inet6_sctp(0x1c, 0x0, 0x84) socket(0x2, 0x1, 0x0) setsockopt$inet6_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x4b) getsockopt$inet6_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) kmq_setattr(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2, 0x3, @rand_addr=0x101}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0) executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg$inet6_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="66000000840000000a0000001001100002004a5d077a08006f0000010000000010000000930e000000e40000c700000000000fea", @ANYRES32=0x0, @ANYBLOB="1c000000840000000a0000181df90b00000000000000000000000001100000008400000000004000000200002c00000084"], 0xec}, 0x0) sendmsg$inet6_sctp(r0, &(0x7f0000000180)={0x0, 0x6, 0x0}, 0x189) setsockopt$inet6_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x700}, 0x10) sendmsg$inet6_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)={@in6={{0x1c, 0x1c, 0x0, 0x5, @empty, 0x9}}, 0x0, 0x0, 0x7, 0x31c, 0x9, 0x401, 0x1}, 0x98) getsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x23, &(0x7f0000000200)={@in={{0x10, 0x2, 0x1, @broadcast}}, 0x0, 0x1, 0xff30, 0xc5}, &(0x7f0000000040)=0x90) setsockopt$inet6_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000100)={r1, 0x5f7}, 0x8) executing program 2: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) renameat(r1, &(0x7f0000000200)='./file1\x00', r1, &(0x7f0000000140)='./file0/file0\x00') executing program 3: pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000800)=""/4059, 0xfe3}], 0x10000000000002e5) ksem_init(0x0, 0x0) setgroups(0x0, 0x0) dup2(r1, r0) write(r1, &(0x7f0000000040)="b5", 0xfdaa) executing program 3: setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f00000000c0)=r0) rfork(0x3040) executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={@in={{0x10, 0x2, 0x1, @rand_addr=0xfffffffe}}, 0x0, 0xfffffffd, 0xc6b, 0x0, 0xfffffffe}, 0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000580)={0x10, 0x2, 0x2, @rand_addr=0x7fff}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x1, 0x1, @empty, 0x8}}, 0x0, 0x2, 0x5, 0x88, 0x3, 0x6, 0x9}, 0x98) executing program 2: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)={0x0, 0xdf}, 0xb) r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x15, 0xf, 0x18, &(0x7f0000000080)="000000000000d40b0000000000000017b670f5e6613250d5", 0x0, 0x0, 0x0, 0xfdfeffff}) ioctl$CIOCCRYPTAEAD(r1, 0xc040636d, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={r2, 0x4}, 0x8) executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DIOCBEGINADDRS(r1, 0xc4704433, &(0x7f0000000040)) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000080)={{"d1486f4b03002353d526c30900000000000000f82a43c6fa2510c1cd3c8af61795e72943509dbcbf190100009b6a492e0000c29b40ea0e89cc0b7d7794a318266cd800a2e416f72329828935182d66fd33f83c4787d53fbdd8cd74040100846a6712375dadea5abfcec02e1ca138d75f2a0dd7dd7b66f50f84655ef9cb325af86b4f132642d2f5ad598c2fdfef7367febfff9ffab40d5086d7ca6984cb01afb884ee9a7b660ffc24feff13c19251f86c35e85ad97d8dc03127278deb9a2a3cf9afd9b4ac6b3dbed31f92271189879d2bbd9a730eb2112e7a69c5f3343e81f2fa95949a60b181d4083dd908ced0be5a56ffe4ecfdff6d2825545b43ae2c862b960b6a98aad931e88c38501fd09c09de8736cf1e671a94a6377970312c1c3d5cf1bb8bfa54f2255c26481c0fbb2f7ad9ce57654a7c937fcbfc7b951b41cfc15b6b53f79f2f421ea7770523aec6ccbce348cd5707a3bb90eba96d5c556e93779895db5e8e3cbe7a765a832b18598ceba382d303000000e6d4b12dd9226491ad5ab0b02aea3b352c95218f779351e15b6afb6927f752e8a87d656be5e015b11f733427e05f681fb97ccb172d598e8c4ed0863aedc81e4beefe45d6356205cf6467ef9c012fea103afb2218d6b92fc017ef8ce7f7cf5b7a2d4e487f0165d906db60ecce68dbe2c232a16ac793767241b4f80fc71a4754610a1c59862e63322f50509847ea448f6b5addc0f9e9ca7ab354284764b9b362cedb378f5eeb914ac4473fcc8c67101528ffffa2d8ccf7857137cec40567093de8d6bd1fb8f1be56bfe220c26dd992436d2ecd1cb384863c6d1cb896ef0f0d81048c70044f588bef881708c9f7eed626433ec6a7ec4566eabfb4c92180a9c95a3f040089e9a2388669a713973799e9a3fcfdb9f392c7a85382b720830f3d93ffe3b549422b8efd056fd8536e3de12a10644408b97334f9a4b9fb6343754e59fc7734fb7dbef3eb7c316a520ff9fac2128bc68047efb9f553c23a28a61c3ce3fa6875d52bda60008ffa2ddb2e678ac5a111043273db84ce9e52e6567f31aa4520589fec7a278b08d89a1587ffff5761d93ee516012ade683be911ccba9cc49a19bd289a228c7744810c56b0af2a3a20aabb93117338ee34d3050000000522a7f1f73240b209e370aea3feeb83cd192d73e78ce9c30c4d6a73bf27fd1e4a01010ad1cbfcc89862260c4028f54eb82088972f1d4b44792071a90e3cbc986900ba9c3b601e57fe9e5780be7d9ae936d52de15807ed8b412d52cae1c00d436a3330ab3c81028a4457f3d7f4a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000010000000000000000000000000000000000000000000000ffea00", "04004e01004dcf86cae100002fb3aedc0879667ecd16d8360dff5584a00100"}, 0x0}) ioctl$DIOCADDADDR(0xffffffffffffffff, 0xc4704434, &(0x7f0000000480)="02") ioctl$DIOCADDADDR(r0, 0xc4704434, &(0x7f0000000040)) executing program 1: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) rfork(0x0) executing program 2: procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) r0 = fork() fork() sigqueue(r0, 0x2, @sival_ptr=0xfff) wait4(0x0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x4, @rand_addr="fee82da2bea332ebd7e364e1998337b7"}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000440)={@in6={{0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xfffffffa}}, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x3}, 0x98) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-dup2-socket$inet6_sctp-connect$inet6-setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x4, @rand_addr="fee82da2bea332ebd7e364e1998337b7"}, 0x1c) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000440)={@in6={{0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xfffffffa}}, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x3}, 0x98) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-open$dir-pwritev-copy_file_range-rfork detailed listing: executing program 0: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) rfork(0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS-setsockopt$inet_sctp_SCTP_ASSOCINFO-socket$inet_sctp-connect$inet-setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS detailed listing: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={@in={{0x10, 0x2, 0x1, @rand_addr=0xfffffffe}}, 0x0, 0xfffffffd, 0xc6b, 0x0, 0xfffffffe}, 0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000580)={0x10, 0x2, 0x2, @rand_addr=0x7fff}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x1, 0x1, @empty, 0x8}}, 0x0, 0x2, 0x5, 0x88, 0x3, 0x6, 0x9}, 0x98) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-poll-ftruncate-copy_file_range detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program crashed: no output from test machine single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-poll-ftruncate detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-poll-copy_file_range detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x20c0}], 0x1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): copy_file_range detailed listing: executing program 0: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range detailed listing: executing program 0: r0 = open$dir(0x0, 0x40000400000002c2, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range detailed listing: executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x3ff, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range program crashed: no output from test machine simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-copy_file_range program crashed: no output from test machine reproducing took 2h5m58.381772639s repro crashed as (corrupted=false): final repro crashed as (corrupted=false):