Extracting prog: 14m53.478673274s Minimizing prog: 1h4m38.356368906s Simplifying prog options: 3m22.207414397s Extracting C: 1m38.858737475s Simplifying C: 0s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-ftruncate-open$dir-setsockopt$sock_splice-mmap-mmap-mlock-msync-socket$inet_udplite-socketpair$unix-dup2-socket$inet6_icmp_raw-connect$inet6-open$dir-sendfile detailed listing: executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ktimer_create-open-ftruncate-open$dir-preadv-shm_unlink-ktimer_settime-ktimer_gettime-socket$inet6_sctp-syz_emit_ethernet-socket-socket-open$dir-open$dir-symlinkat-mkdirat-rename-open$dir-symlinkat-open$dir-symlinkat-rename-unlink-rename-open$dir-setresuid-chroot-rename-rename-open$dir detailed listing: executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ksem_init-ksem_wait-ksem_wait-ksem_post detailed listing: executing program 0: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): kevent-socket$inet-openat-aio_write-open-socket$inet_udplite-mlockall-mmap-rfork-sync-setsockopt$inet_tcp_TCP_FUNCTION_BLK-getsockopt$inet6_sctp_SCTP_MAXSEG-openat$ptmx-socket-ktimer_delete-ioctl$OPIO_KEYMAP-kqueue-kevent-mlockall-setsockopt$sock_int-openat$ptmx-read-ioctl$DIOCRADDADDRS-bind$inet-connect$inet-accept$inet6-connect$inet6-fork-socket$inet6_udp-setsockopt$inet6_group_source_req detailed listing: executing program 0: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 22, 2, 22, 30, 29, 7, 29, 18, 2, 17, 30, 1, 30, 29, 40, 30, 30, 13, 2, 12, 4, 30, 15] detailed listing: executing program 1: symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x4, 0x0, 0x101, 0x7]}], 0x1, 0x0, 0x0, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc030636a, &(0x7f0000000000)={0x29, 0x0, 0x10, &(0x7f0000000040)="72e8789fa2e77d9bcf47eaa3c96be443", 0x0, 0x0, 0x0, 0x7d32559c, [0x8, 0x0, 0x0, 0x60]}) ioctl$CIOCCRYPT(r1, 0xc01c6367, &(0x7f0000000700)={0x0, 0x1, 0x0, 0x3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x188, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x1f, &(0x7f00000001c0)=0x6, 0x4) sendto$inet(r3, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendto(r3, 0x0, 0x0, 0x20000, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2, 0xc25a, @rand_addr="14c9aff4fabe0fef28529d00b7c9ff29", 0x8}, 0x1c) sendmsg$unix(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYBLOB="28bec22fdb2842907f1235c0c53753a1a410f89f17b95de5fdff72029dc53aaecf74c70ad6e7d1c81d02ec9169071ee549b38dea6b1c8a83c6613cdc6aaed03013cd7974e63164e60b254df1244837d70e7cd55cea45715da9ceefdb0730535da34e2b1a7242b56e41081b84a128f8bdbafed2d09629c8ab1512806385e56ead2b3c4c107f468c94b5c720066b83c586a48680cf", @ANYRES32, @ANYRES16=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="44d390b2e8a5465ad4490cb290552564aee253241a928282eefb43633b", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x100, 0x20081}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r4) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) extattr_get_fd(r5, 0x2, &(0x7f00000002c0)='\xb4\xfb\xb4\x9a\x10\r\xb6F<', 0x0, 0x0) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r6, 0x0) executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x17, 0x20000000, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_fhstatfs(0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r4 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r4}) wait4(r4, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, r5, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x17, 0x20000000, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_fhstatfs(0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r4 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r4}) wait4(r4, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, r5, 0x0) executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x17, 0x20000000, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000040)="b100050400000000000708000101000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c500000002000000000000020208a371a3f80004000000000000000100000000000000100000", 0xb1, 0x20009, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_fhstatfs(0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="a74e672ef6ee45db1890836f21edd4e47326c14ff92f795c46548d909244403dce6510b74c5ffc5b0d891b6d7d58f10336e8ce3bcdfb8c300245c62eabe3712acf249197e2a59507d63edc923d12d1cfc0218d9b9f24b9539aa70e31e98682d53bf4f02bb24e73ffbba53923949e681475c645dfc6be03886dd59202eb", 0x7d}], 0x1}, 0x0) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x103, 0x1) chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0) close(r5) truncate(&(0x7f0000000040)='./file0\x00', 0x3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00'], 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r7 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r7}) wait4(r7, 0x0, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) executing program 1: socket(0x1c, 0x1, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x62) writev(r1, &(0x7f0000000340), 0x0) clock_gettime(0x96ac322769254c0f, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x188) getpgrp(0x0) r2 = open(0x0, 0x8000, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={&(0x7f0000000080)="f0825b329dc4e108545599720c260faea43565ffffffc4e17e1110f26f8fe818a3c3008fe978d671fef20f5f31c4e37d083fb8", 0x0}}}) (fail_nth: 1) mlockall(0x2) cpuset_getdomain(0x3, 0x2, 0x100000000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x1e, &(0x7f0000000300)={0x0, 0x3, 0x9b}, &(0x7f00000003c0)=0x8) setresuid(0xee00, 0x0, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) setpriority(0x1, 0xffffffff, 0xef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x60000000) sync() setsockopt$inet6_group_source_req(r0, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x0, 0x2, @rand_addr="65cb30df060000000b603666ab2f3df4", 0x140}}, {{0x1c, 0x1c, 0x1, 0x0, @mcast1, 0x3}}}, 0xfc) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) munlockall() fork() msync(&(0x7f0000a60000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) munmap(&(0x7f0000a37000/0x1000)=nil, 0x1000) executing program 3: procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setitimer(0x2, &(0x7f0000000080)={{0x1c, 0x8}, {0x6000000000000}}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000280)) syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff7fffff0800460000200000000000019078ac1400bbf96400bb890300001000907800000634"]) r1 = getpgrp(0x0) procctl$PROC_REAP_STATUS(0x0, r1, 0x4, &(0x7f0000000000)) executing program 3: socket(0x1c, 0x1, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x62) writev(r1, &(0x7f0000000340), 0x0) clock_gettime(0x96ac322769254c0f, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x188) getpgrp(0x0) r2 = open(0x0, 0x8000, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (fail_nth: 1) aio_write(&(0x7f0000000240)={r3, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={&(0x7f0000000080)="f0825b329dc4e108545599720c260faea43565ffffffc4e17e1110f26f8fe818a3c3008fe978d671fef20f5f31c4e37d083fb8", 0x0}}}) mlockall(0x2) cpuset_getdomain(0x3, 0x2, 0x100000000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x1e, &(0x7f0000000300)={0x0, 0x3, 0x9b}, &(0x7f00000003c0)=0x8) setresuid(0xee00, 0x0, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) setpriority(0x1, 0xffffffff, 0xef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x60000000) sync() setsockopt$inet6_group_source_req(r0, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x0, 0x2, @rand_addr="65cb30df060000000b603666ab2f3df4", 0x140}}, {{0x1c, 0x1c, 0x1, 0x0, @mcast1, 0x3}}}, 0xfc) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) munlockall() fork() msync(&(0x7f0000a60000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) munmap(&(0x7f0000a37000/0x1000)=nil, 0x1000) executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) (async, rerun: 32) semop(r2, &(0x7f0000001240)=[{0x3}], 0x1) (async, rerun: 32) __semctl$SETVAL(r2, 0x1, 0x8, &(0x7f0000000040)=0x0) (async) sigaction(0x9, &(0x7f0000000240)={0x0, 0x6, {[0x2, 0x4f, 0xfc5, 0x80]}}, &(0x7f0000000300)={0x0}) (async) getfhat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) aio_waitcomplete(0x0, &(0x7f0000000600)={0x0, 0x4c2}) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000200)) (async, rerun: 32) r3 = fork() (async, rerun: 32) setreuid(0xee01, 0x0) rtprio(0x1, r3, &(0x7f0000000040)={0x4, 0xb}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000280)={0x8, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x800, 0xe6, 0x3, 0xdb4, 0x0, [0x5, 0x7fffffff, 0xd, 0x1f, 0x7, 0x40, 0x0, 0x1, 0x5, 0x6, 0x7, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x401, 0xb0c, 0x1, 0x6, 0x4dc, 0x10002, 0x9, 0x1, 0x100, 0x3, 0x9, 0x80de, 0x0, 0x7ff, 0xda8, 0x0, 0x80, 0x3, 0xfffff1e3, 0x1a1c, 0x7, 0x9de, 0x4, 0x81, 0x58c3, 0x3e, 0x1, 0x2000400, 0xffff01f5, 0x7fff, 0xfffffff7, 0x3ff, 0x1f, 0x5, 0x5, 0x2, 0x7f, 0x1f4, 0x6, 0x400, 0xfffffffd, 0x2, 0xc41, 0xe8ea, 0x100, 0xfffd, 0x0, 0x3, 0xa3f5, 0x1b4146a1, 0x7, 0x8, 0xfffffffd, 0x5, 0x10001, 0x4, 0x7, 0xffff, 0x5, 0x0, 0x8, 0x6, 0x100, 0x10000, 0x2, 0x8, 0x1, 0x3, 0x0, 0x99, 0x7ff, 0x9, 0x7ff, 0x0, 0x6, 0x5, 0x3, 0x7e, 0x8, 0x100, 0x101]}) (async) sendto$inet6(r0, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0xfffffff8, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0x40, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) fork() mount(&(0x7f0000000040)='ext2fs\x00', &(0x7f00000000c0)='./file1\x00', 0x4000044b, &(0x7f0000000100)="506b31c1a93ce9c25f958ab64ddd1f251851be4eac2c3dd5778f0059fd9d9e577f726b6c2a7d792e9aba3ff9dac96ba0b10fd41b8408ac6d63d5c4ff3f811bf0effa809a200636258f3e95293cf298781372") r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x0) mlockall(0x2) r4 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x80000}], 0x10}, 0x75f7385a28dbb509) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r3, 0x0) mlockall(0x2) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) executing program 1: mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0xe, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra, @enc_lim]}], @icmpv6=@ndisc_ra}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0xee01, 0xee00) lchown(0x0, 0x0, 0xffffffffffffffff) thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) mincore(&(0x7f0000e74000/0x1000)=nil, 0x1000, &(0x7f0000001100)=""/86) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r5 = shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="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", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') executing program 3: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) executing program 2: r0 = kqueue() r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000080)=r2) write(r2, &(0x7f0000000100)="ce96e9fb588a6cde", 0x8) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$DIOCADDALTQV0(r2, 0xc100442d, &(0x7f0000000200)="6cf0359c911d2c22eb5127debab742d73c740de61e5ce4392fd924164b869deab1ce4ff15e4193b7cd8ce4efa5fb6274ef77bb890a12008ac5ea09b79d336816c33060bfb9e5b5") sendto$inet6(r3, &(0x7f0000002700)="010164f80c04449d", 0x8, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x19, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}, {0x0, 0xfffffffffffffffa, 0x67d957a8950cd6bc, 0x1000000, 0x80000000, 0x3, [0x3, 0x5, 0x6b, 0x2]}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp(0x1c, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) r5 = semget$private(0x0, 0x2, 0x8) __semctl$SETVAL(r5, 0x2467b7dcbef3a9b7, 0x8, &(0x7f0000000080)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10, 0x2, 0x3, @broadcast}}}, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1b, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$BIOCLOCK(r8, 0x2000427a) ioctl$BIOCGRTIMEOUT32(r8, 0x4008426e, &(0x7f0000000040)) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) executing program 2: r0 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x51, &(0x7f0000000400)={0x1005, {{0x1c, 0x1c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, 0x0}, 0x400c0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000004c0)={0x0, 0x0, 0x42, 0x0, 0x492b7, 0x8, 0x6, 0x0, 0x0, 0xfffbfffa, 0x0, [0x2, 0x0, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0xcf, 0x1, 0x1, 0xc, 0x0, 0xfffffffc, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e2, 0x1, 0xffffffff, 0x0, 0xff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x20, 0xfffffff7, 0x9ed, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fc, 0x43a, 0x3, 0x0, 0xffffd14c, 0x83, 0x0, 0xffffffff, 0xfffeffff, 0x0, 0x0, 0x1000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x81) shutdown(r3, 0x2) r4 = accept$inet(r3, 0x0, 0x0) sendfile(r0, r3, 0x2, 0x41, &(0x7f00000002c0)={&(0x7f0000000240)=[{&(0x7f0000000340)="8f5208b82ed6628b22e1a041f6a3fd787c052a9a2f57754f01ed822efc5de66765528fc4e152d80bc01865785283d60865da125f232dd940957c3188b6bffef65b70cc31d0fc5d375bcc7f849e321ff892d22f883bbf13bd460bfb5d5a10cc9df832c1d0d36a1a49a9cc4a36031845be749d75984092a9d329c1c527068eaa93188d855dd4708ec05582", 0x8a}, {&(0x7f0000000100)="4085967b3f479d8e1278a19654d5b6a27d6fdf6c2322a09b9bed1b6ae6cc7068be97a0d6ef8fc4398a7109b60253058788a82c4348bb847af2879739dbae35f5638701ea2c905f83a27e340f8a3354ba5d9a6ee574b7d9e6fb36a0cbc04ab24b9711557cfef66e7b11a3d4eb31aa60f06568f3d5d509eafbf437fd67", 0x7c}, {&(0x7f0000000180)="f6c6d7d9e81598d53baccf99d1c2eeaf5ef9d5485e00965446fcdc9a89240cf2facd078f216d5b14fa25e4bf83a7b9044861acffa647ecf97c113b7dcf7af099fca16d2ae0bf99b7768f50dd1961ac53b1442a6c2772f9275008f18c66c8d43892fe70e42d5919aff18011494120098cf046d7c9c8dd03164d103a0aecb0c137f1862fbf14fe0083aa20d78badb14e3d57b9ca4f444379a29ff8eaac5d815518b13822f27bb0738f4945e0025068b9fabde4", 0xb2}], 0x3, &(0x7f0000000040)}, &(0x7f0000000300), 0x18) ioctl$KDSETRAD(r4, 0x20044b43) truncate(&(0x7f0000000040)='./file0\x00', 0x4) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1b, 0x3, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 1) executing program 2: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ae029d0db83aff78042000000014000001000000086500ff0200000000000000000000000000018800907800000000fe8000000000000000000000000000bb01b435a3bb9eb7ebab276ff3151d0a10f8884120794242d0b5f1501312df97ee73cdd56f39c583ecec6daf39496cccb6d1ebfbe78074209e7d7c82c41da2c144ce3d6990a4763d9de517cfd96122742d2ddfc9fb8d4922d649830e35c24674b542b9d10a606de43fbdfdd565ba700fa1519522c0249801f921abdd20db9a239b9781811345fb8f603e594246663235577b6161b3b13034acfccb67ed1d0729f07467c6e6141b02542efa0d0a9306a69b133d93f643898c8c5f3624defde00d0bfe9d7c21207b2f5449d2d790a0f0e0d870e2ec6a737e492ba271df267c409af40f153e0aad72ee82dd31dcdff2370606a0cee8ff65d3839b1b542446194c0b4d00ca89ea3d399f5cdf8d1e4876d03d1a01d1a7d622f4420eff24fa09125f43414764bdcb3d1abaa98c27816b545b843966877bb4cf54ddfd766574ba2a59f6f52445b33aaba79676913d5b6ee08009c91922b64e620d7ca7654bd8c267a9fc9a7181ce20e1ab2ef9c599b9c7cba41b9f579c78459fe65cebb57afbfa2b25e19529e68c45f23f3b515ebfa9f017aeeeb4d578bf54af631ed95746220048d47d48ff8d79b2806f986bbf02e0910b67009f8510bc67e01db76ba5c35e8c5cb791ed225f50a9ad75bb4eda2400f3d38ab58ab0b647007de8e87672b3663fb0c7b02b97ad02a3b9f3b1d3b5b48c64f1d120e9b271cbdd7a3fcd0c88613fffe986624c2a4c0d6a188f4efd49248eac817b6928b30dae8754a67c581bade7063b3ce56fd5e082e8c7bf98c34fe6aebbe38ea3e3c393936bd9d8112f388bb46f9a1f09884f6754a86cc7087274da8187a80b80cdaa06e0bafcfc2a7b0ef1bfef2e25efe0774ec571ec19f927ced43eeee072baf423b2a14763237ce3ea16accca662928e6d2c0cb20a22d3495964b44466f8dcb28025ce0cb913ddb9cee183c792d8f2bdf13f0964caed0004f026208323bc01aa28c98807fba246e2eecd38a3d7801c4259571a1dd4c45d75687b2918fd6b59e28344207442ae6e2fdcfab745db8ef7264c0c32ca8cfc0d4826cfb4f9cc72e61f2c8df961b3d4eea0ae9e1ca2aa6b1ac194517857dff97c93fb07966cd3069022768abd4251f3a51bad346d028c8d8e8668c6302fcf0383fbc62af33d87f71b145652c24af56611ea3a342f0c2afb7e82b2f9029e41dec75bee61156aa6a7a025a9573766ba7cf06324c799219bd4b359809833f01ef49c5909092d3936bf6c40f1b11e24e7662e28f84cc8de514d24b40159e07ede621dcc080b6b8100272a9bf916e8e1db06e72049afce1fdf9d5dee00f8345f79b457896ef6295064479ba20bdfa88d6b724694664fc9e9872d1f57732bf6e96ab22a9c0c7ba8940347f32073ded19cba0431b012f06375543ede0183c90f8913b37d00cd9ca4a75d8a7cabfbc5b542a1ef2f1fb906abe2236c595fb17fadad116cba47a50ee038fdb1e739bf6523c88a977e44d5da66efc7aef4f6d23561d6174218371f0d30adb7ebf96d799032ee4fa847ac04546604e918e4a0efc19353fc1c673524c5df1881acd4e350a015542d09ed4ff665a17f49caeeac485546a2163ddc0c8e46bb44c470f475b6f0337572a4dc15d13407eca7fef177defa84c2dff0087794ec4c58b6734d0593bfda1c2030b3eb606b914da30f5a95233055c7eb1d2b9806d9ef5c76dfd3975fb6197e8a377c1a5aa51a79856b6e633a8eb8c9fae7137b26cd3d4d8d2f0e862228753b66da828d9fea83a7dcd87b0a77a4a7dc4c1a9182a8981c43269137ceae206b3a367c399d3acf305167f11fd7c68d75d8fea39a57e8420ea684694e482ce922852d2dae139fbf2bb5fd5a264fb4e87e2034e4790188f64fa89d368befae1711f0cd3d8f2569e99a2dbaff12c822735da5d46ed4d4a565073af389c683bc916bff18bdb1b9ae7ca4d99414a7db7abc731be44f80770d38b69525657822194be2d3309da5a33cbd16bec8c0361f68f4772b9087fa2ed81c2a6efe923926a6eb257f4062a3017a322e2a1f1162ae1bfe6681bd46da0b23c7260e3e0633212e45cc2a7b449ec3cbf7f7e3f8cfe9dcc599ecd8ebcb282e387f8d81a8ad63bb2c19df05edaee86c5ba5ab9f6a5a3719f1a3299c6502d3987681c68a8efd212ad8978445393b1b8ab60811d19aafff2df8fe85b2d5d8881945c73aa298fc576ea1af14a2f85616c54dd2acc0d12075caf0c1ed6a784da08ce43b7930e7ad6d16b22a3cbdff35674311110902269e03289355759b6d793955f1f0638a48a19f7fbad7b5fe94038d8edb50472aa74ce977036a3e7d6bd20557c78eb4a28a7b4e67419e85feb26393555274287d43195c4a577b22f91649d5c4b06d6acdaac12db0af9be3c7d3d734fe833e201486e33228e839e8219ca797c8c65a4aafd6f4f5b34e3153938baa96d070c44670d82cb27c7775e7e26758512c0a873cbc54ed44a0ccf80e5f7cc7e1fa62406c35809a2542b5b0dbbff6f5267c59a8fd6213b760cbd8ccc049cd19ed340407ce6999e892455b2e5e6f6365d32263a66488b16e475ee4117d0fe952f2e2bf6041c00e075f91fd59790f890bd13d928a1f3af0dfa798f266fc5444fbda407768e2560862b8e5bb5a0689d79003000000000000006db149fe90ab17a71673242241ca7b6779650c30b0b4a12f5a76d1e9f7cc94f595166126f06caa19e5a416f243b1fdb11c8a9ca66dc3f269641b4ca11dc6b3cf080a62686bf036a66e3ead4a9a25cdbd8a50230c40b736a7acd9648b78149e4d66eeb9533801df4e6145446b33dec47ecf7070c24c37e30b22a40927596cd6504fccc7594918800dfb8dea2045047c8a0dac9444249ee777f6b9168daf6ac7b9c0cb2ddb301b229af7a0af88d31c7476667cca3f4e7d90a82410fb2b150d6fcc0ac18a2758dab401299f195a895d579a4a0cf8d1e968db12802b624ce1e96e71c28cabdc5f67bd72782de23e2a8a9528f8993c1c026256189450c13df37154298d907c409f40c5f31a6f18ed00efdf938b65b0ceb166849fc05c3b5fc5d9c7d2d61b1521d2a80ab8f4a7487daac9ed0ac086d74f9068ba4ba6cae090232a5f6bc77d2c8c7dbeef4a6f762d55a44464b7f79b60d704d9696ffc602e10d5e3c76d3c4528d80bd5bbc336882aabb61f6087c56a59f8d1a4d3e4a528d4f90dbd5a12e5110ef5c0ff9a7661751831a59d85329ba648ea52606155d2acfb54eef0c6a93abc48770bf7761b7679f737a1354df9e2a80516fcccc3ba62bdfaf937aa106a2ab4ad1dd3da28267994d5429bee3922498137710ac032052e33265616dd4b9c3a16050630662fbc0de36cce82628393b4773c869c555de4eed2d5dfa03d41f6f3d165fc65d07b444c985890a78d5ae76fe8bfdbb003a598157d157c75b15d26f270772dde9bb8778280bd7d20d3e02764d3748e305cb4dcf5873268b59ba894a3b3ecd4a4d564958c1e33c2e72c8d175083d83316554ea75a4ba5828537a1d169409af0821c8080e3208370db504b40d34875d88dad04163a077222784a15f69e279049657bbdb989bc1b17aa0b6f261535d2cdaea32bff91ad1635f7596c8d3dfd0fb4da8906d09480f79679bbad51f95ec9882f419f23f5da046f4b3f83b4e89bfc3e17dc1b2400a7292dd8fc28e0da9a77fa55b6e54bca82bb2fae723f88ee11da808a8bcd2e9318546c5a92685848cf5a29a517de257523711b39491c445f00006ca1bef054849d5aa9fc15b4a872be10b47af6799f5548c46e9d165964a8f91017b56405ce382fd89fd9cd4ba732ea416196b9ae39a2e4cd9f668e45a2b30fb0d3f5eece2d09d8c65cf24dc3a02ddfcfef36fbeef8e64d5b26343c561aa8cdc37773db4969167238a57165cb2d37190e4b5607bb41dc1f80494aa323215be86948819765f9bd82851deb6555d57c757721b21fc76484694d3e42097636a342c1508b9eed9b76bf03ba795b1064299dd5148d43f90331c391cc794128ea962236d45eeb05d5ab1f86ba8facc7481e4194cde2ebc0c04cd4a037eb330f0ef2e98f37f9f02c47c0e3b461cd33a5db2f37fb2ce1ece0a032549f6c5b12518642feed64f84f39657853127f9792530d7fde5c20dbe38ea21cf2342a8a605dd639a3e5df6b1ad8e86933025e85ee7d256986be37f071c8c675bb1c0fb34f01ea22f91af0964c2952d2bdffdfb7679a3444b77193dc35c0b23f3b913fde02b38e23c50367a8737a18745ee72cefae56cf8bbd9daf47ede70e7e3ec1999ca01c2bca87f5d0779aa436745b000000000000000089684a1bf616b55382b72c356acf21c6ba7c75d8a6da4548e61b4189f21b2d79a5c38d57300dc3dc23b5336c1cc481fb320bfac38163013fdc1d42fe05a4a26570ae8bf9499fa54a7d67ec4b425a592543c4b73edb25efbe05d718abba3ac1e2d83febd5b5e7bd7520d125e7fe0a7235d901de1a77a8bf3f272ea3dca752d53b2a99e9a2102b558978fa3bad6f8f7cee5978d41b309974eee775ef5a38d29d5f28b4bf60f5a5a617fd4c56cadf80e57db25619619689a6eceade8e2bed981d2f81db6d5c370b19a7575b5a88b47c4edcb7758248562b3951948355ad7b190df2cbbe137f5ed87fe6ac8dbfcbc97ba277bea7de10dda6954821238e39032f62ce7d97a5a36c8873637d34474cde8b7b3427d858588116e50e9ba0dede6071c1e9c9947ef3e9b3ef435cba1fc1b3eebd486493b40fe45fec4ea0fba4fe7e1040e6dde49c547c5be75cbfc2623b2e635a7a1fdbe7cf3e18100429b3caa62e54b891fd67051443dcc8c1667df8909207ca9eea80ad537819afebee38b19d9f2827f5085838b37862ae95ea47b45d6b531a1d596c2eb784fbec15d64d9b7399a29e8ae043080b1520c6bcaeca2951276c78788e5fafec41e186000000000000000000f549bb89a4cf43f6b305d3dd"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program crashed: panic: failed to reclaim memory bisect: bisecting 24 programs bisect: split chunks (needed=false): <24> bisect: split chunk #0 of len 24 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 2, 17, 30, 1, 30, 29, 40, 30, 30, 13, 2, 12, 4, 30, 15] detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) (async, rerun: 32) semop(r2, &(0x7f0000001240)=[{0x3}], 0x1) (async, rerun: 32) __semctl$SETVAL(r2, 0x1, 0x8, &(0x7f0000000040)=0x0) (async) sigaction(0x9, &(0x7f0000000240)={0x0, 0x6, {[0x2, 0x4f, 0xfc5, 0x80]}}, &(0x7f0000000300)={0x0}) (async) getfhat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) aio_waitcomplete(0x0, &(0x7f0000000600)={0x0, 0x4c2}) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000200)) (async, rerun: 32) r3 = fork() (async, rerun: 32) setreuid(0xee01, 0x0) rtprio(0x1, r3, &(0x7f0000000040)={0x4, 0xb}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000280)={0x8, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x800, 0xe6, 0x3, 0xdb4, 0x0, [0x5, 0x7fffffff, 0xd, 0x1f, 0x7, 0x40, 0x0, 0x1, 0x5, 0x6, 0x7, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x401, 0xb0c, 0x1, 0x6, 0x4dc, 0x10002, 0x9, 0x1, 0x100, 0x3, 0x9, 0x80de, 0x0, 0x7ff, 0xda8, 0x0, 0x80, 0x3, 0xfffff1e3, 0x1a1c, 0x7, 0x9de, 0x4, 0x81, 0x58c3, 0x3e, 0x1, 0x2000400, 0xffff01f5, 0x7fff, 0xfffffff7, 0x3ff, 0x1f, 0x5, 0x5, 0x2, 0x7f, 0x1f4, 0x6, 0x400, 0xfffffffd, 0x2, 0xc41, 0xe8ea, 0x100, 0xfffd, 0x0, 0x3, 0xa3f5, 0x1b4146a1, 0x7, 0x8, 0xfffffffd, 0x5, 0x10001, 0x4, 0x7, 0xffff, 0x5, 0x0, 0x8, 0x6, 0x100, 0x10000, 0x2, 0x8, 0x1, 0x3, 0x0, 0x99, 0x7ff, 0x9, 0x7ff, 0x0, 0x6, 0x5, 0x3, 0x7e, 0x8, 0x100, 0x101]}) (async) sendto$inet6(r0, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0xfffffff8, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0x40, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) fork() mount(&(0x7f0000000040)='ext2fs\x00', &(0x7f00000000c0)='./file1\x00', 0x4000044b, &(0x7f0000000100)="506b31c1a93ce9c25f958ab64ddd1f251851be4eac2c3dd5778f0059fd9d9e577f726b6c2a7d792e9aba3ff9dac96ba0b10fd41b8408ac6d63d5c4ff3f811bf0effa809a200636258f3e95293cf298781372") r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x0) mlockall(0x2) r4 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x80000}], 0x10}, 0x75f7385a28dbb509) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r3, 0x0) mlockall(0x2) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) executing program 1: mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0xe, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra, @enc_lim]}], @icmpv6=@ndisc_ra}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0xee01, 0xee00) lchown(0x0, 0x0, 0xffffffffffffffff) thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) mincore(&(0x7f0000e74000/0x1000)=nil, 0x1000, &(0x7f0000001100)=""/86) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r5 = shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="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", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') executing program 3: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) executing program 2: r0 = kqueue() r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000080)=r2) write(r2, &(0x7f0000000100)="ce96e9fb588a6cde", 0x8) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$DIOCADDALTQV0(r2, 0xc100442d, &(0x7f0000000200)="6cf0359c911d2c22eb5127debab742d73c740de61e5ce4392fd924164b869deab1ce4ff15e4193b7cd8ce4efa5fb6274ef77bb890a12008ac5ea09b79d336816c33060bfb9e5b5") sendto$inet6(r3, &(0x7f0000002700)="010164f80c04449d", 0x8, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x19, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}, {0x0, 0xfffffffffffffffa, 0x67d957a8950cd6bc, 0x1000000, 0x80000000, 0x3, [0x3, 0x5, 0x6b, 0x2]}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp(0x1c, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) r5 = semget$private(0x0, 0x2, 0x8) __semctl$SETVAL(r5, 0x2467b7dcbef3a9b7, 0x8, &(0x7f0000000080)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10, 0x2, 0x3, @broadcast}}}, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1b, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$BIOCLOCK(r8, 0x2000427a) ioctl$BIOCGRTIMEOUT32(r8, 0x4008426e, &(0x7f0000000040)) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) executing program 2: r0 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x51, &(0x7f0000000400)={0x1005, {{0x1c, 0x1c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, 0x0}, 0x400c0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000004c0)={0x0, 0x0, 0x42, 0x0, 0x492b7, 0x8, 0x6, 0x0, 0x0, 0xfffbfffa, 0x0, [0x2, 0x0, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0xcf, 0x1, 0x1, 0xc, 0x0, 0xfffffffc, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e2, 0x1, 0xffffffff, 0x0, 0xff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x20, 0xfffffff7, 0x9ed, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fc, 0x43a, 0x3, 0x0, 0xffffd14c, 0x83, 0x0, 0xffffffff, 0xfffeffff, 0x0, 0x0, 0x1000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x81) shutdown(r3, 0x2) r4 = accept$inet(r3, 0x0, 0x0) sendfile(r0, r3, 0x2, 0x41, &(0x7f00000002c0)={&(0x7f0000000240)=[{&(0x7f0000000340)="8f5208b82ed6628b22e1a041f6a3fd787c052a9a2f57754f01ed822efc5de66765528fc4e152d80bc01865785283d60865da125f232dd940957c3188b6bffef65b70cc31d0fc5d375bcc7f849e321ff892d22f883bbf13bd460bfb5d5a10cc9df832c1d0d36a1a49a9cc4a36031845be749d75984092a9d329c1c527068eaa93188d855dd4708ec05582", 0x8a}, {&(0x7f0000000100)="4085967b3f479d8e1278a19654d5b6a27d6fdf6c2322a09b9bed1b6ae6cc7068be97a0d6ef8fc4398a7109b60253058788a82c4348bb847af2879739dbae35f5638701ea2c905f83a27e340f8a3354ba5d9a6ee574b7d9e6fb36a0cbc04ab24b9711557cfef66e7b11a3d4eb31aa60f06568f3d5d509eafbf437fd67", 0x7c}, {&(0x7f0000000180)="f6c6d7d9e81598d53baccf99d1c2eeaf5ef9d5485e00965446fcdc9a89240cf2facd078f216d5b14fa25e4bf83a7b9044861acffa647ecf97c113b7dcf7af099fca16d2ae0bf99b7768f50dd1961ac53b1442a6c2772f9275008f18c66c8d43892fe70e42d5919aff18011494120098cf046d7c9c8dd03164d103a0aecb0c137f1862fbf14fe0083aa20d78badb14e3d57b9ca4f444379a29ff8eaac5d815518b13822f27bb0738f4945e0025068b9fabde4", 0xb2}], 0x3, &(0x7f0000000040)}, &(0x7f0000000300), 0x18) ioctl$KDSETRAD(r4, 0x20044b43) truncate(&(0x7f0000000040)='./file0\x00', 0x4) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1b, 0x3, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 1) executing program 2: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 13, 2, 12, 4, 30, 15] detailed listing: executing program 3: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) executing program 2: r0 = kqueue() r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000080)=r2) write(r2, &(0x7f0000000100)="ce96e9fb588a6cde", 0x8) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$DIOCADDALTQV0(r2, 0xc100442d, &(0x7f0000000200)="6cf0359c911d2c22eb5127debab742d73c740de61e5ce4392fd924164b869deab1ce4ff15e4193b7cd8ce4efa5fb6274ef77bb890a12008ac5ea09b79d336816c33060bfb9e5b5") sendto$inet6(r3, &(0x7f0000002700)="010164f80c04449d", 0x8, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x19, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}, {0x0, 0xfffffffffffffffa, 0x67d957a8950cd6bc, 0x1000000, 0x80000000, 0x3, [0x3, 0x5, 0x6b, 0x2]}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp(0x1c, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) r5 = semget$private(0x0, 0x2, 0x8) __semctl$SETVAL(r5, 0x2467b7dcbef3a9b7, 0x8, &(0x7f0000000080)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10, 0x2, 0x3, @broadcast}}}, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1b, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$BIOCLOCK(r8, 0x2000427a) ioctl$BIOCGRTIMEOUT32(r8, 0x4008426e, &(0x7f0000000040)) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) executing program 2: r0 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x51, &(0x7f0000000400)={0x1005, {{0x1c, 0x1c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, 0x0}, 0x400c0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000004c0)={0x0, 0x0, 0x42, 0x0, 0x492b7, 0x8, 0x6, 0x0, 0x0, 0xfffbfffa, 0x0, [0x2, 0x0, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0xcf, 0x1, 0x1, 0xc, 0x0, 0xfffffffc, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e2, 0x1, 0xffffffff, 0x0, 0xff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x20, 0xfffffff7, 0x9ed, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fc, 0x43a, 0x3, 0x0, 0xffffd14c, 0x83, 0x0, 0xffffffff, 0xfffeffff, 0x0, 0x0, 0x1000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x81) shutdown(r3, 0x2) r4 = accept$inet(r3, 0x0, 0x0) sendfile(r0, r3, 0x2, 0x41, &(0x7f00000002c0)={&(0x7f0000000240)=[{&(0x7f0000000340)="8f5208b82ed6628b22e1a041f6a3fd787c052a9a2f57754f01ed822efc5de66765528fc4e152d80bc01865785283d60865da125f232dd940957c3188b6bffef65b70cc31d0fc5d375bcc7f849e321ff892d22f883bbf13bd460bfb5d5a10cc9df832c1d0d36a1a49a9cc4a36031845be749d75984092a9d329c1c527068eaa93188d855dd4708ec05582", 0x8a}, {&(0x7f0000000100)="4085967b3f479d8e1278a19654d5b6a27d6fdf6c2322a09b9bed1b6ae6cc7068be97a0d6ef8fc4398a7109b60253058788a82c4348bb847af2879739dbae35f5638701ea2c905f83a27e340f8a3354ba5d9a6ee574b7d9e6fb36a0cbc04ab24b9711557cfef66e7b11a3d4eb31aa60f06568f3d5d509eafbf437fd67", 0x7c}, {&(0x7f0000000180)="f6c6d7d9e81598d53baccf99d1c2eeaf5ef9d5485e00965446fcdc9a89240cf2facd078f216d5b14fa25e4bf83a7b9044861acffa647ecf97c113b7dcf7af099fca16d2ae0bf99b7768f50dd1961ac53b1442a6c2772f9275008f18c66c8d43892fe70e42d5919aff18011494120098cf046d7c9c8dd03164d103a0aecb0c137f1862fbf14fe0083aa20d78badb14e3d57b9ca4f444379a29ff8eaac5d815518b13822f27bb0738f4945e0025068b9fabde4", 0xb2}], 0x3, &(0x7f0000000040)}, &(0x7f0000000300), 0x18) ioctl$KDSETRAD(r4, 0x20044b43) truncate(&(0x7f0000000040)='./file0\x00', 0x4) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1b, 0x3, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 1) executing program 2: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 2, 17, 30, 1, 30, 29, 40] detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) (async, rerun: 32) semop(r2, &(0x7f0000001240)=[{0x3}], 0x1) (async, rerun: 32) __semctl$SETVAL(r2, 0x1, 0x8, &(0x7f0000000040)=0x0) (async) sigaction(0x9, &(0x7f0000000240)={0x0, 0x6, {[0x2, 0x4f, 0xfc5, 0x80]}}, &(0x7f0000000300)={0x0}) (async) getfhat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) aio_waitcomplete(0x0, &(0x7f0000000600)={0x0, 0x4c2}) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000200)) (async, rerun: 32) r3 = fork() (async, rerun: 32) setreuid(0xee01, 0x0) rtprio(0x1, r3, &(0x7f0000000040)={0x4, 0xb}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000280)={0x8, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x800, 0xe6, 0x3, 0xdb4, 0x0, [0x5, 0x7fffffff, 0xd, 0x1f, 0x7, 0x40, 0x0, 0x1, 0x5, 0x6, 0x7, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x401, 0xb0c, 0x1, 0x6, 0x4dc, 0x10002, 0x9, 0x1, 0x100, 0x3, 0x9, 0x80de, 0x0, 0x7ff, 0xda8, 0x0, 0x80, 0x3, 0xfffff1e3, 0x1a1c, 0x7, 0x9de, 0x4, 0x81, 0x58c3, 0x3e, 0x1, 0x2000400, 0xffff01f5, 0x7fff, 0xfffffff7, 0x3ff, 0x1f, 0x5, 0x5, 0x2, 0x7f, 0x1f4, 0x6, 0x400, 0xfffffffd, 0x2, 0xc41, 0xe8ea, 0x100, 0xfffd, 0x0, 0x3, 0xa3f5, 0x1b4146a1, 0x7, 0x8, 0xfffffffd, 0x5, 0x10001, 0x4, 0x7, 0xffff, 0x5, 0x0, 0x8, 0x6, 0x100, 0x10000, 0x2, 0x8, 0x1, 0x3, 0x0, 0x99, 0x7ff, 0x9, 0x7ff, 0x0, 0x6, 0x5, 0x3, 0x7e, 0x8, 0x100, 0x101]}) (async) sendto$inet6(r0, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0xfffffff8, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0x40, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) fork() mount(&(0x7f0000000040)='ext2fs\x00', &(0x7f00000000c0)='./file1\x00', 0x4000044b, &(0x7f0000000100)="506b31c1a93ce9c25f958ab64ddd1f251851be4eac2c3dd5778f0059fd9d9e577f726b6c2a7d792e9aba3ff9dac96ba0b10fd41b8408ac6d63d5c4ff3f811bf0effa809a200636258f3e95293cf298781372") r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x0) mlockall(0x2) r4 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x80000}], 0x10}, 0x75f7385a28dbb509) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r3, 0x0) mlockall(0x2) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) executing program 1: mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0xe, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra, @enc_lim]}], @icmpv6=@ndisc_ra}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0xee01, 0xee00) lchown(0x0, 0x0, 0xffffffffffffffff) thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) mincore(&(0x7f0000e74000/0x1000)=nil, 0x1000, &(0x7f0000001100)=""/86) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r5 = shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="1a7b4fa5e0d9fd18a9b7de56e6cd17d06fdcc4bdb699fabb7d070d2b5a81460acd07e6891cfc11c151ccc85b1a75dd5654e41fa04c227be30084b8dfd6af0275cbcf2a81eb5e930c7a7b5598a36e52a095e23b6ab432c1e53548440800d077443f0000ab1f584235083e89010000000000000094587902fb3d92dc563f6dce7937b90a167ca4fad41ec180386699de46ecaf628d3733a90c97e87fb71968c237db866867251f28a0f26c308bebb172dfd5ff3c8371eb9a8214959946af6e8b12227af5dc757b0f8c7e65dbef8b9b085a4cea9a989280a20af72255d3378ef611ef80f999ae1e2eb0d6df4a2f76e306e0f473c9d384c8ece6d257ed52769edaf2519d5067afb240465dc8b991ccf8f465e2cc0800e1dbb017944984558933cc00507e5ff7fe2e53a4e2be6d73f03dd9947bbfb3f6d074b88d7f300af97999e273eceb812d3d9f125b48e69a14d0a63dee4c55f27c091c0000000000000000000000ac6351cd75e1b0a95b8e38c96e9b0a46a98a7a6c7faeba2a76dae3deaeb2a1fa1c8ae1cafd3efe9ab1374ee02673bf90a45921c4b1f59b2d4a7623bd5e7efa926bc84f39f8efa83bf20c3b777fceae9052fead207a1e1b32504ad3c884ce6f2d69a659a87ea7786dc6411153a980253a9b318377b0d367103d246d43587e94cd53400000000000000000000000000000a90262c857ac55b8bd5226a097cf0cdabb22ac4c578497af9a19cc96e683b08878f54fc660cfb96935f6d4", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: failed to reclaim memory bisect: the chunk can be dropped bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30, 29, 40] detailed listing: executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="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", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="8eefde975b8d18cbfb72cc06eac718ac0114e28565b7dca512334384669e4aee25a6b633ffaef0d829346ab163eff40fa8af1ba999c1d94a7f9df47fc8043083b332c45ba7c7b95aac743a0b8ab984378637fb965fe43dae6a4ceae71e77a5c1755f9bffbd7c15e35d3150acd8291737c3cc99a42cc5822006678897f985c2c1431a43124b5e61c1c3305ca5b21a5ae6ab7cf696f3d75e75a93b3d7ddb2b7958057687d2705b3c29599a21314a53db4a6fad23e1507e1da2e643a3466504d31fd45d5d35b2108ed96aec29bd96f98ccbeda48cf8fc6f404214196ce23fe016c2443965f17cde0622a8cd74c184791be1e9ec2b526d23a673c7d129847af75afbeb209651a00f370311f3032ab86f8e6a509c6c855c9b1ef658b1adc091", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 40] detailed listing: executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="8eefde975b8d18cbfb72cc06eac718ac0114e28565b7dca512334384669e4aee25a6b633ffaef0d829346ab163eff40fa8af1ba999c1d94a7f9df47fc8043083b332c45ba7c7b95aac743a0b8ab984378637fb965fe43dae6a4ceae71e77a5c1755f9bffbd7c15e35d3150acd8291737c3cc99a42cc5822006678897f985c2c1431a43124b5e61c1c3305ca5b21a5ae6ab7cf696f3d75e75a93b3d7ddb2b7958057687d2705b3c29599a21314a53db4a6fad23e1507e1da2e643a3466504d31fd45d5d35b2108ed96aec29bd96f98ccbeda48cf8fc6f404214196ce23fe016c2443965f17cde0622a8cd74c184791be1e9ec2b526d23a673c7d129847af75afbeb209651a00f370311f3032ab86f8e6a509c6c855c9b1ef658b1adc091", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: Fatal trap NUM: page fault in callout_process bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH-fstatat-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH-fstatat-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: concatenation succeeded found reproducer with 40 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH-fstatat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) socket(0x2, 0x20000001, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) open$dir(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(0x0, 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio program did not crash simplifying guilty program options testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash reproducing took 1h24m32.901241313s repro crashed as (corrupted=false): Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xffffffffffffffff fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff8156b658 stack pointer = 0x28:0xfffffe00575ba760 frame pointer = 0x28:0xfffffe00575ba8a0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = resume, IOPL = 0 current process = 1868 (syz-executor) rdi: ffffffffffffffff rsi: 0000003420000000 rdx: 0000000000000001 rcx: fffffe00033eee30 r8: 0000000000000000 r9: 0000000000000034 rax: fffffe00033eee30 rbx: 00000039d89ea9a4 rbp: fffffe00575ba8a0 r10: 100bc12dc869f15f r11: 0000000000000017 r12: ffffffffffffffff r13: 0000003410b9775b r14: ffffffffffffffff r15: 0000003420000000 trap number = 12 panic: page fault cpuid = 0 time = 1745875862 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575b9f90 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00575ba0f0 vpanic() at vpanic+0x257/frame 0xfffffe00575ba2b0 panic() at panic+0xb5/frame 0xfffffe00575ba370 trap_pfault() at trap_pfault+0xaec/frame 0xfffffe00575ba4b0 trap() at trap+0x78e/frame 0xfffffe00575ba690 calltrap() at calltrap+0x8/frame 0xfffffe00575ba690 --- trap 0xc, rip = 0xffffffff8156b658, rsp = 0xfffffe00575ba760, rbp = 0xfffffe00575ba8a0 --- callout_process() at callout_process+0x238/frame 0xfffffe00575ba8a0 handleevents() at handleevents+0x3ee/frame 0xfffffe00575ba910 timercb() at timercb+0x3cb/frame 0xfffffe00575ba9d0 lapic_handle_timer() at lapic_handle_timer+0x17f/frame 0xfffffe00575baa10 Xtimerint() at Xtimerint+0xb1/frame 0xfffffe00575baa10 --- interrupt, rip = 0xffffffff815aa565, rsp = 0xfffffe00575baae0, rbp = 0xfffffe00575bab00 --- kasan_copyin() at kasan_copyin+0xb5/frame 0xfffffe00575bab00 umtx_copyin_umtx_time() at umtx_copyin_umtx_time+0x6c/frame 0xfffffe00575bab30 __umtx_op_wait_uint_private() at __umtx_op_wait_uint_private+0xc6/frame 0xfffffe00575bac10 sys__umtx_op() at sys__umtx_op+0x1fd/frame 0xfffffe00575bad10 amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00575baf30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00575baf30 --- syscall (454, FreeBSD ELF64, _umtx_op), rip = 0x32f68c, rsp = 0x8205109f8, rbp = 0x820510a20 --- KDB: enter: panic [ thread pid 1868 tid 100151 ] Stopped at kdb_enter+0x6e: movq $0,0x25be387(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0xdffff7c000000000 rbx 0xffffffff827a7620 .str.27 rsp 0xfffffe00575ba0d0 rbp 0xfffffe00575ba0f0 rsi 0 rdi 0xffffffff830004c0 panicstr r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe005492a740 r13 0xfffffffffffffffe r14 0xffffffff827a7620 .str.27 r15 0 rip 0xffffffff815fce0e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25be387(%rip) db> show proc Process 1868 (syz-executor) at 0xfffffe0054924ae0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 835 at 0xfffffe00548d6560 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe005490fdb0 (map 0xfffffe005490fdb0) (map.pmap 0xfffffe005490fe50) (pmap 0xfffffe005490fec0) threads: 2 100151 Run CPU 0 syz-executor 101124 RunQ syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1868 835 835 0 R (threaded) syz-executor 100151 Run CPU 0 syz-executor 101124 RunQ syz-executor 1867 809 424 0 S nanslp 0xffffffff83b9c501 sleep 1861 853 853 0 R (threaded) syz-executor 101056 RunQ syz-executor 101120 RunQ syz-executor 101125 RunQ syz-executor 1858 849 849 0 R (threaded) syz-executor 101028 RunQ syz-executor 101118 RunQ syz-executor 899 0 0 0 DL aiordy 0xfffffe00548e3ae0 [aiod4] 898 0 0 0 DL aiordy 0xfffffe00548e4040 [aiod3] 897 0 0 0 DL aiordy 0xfffffe00548e45a0 [aiod2] 896 0 0 0 DL aiordy 0xfffffe00548e4b00 [aiod1] 857 774 857 0 R CPU 1 syz-executor 853 774 853 0 R syz-executor 849 774 849 0 R syz-executor 835 774 835 0 R syz-executor 809 803 424 0 S wait 0xfffffe00548d85a0 sh 803 424 424 0 S wait 0xfffffe0054913000 sh 774 773 771 0 S select 0xfffffe006e6ef640 syz-executor 773 771 771 0 S (threaded) syz-execprog 100111 S uwait 0xfffffe0059e80400 syz-execprog 100112 S uwait 0xfffffe0059e66480 syz-execprog 100113 S uwait 0xfffffe006e6ef700 syz-execprog 100114 S kqread 0xfffffe0008bf4700 syz-execprog 100115 S uwait 0xfffffe006e6ef900 syz-execprog 100116 S uwait 0xfffffe006e6efa00 syz-execprog 100117 S uwait 0xfffffe0059e80500 syz-execprog 100118 S uwait 0xfffffe0059ec2e00 syz-execprog 771 769 771 0 Ss pause 0xfffffe00548d9670 csh 769 682 769 0 Ss select 0xfffffe006e6efe40 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0007ff78b0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058dcf8b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0007ff68b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dcfcb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dd00b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058dd04b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dd08b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0058dd0cb0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0058dd10b0 getty 738 1 18 0 S+ piperd 0xfffffe005a05bcc0 logger 737 736 18 0 S+ nanslp 0xffffffff83b9c500 sleep 736 1 18 0 S+ wait 0xfffffe00548e3020 sh 686 1 686 0 Ss nanslp 0xffffffff83b9c501 cron 682 1 682 0 Ss select 0xfffffe006e6f00c0 sshd 495 1 495 0 Ss select 0xfffffe006e6f0140 syslogd 424 1 424 0 Ss wait 0xfffffe0054805060 devd 423 1 423 65 Ss select 0xfffffe0059f0d3c0 dhclient 338 1 338 0 Ss select 0xfffffe0059e66640 dhclient 335 1 335 0 Ss select 0xfffffe0059e665c0 dhclient 17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb8360 [bufdaemon] 100081 D - 0xffffffff83002140 [bufspacedaemon-0] 100093 D sdflush 0xfffffe0059ed78e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100078 RunQ [dom0] 100082 D launds 0xffffffff83ce9304 [laundry: dom0] 100083 D umarcl 0xffffffff81dc63e0 [uma] 7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84518850 [pf purge] 5 0 0 0 DL waiting 0xffffffff847de5c0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e4340 [doneq0] 100047 D - 0xffffffff838e42c0 [async] 100076 D - 0xffffffff838e4140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce4b00 [crypto] 100044 D crypto_ 0xfffffe005856d030 [crypto returns 0] 100045 D crypto_ 0xfffffe005856d080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00547f6088 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b44f00 [g_event] 100038 D - 0xffffffff83b44f20 [g_up] 100039 D - 0xffffffff83b44f40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c29ff0 [swapper] 100005 D - 0xfffffe0008bf7d00 [softirq_0] 100006 D - 0xfffffe0008bf7c00 [softirq_1] 100007 D - 0xfffffe0008bf7b00 [if_io_tqg_0] 100008 D - 0xfffffe0008bf7a00 [if_io_tqg_1] 100009 D - 0xfffffe0008bf7900 [if_config_tqg_0] 100010 D - 0xfffffe0008bf7800 [kqueue_ctx taskq] 100011 D - 0xfffffe0008bf7700 [jail_remove taskq] 100012 D - 0xfffffe0008bf7600 [bus taskq] 100015 D - 0xfffffe0008bf7300 [thread taskq] 100017 D - 0xfffffe0008bf7100 [aiod_kick taskq] 100018 D - 0xfffffe0008bf7000 [deferred_unmount ta] 100019 D - 0xfffffe0008bf6e00 [inm_free taskq] 100020 D - 0xfffffe0008bf6d00 [in6m_free taskq] 100021 D - 0xfffffe0008bf6c00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008bf6900 [firmware taskq] 100041 D - 0xfffffe0008bf6600 [crypto_0] 100042 D - 0xfffffe0008bf6600 [crypto_1] 100057 D - 0xfffffe0008bf6400 [vtnet0 rxq 0] 100058 D - 0xfffffe0008bf6300 [vtnet0 txq 0] 100059 D - 0xfffffe0008bf6200 [vtnet0 rxq 1] 100060 D - 0xfffffe0008bf6100 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0058586680 [virtio_balloon] 100066 D - 0xffffffff827ac960 [deadlkres] 100070 D - 0xfffffe0058f59b00 [acpi_task_0] 100071 D - 0xfffffe0058f59b00 [acpi_task_1] 100072 D - 0xfffffe0058f59b00 [acpi_task_2] 100074 D - 0xfffffe0008bf8100 [mca taskq] 100075 D - 0xfffffe0008bf6500 [CAM taskq] 100077 D - 0xfffffe0008bf5e00 [ipsec_offload] db> show all locks db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5059K 486 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 34854 2053K 34929 vtbuf 24 1968K 46 newblk 1856 1488K 2874 kobj 331 1324K 495 vfscache 3 1025K 3 inodedep 1062 910K 2042 pcb 23 669K 56 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 144 254K 1958 dirrem 984 246K 1960 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54426 vmem 5 144K 7 tidhash 3 141K 3 pagedep 48 140K 1019 tfo_ccache 1 128K 1 IP reass 1 128K 1 freefile 967 121K 1933 filedesc 16 121K 2062 DEVFS1 110 110K 129 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 umtx 336 42K 336 kdtrace 209 42K 2995 temp 35 37K 1956 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 128 32K 139 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 ifaddr 66 19K 77 LRO 18 19K 20 BPF 14 19K 15 ufs_mount 4 17K 5 proc 3 17K 3 routetbl 141 17K 482 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 51 ifnet 7 13K 8 ether_multi 152 13K 190 kenv 95 12K 95 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 437 mkdir 72 9K 2018 rpc 8 9K 8 in6_multi 65 9K 75 bmsafemap 3 9K 2008 plimit 22 9K 437 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 diradd 62 8K 2005 audit_evclass 239 8K 301 taskqueue 69 8K 69 kqueue 58 7K 1876 sglist 6 7K 6 cred 24 6K 279 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 pf_ifnet 12 5K 25 newdirblk 38 5K 1009 ufs_dirhash 24 5K 24 UMA 266 5K 266 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 acpisem 28 4K 28 pwddesc 55 4K 2827 proc-args 81 3K 2989 terminal 11 3K 11 selfd 41 3K 60332 indirdep 10 3K 10 session 20 3K 50 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 9 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 16 sctp_ifa 13 2K 16 Unitno 26 2K 54 CAM XPT 22 2K 543 lockf 15 2K 22 in_multi 6 2K 9 tun 4 2K 5 toponodes 6 2K 6 ipsecpolicy 2 2K 2 msi 9 2K 9 netlink 2 2K 91 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 select 8 1K 36 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 16 ipsec 3 1K 3 mld 6 1K 7 CC Mem 6 1K 13 igmp 6 1K 7 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 4 encap_export_host 12 1K 12 osd 11 1K 29 cdev 2 1K 2 DEVFSP 8 1K 44 lkpikmalloc 8 1K 9 inpcbpolicy 13 1K 200 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 filecaps 7 1K 81 tcpfunc 3 1K 3 loginclass 3 1K 7 prison 6 1K 6 cryptodev 2 1K 49 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 procdesc 1 1K 10 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3344 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 57 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 993 p1003.1b 1 1K 1 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 14 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 14 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 mqdata 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 filemon 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 16 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 3 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freeblks 0 0K 992 freefrag 0 0K 38 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 2 ipsecrequest 0 0K 0 ip6opt 0 0K 6 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 202 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 35 lio 0 0K 958 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 17119 ioctlops 0 0K 99 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 657 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 kcovinfo 0 0K 30 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 24276 0 254 38494208 0 mbuf 256 8617 1045 36863 0 254 2473472 0 BUF TRIE 152 304 11500 1143 0 62 1794208 0 malloc-128 128 13325 160 14343 0 126 1726080 0 malloc-384 384 4157 43 4170 0 30 1612800 0 malloc-4096 4096 332 2 498 0 2 1368064 0 UMA Slabs 0 112 10926 12 10926 0 126 1225056 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 malloc-65536 65536 13 1 16 0 1 917504 0 vmem btag 56 16116 51 16116 0 254 905352 0 RADIX NODE 152 4596 989 56620 0 62 848920 0 FFS inode 1168 562 33 2496 0 8 694960 0 socket 1024 22 486 1425 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 malloc-256 256 1878 57 3013 0 62 495360 0 malloc-384 384 1150 20 2132 0 30 449280 0 malloc-4096 4096 74 8 1955 0 2 335872 0 VM OBJECT 264 1065 165 26169 0 30 324720 0 THREAD 1824 152 16 1125 0 8 306432 0 VNODE 440 598 95 2535 0 30 304920 0 256 Bucket 2048 118 18 927 0 8 278528 0 malloc-64 64 3941 154 5775 0 254 262080 0 malloc-256 256 988 17 3035 0 62 257280 0 malloc-16 16 14371 379 14454 0 254 236000 0 malloc-2048 2048 103 9 134 0 8 229376 0 DEVCTL 1024 34 186 159 0 0 225280 0 malloc-65536 65536 3 0 3 0 1 196608 0 malloc-16384 16384 7 5 1212 0 1 196608 0 UMA Zones 768 238 1 238 0 16 183552 0 malloc-32 32 5339 331 6387 0 254 181440 0 malloc-2048 2048 6 82 1038 0 8 180224 0 malloc-128 128 1135 260 25273 0 126 178560 0 FFS2 dinode 256 562 128 2495 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 8 508 1197 0 254 165120 0 FPU_save_area 832 154 44 5003 0 16 164736 0 malloc-32768 32768 5 0 5 0 1 163840 0 MAP ENTRY 96 1123 515 64415 0 126 157248 0 malloc-1024 1024 122 22 149 0 16 147456 0 S VFS Cache 104 1018 386 2984 0 126 146016 0 malloc-65536 65536 0 2 64 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 0 2 8 0 1 131072 0 malloc-32768 32768 2 2 13 0 1 131072 0 mbuf_packet 256 0 508 2092 0 254 130048 0 PROC 1376 55 33 1868 0 8 121088 0 ksiginfo 112 64 980 3922 0 126 116928 0 filedesc0 1072 55 29 2827 0 8 90048 0 UMA Kegs 384 224 9 224 0 30 89472 0 syncache 168 0 528 6 0 254 88704 0 128 Bucket 1024 48 35 295 0 16 84992 0 malloc-256 256 226 89 1207 0 62 80640 0 g_bio 408 0 180 5197 0 30 73440 0 64 Bucket 512 79 57 2683 0 30 69632 0 malloc-64 64 514 557 1573 0 254 68544 0 malloc-128 128 391 136 1531 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-16384 16384 4 0 5 0 1 65536 0 malloc-8192 8192 8 0 9 0 1 65536 0 malloc-4096 4096 14 2 22 0 2 65536 0 malloc-256 256 165 90 518 0 62 65280 0 malloc-256 256 98 157 1244 0 62 65280 0 malloc-64 64 292 527 77489 0 254 52416 0 malloc-64 64 488 331 967 0 254 52416 0 malloc-128 128 218 185 2828 0 126 51584 0 malloc-256 256 81 114 445 0 62 49920 0 32 Bucket 256 71 124 18462 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 20241 0 16 49152 0 malloc-8192 8192 4 2 30 0 1 49152 0 malloc-8192 8192 5 1 7 0 1 49152 0 malloc-1024 1024 7 41 1569 0 16 49152 0 VMSPACE 584 34 50 1849 0 16 49056 0 malloc-384 384 73 47 77 0 30 46080 0 PWD 40 17 1094 1090 0 254 44440 0 malloc-4096 4096 4 6 574 0 2 40960 0 pcpu-8 8 4738 382 5040 0 254 40960 0 pipe 736 19 36 379 0 16 40480 0 da_ccb 544 0 70 1524 0 16 38080 0 udp_inpcb 408 6 84 180 0 30 36720 0 malloc-64 64 68 499 2850 0 254 36288 0 malloc-64 64 173 394 2586 0 254 36288 0 malloc-64 64 8 559 75 0 254 36288 0 malloc-64 64 40 527 43 0 254 36288 0 malloc-128 128 18 261 67 0 126 35712 0 malloc-128 128 61 218 3316 0 126 35712 0 malloc-128 128 81 198 863 0 126 35712 0 malloc-128 128 78 201 2166 0 126 35712 0 routing nhops 256 26 109 37 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-256 256 104 31 1385 0 62 34560 0 malloc-256 256 9 126 2970 0 62 34560 0 TURNSTILE 136 169 83 169 0 62 34272 0 malloc-2048 2048 12 4 25 0 8 32768 0 malloc-2048 2048 8 8 24 0 8 32768 0 malloc-2048 2048 11 5 67 0 8 32768 0 malloc-2048 2048 0 16 50 0 8 32768 0 malloc-1024 1024 3 29 43 0 16 32768 0 malloc-1024 1024 3 29 160 0 16 32768 0 malloc-1024 1024 18 14 22 0 16 32768 0 malloc-1024 1024 20 12 20 0 16 32768 0 malloc-1024 1024 2 30 22 0 16 32768 0 malloc-512 512 1 63 111 0 30 32768 0 malloc-512 512 15 49 28 0 30 32768 0 malloc-512 512 1 63 19 0 30 32768 0 malloc-512 512 2 62 49 0 30 32768 0 malloc-512 512 2 62 26 0 30 32768 0 pcpu-64 64 496 16 496 0 254 32768 0 ertt_txseginfo 40 1 807 2017 0 254 32320 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 24 240 68 0 126 31680 0 clpbuf 2624 0 12 73 0 4 31488 0 malloc-32 32 381 501 718 0 254 28224 0 16 Bucket 144 55 141 359 0 62 28224 0 4 Bucket 48 6 582 14 0 254 28224 0 AIO 208 0 133 958 0 62 27664 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-8192 8192 1 2 82 0 1 24576 0 rtentry 168 29 115 37 0 62 24192 0 Files 80 119 181 9503 0 126 24000 0 8 Bucket 80 50 250 806 0 126 24000 0 tcp_inpcb 1304 6 12 13 0 8 23472 0 malloc-384 384 7 53 7 0 30 23040 0 malloc-384 384 0 60 343 0 30 23040 0 malloc-384 384 2 58 3 0 30 23040 0 malloc-384 384 41 19 461 0 30 23040 0 malloc-384 384 2 58 28 0 30 23040 0 ripcb 376 1 59 7 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 169 87 169 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 6 274 13 0 126 20160 0 malloc-32 32 44 586 531 0 254 20160 0 malloc-32 32 69 561 2001 0 254 20160 0 malloc-32 32 109 521 144 0 254 20160 0 malloc-32 32 81 549 128 0 254 20160 0 malloc-32 32 27 603 2704 0 254 20160 0 2 Bucket 32 61 569 402 0 254 20160 0 KNOTE 160 6 119 1179 0 62 20000 0 AIOLIO 272 0 70 958 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 0 2 19 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 5 0 2 16384 0 malloc-4096 4096 1 3 203 0 2 16384 0 malloc-2048 2048 4 4 4 0 8 16384 0 malloc-2048 2048 1 7 192 0 8 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 0 32 1 0 30 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 sctp_laddr 48 0 336 16 0 254 16128 0 kenv 258 17 43 1065 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 13 365 32 0 254 12096 0 malloc-16 16 20 730 1010 0 254 12000 0 malloc-16 16 74 676 293 0 254 12000 0 malloc-16 16 59 691 231 0 254 12000 0 malloc-16 16 223 527 5432 0 254 12000 0 malloc-16 16 9 741 9 0 254 12000 0 malloc-16 16 262 488 264 0 254 12000 0 malloc-16 16 14 736 24805 0 254 12000 0 malloc-4096 4096 0 2 2 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 6276 0 254 8016 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 sctp_ep 1152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcp_log 416 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb 408 0 0 0 0 30 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOCB 552 0 0 0 0 16 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 final repro crashed as (corrupted=false): Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xffffffffffffffff fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff8156b658 stack pointer = 0x28:0xfffffe00575ba760 frame pointer = 0x28:0xfffffe00575ba8a0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = resume, IOPL = 0 current process = 1868 (syz-executor) rdi: ffffffffffffffff rsi: 0000003420000000 rdx: 0000000000000001 rcx: fffffe00033eee30 r8: 0000000000000000 r9: 0000000000000034 rax: fffffe00033eee30 rbx: 00000039d89ea9a4 rbp: fffffe00575ba8a0 r10: 100bc12dc869f15f r11: 0000000000000017 r12: ffffffffffffffff r13: 0000003410b9775b r14: ffffffffffffffff r15: 0000003420000000 trap number = 12 panic: page fault cpuid = 0 time = 1745875862 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575b9f90 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00575ba0f0 vpanic() at vpanic+0x257/frame 0xfffffe00575ba2b0 panic() at panic+0xb5/frame 0xfffffe00575ba370 trap_pfault() at trap_pfault+0xaec/frame 0xfffffe00575ba4b0 trap() at trap+0x78e/frame 0xfffffe00575ba690 calltrap() at calltrap+0x8/frame 0xfffffe00575ba690 --- trap 0xc, rip = 0xffffffff8156b658, rsp = 0xfffffe00575ba760, rbp = 0xfffffe00575ba8a0 --- callout_process() at callout_process+0x238/frame 0xfffffe00575ba8a0 handleevents() at handleevents+0x3ee/frame 0xfffffe00575ba910 timercb() at timercb+0x3cb/frame 0xfffffe00575ba9d0 lapic_handle_timer() at lapic_handle_timer+0x17f/frame 0xfffffe00575baa10 Xtimerint() at Xtimerint+0xb1/frame 0xfffffe00575baa10 --- interrupt, rip = 0xffffffff815aa565, rsp = 0xfffffe00575baae0, rbp = 0xfffffe00575bab00 --- kasan_copyin() at kasan_copyin+0xb5/frame 0xfffffe00575bab00 umtx_copyin_umtx_time() at umtx_copyin_umtx_time+0x6c/frame 0xfffffe00575bab30 __umtx_op_wait_uint_private() at __umtx_op_wait_uint_private+0xc6/frame 0xfffffe00575bac10 sys__umtx_op() at sys__umtx_op+0x1fd/frame 0xfffffe00575bad10 amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00575baf30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00575baf30 --- syscall (454, FreeBSD ELF64, _umtx_op), rip = 0x32f68c, rsp = 0x8205109f8, rbp = 0x820510a20 --- KDB: enter: panic [ thread pid 1868 tid 100151 ] Stopped at kdb_enter+0x6e: movq $0,0x25be387(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0xdffff7c000000000 rbx 0xffffffff827a7620 .str.27 rsp 0xfffffe00575ba0d0 rbp 0xfffffe00575ba0f0 rsi 0 rdi 0xffffffff830004c0 panicstr r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe005492a740 r13 0xfffffffffffffffe r14 0xffffffff827a7620 .str.27 r15 0 rip 0xffffffff815fce0e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25be387(%rip) db> show proc Process 1868 (syz-executor) at 0xfffffe0054924ae0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 835 at 0xfffffe00548d6560 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe005490fdb0 (map 0xfffffe005490fdb0) (map.pmap 0xfffffe005490fe50) (pmap 0xfffffe005490fec0) threads: 2 100151 Run CPU 0 syz-executor 101124 RunQ syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1868 835 835 0 R (threaded) syz-executor 100151 Run CPU 0 syz-executor 101124 RunQ syz-executor 1867 809 424 0 S nanslp 0xffffffff83b9c501 sleep 1861 853 853 0 R (threaded) syz-executor 101056 RunQ syz-executor 101120 RunQ syz-executor 101125 RunQ syz-executor 1858 849 849 0 R (threaded) syz-executor 101028 RunQ syz-executor 101118 RunQ syz-executor 899 0 0 0 DL aiordy 0xfffffe00548e3ae0 [aiod4] 898 0 0 0 DL aiordy 0xfffffe00548e4040 [aiod3] 897 0 0 0 DL aiordy 0xfffffe00548e45a0 [aiod2] 896 0 0 0 DL aiordy 0xfffffe00548e4b00 [aiod1] 857 774 857 0 R CPU 1 syz-executor 853 774 853 0 R syz-executor 849 774 849 0 R syz-executor 835 774 835 0 R syz-executor 809 803 424 0 S wait 0xfffffe00548d85a0 sh 803 424 424 0 S wait 0xfffffe0054913000 sh 774 773 771 0 S select 0xfffffe006e6ef640 syz-executor 773 771 771 0 S (threaded) syz-execprog 100111 S uwait 0xfffffe0059e80400 syz-execprog 100112 S uwait 0xfffffe0059e66480 syz-execprog 100113 S uwait 0xfffffe006e6ef700 syz-execprog 100114 S kqread 0xfffffe0008bf4700 syz-execprog 100115 S uwait 0xfffffe006e6ef900 syz-execprog 100116 S uwait 0xfffffe006e6efa00 syz-execprog 100117 S uwait 0xfffffe0059e80500 syz-execprog 100118 S uwait 0xfffffe0059ec2e00 syz-execprog 771 769 771 0 Ss pause 0xfffffe00548d9670 csh 769 682 769 0 Ss select 0xfffffe006e6efe40 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0007ff78b0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058dcf8b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0007ff68b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dcfcb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dd00b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058dd04b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dd08b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0058dd0cb0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0058dd10b0 getty 738 1 18 0 S+ piperd 0xfffffe005a05bcc0 logger 737 736 18 0 S+ nanslp 0xffffffff83b9c500 sleep 736 1 18 0 S+ wait 0xfffffe00548e3020 sh 686 1 686 0 Ss nanslp 0xffffffff83b9c501 cron 682 1 682 0 Ss select 0xfffffe006e6f00c0 sshd 495 1 495 0 Ss select 0xfffffe006e6f0140 syslogd 424 1 424 0 Ss wait 0xfffffe0054805060 devd 423 1 423 65 Ss select 0xfffffe0059f0d3c0 dhclient 338 1 338 0 Ss select 0xfffffe0059e66640 dhclient 335 1 335 0 Ss select 0xfffffe0059e665c0 dhclient 17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb8360 [bufdaemon] 100081 D - 0xffffffff83002140 [bufspacedaemon-0] 100093 D sdflush 0xfffffe0059ed78e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100078 RunQ [dom0] 100082 D launds 0xffffffff83ce9304 [laundry: dom0] 100083 D umarcl 0xffffffff81dc63e0 [uma] 7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84518850 [pf purge] 5 0 0 0 DL waiting 0xffffffff847de5c0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e4340 [doneq0] 100047 D - 0xffffffff838e42c0 [async] 100076 D - 0xffffffff838e4140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce4b00 [crypto] 100044 D crypto_ 0xfffffe005856d030 [crypto returns 0] 100045 D crypto_ 0xfffffe005856d080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00547f6088 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b44f00 [g_event] 100038 D - 0xffffffff83b44f20 [g_up] 100039 D - 0xffffffff83b44f40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c29ff0 [swapper] 100005 D - 0xfffffe0008bf7d00 [softirq_0] 100006 D - 0xfffffe0008bf7c00 [softirq_1] 100007 D - 0xfffffe0008bf7b00 [if_io_tqg_0] 100008 D - 0xfffffe0008bf7a00 [if_io_tqg_1] 100009 D - 0xfffffe0008bf7900 [if_config_tqg_0] 100010 D - 0xfffffe0008bf7800 [kqueue_ctx taskq] 100011 D - 0xfffffe0008bf7700 [jail_remove taskq] 100012 D - 0xfffffe0008bf7600 [bus taskq] 100015 D - 0xfffffe0008bf7300 [thread taskq] 100017 D - 0xfffffe0008bf7100 [aiod_kick taskq] 100018 D - 0xfffffe0008bf7000 [deferred_unmount ta] 100019 D - 0xfffffe0008bf6e00 [inm_free taskq] 100020 D - 0xfffffe0008bf6d00 [in6m_free taskq] 100021 D - 0xfffffe0008bf6c00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008bf6900 [firmware taskq] 100041 D - 0xfffffe0008bf6600 [crypto_0] 100042 D - 0xfffffe0008bf6600 [crypto_1] 100057 D - 0xfffffe0008bf6400 [vtnet0 rxq 0] 100058 D - 0xfffffe0008bf6300 [vtnet0 txq 0] 100059 D - 0xfffffe0008bf6200 [vtnet0 rxq 1] 100060 D - 0xfffffe0008bf6100 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0058586680 [virtio_balloon] 100066 D - 0xffffffff827ac960 [deadlkres] 100070 D - 0xfffffe0058f59b00 [acpi_task_0] 100071 D - 0xfffffe0058f59b00 [acpi_task_1] 100072 D - 0xfffffe0058f59b00 [acpi_task_2] 100074 D - 0xfffffe0008bf8100 [mca taskq] 100075 D - 0xfffffe0008bf6500 [CAM taskq] 100077 D - 0xfffffe0008bf5e00 [ipsec_offload] db> show all locks db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5059K 486 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 34854 2053K 34929 vtbuf 24 1968K 46 newblk 1856 1488K 2874 kobj 331 1324K 495 vfscache 3 1025K 3 inodedep 1062 910K 2042 pcb 23 669K 56 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 144 254K 1958 dirrem 984 246K 1960 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54426 vmem 5 144K 7 tidhash 3 141K 3 pagedep 48 140K 1019 tfo_ccache 1 128K 1 IP reass 1 128K 1 freefile 967 121K 1933 filedesc 16 121K 2062 DEVFS1 110 110K 129 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 umtx 336 42K 336 kdtrace 209 42K 2995 temp 35 37K 1956 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 128 32K 139 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 ifaddr 66 19K 77 LRO 18 19K 20 BPF 14 19K 15 ufs_mount 4 17K 5 proc 3 17K 3 routetbl 141 17K 482 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 51 ifnet 7 13K 8 ether_multi 152 13K 190 kenv 95 12K 95 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 437 mkdir 72 9K 2018 rpc 8 9K 8 in6_multi 65 9K 75 bmsafemap 3 9K 2008 plimit 22 9K 437 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 diradd 62 8K 2005 audit_evclass 239 8K 301 taskqueue 69 8K 69 kqueue 58 7K 1876 sglist 6 7K 6 cred 24 6K 279 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 pf_ifnet 12 5K 25 newdirblk 38 5K 1009 ufs_dirhash 24 5K 24 UMA 266 5K 266 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 acpisem 28 4K 28 pwddesc 55 4K 2827 proc-args 81 3K 2989 terminal 11 3K 11 selfd 41 3K 60332 indirdep 10 3K 10 session 20 3K 50 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 9 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 16 sctp_ifa 13 2K 16 Unitno 26 2K 54 CAM XPT 22 2K 543 lockf 15 2K 22 in_multi 6 2K 9 tun 4 2K 5 toponodes 6 2K 6 ipsecpolicy 2 2K 2 msi 9 2K 9 netlink 2 2K 91 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 select 8 1K 36 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 16 ipsec 3 1K 3 mld 6 1K 7 CC Mem 6 1K 13 igmp 6 1K 7 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 4 encap_export_host 12 1K 12 osd 11 1K 29 cdev 2 1K 2 DEVFSP 8 1K 44 lkpikmalloc 8 1K 9 inpcbpolicy 13 1K 200 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 filecaps 7 1K 81 tcpfunc 3 1K 3 loginclass 3 1K 7 prison 6 1K 6 cryptodev 2 1K 49 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 procdesc 1 1K 10 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3344 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 57 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 993 p1003.1b 1 1K 1 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 14 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 14 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 mqdata 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 filemon 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 16 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 3 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freeblks 0 0K 992 freefrag 0 0K 38 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 2 ipsecrequest 0 0K 0 ip6opt 0 0K 6 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 202 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 35 lio 0 0K 958 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 17119 ioctlops 0 0K 99 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 657 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 kcovinfo 0 0K 30 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 24276 0 254 38494208 0 mbuf 256 8617 1045 36863 0 254 2473472 0 BUF TRIE 152 304 11500 1143 0 62 1794208 0 malloc-128 128 13325 160 14343 0 126 1726080 0 malloc-384 384 4157 43 4170 0 30 1612800 0 malloc-4096 4096 332 2 498 0 2 1368064 0 UMA Slabs 0 112 10926 12 10926 0 126 1225056 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 malloc-65536 65536 13 1 16 0 1 917504 0 vmem btag 56 16116 51 16116 0 254 905352 0 RADIX NODE 152 4596 989 56620 0 62 848920 0 FFS inode 1168 562 33 2496 0 8 694960 0 socket 1024 22 486 1425 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 malloc-256 256 1878 57 3013 0 62 495360 0 malloc-384 384 1150 20 2132 0 30 449280 0 malloc-4096 4096 74 8 1955 0 2 335872 0 VM OBJECT 264 1065 165 26169 0 30 324720 0 THREAD 1824 152 16 1125 0 8 306432 0 VNODE 440 598 95 2535 0 30 304920 0 256 Bucket 2048 118 18 927 0 8 278528 0 malloc-64 64 3941 154 5775 0 254 262080 0 malloc-256 256 988 17 3035 0 62 257280 0 malloc-16 16 14371 379 14454 0 254 236000 0 malloc-2048 2048 103 9 134 0 8 229376 0 DEVCTL 1024 34 186 159 0 0 225280 0 malloc-65536 65536 3 0 3 0 1 196608 0 malloc-16384 16384 7 5 1212 0 1 196608 0 UMA Zones 768 238 1 238 0 16 183552 0 malloc-32 32 5339 331 6387 0 254 181440 0 malloc-2048 2048 6 82 1038 0 8 180224 0 malloc-128 128 1135 260 25273 0 126 178560 0 FFS2 dinode 256 562 128 2495 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 8 508 1197 0 254 165120 0 FPU_save_area 832 154 44 5003 0 16 164736 0 malloc-32768 32768 5 0 5 0 1 163840 0 MAP ENTRY 96 1123 515 64415 0 126 157248 0 malloc-1024 1024 122 22 149 0 16 147456 0 S VFS Cache 104 1018 386 2984 0 126 146016 0 malloc-65536 65536 0 2 64 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 0 2 8 0 1 131072 0 malloc-32768 32768 2 2 13 0 1 131072 0 mbuf_packet 256 0 508 2092 0 254 130048 0 PROC 1376 55 33 1868 0 8 121088 0 ksiginfo 112 64 980 3922 0 126 116928 0 filedesc0 1072 55 29 2827 0 8 90048 0 UMA Kegs 384 224 9 224 0 30 89472 0 syncache 168 0 528 6 0 254 88704 0 128 Bucket 1024 48 35 295 0 16 84992 0 malloc-256 256 226 89 1207 0 62 80640 0 g_bio 408 0 180 5197 0 30 73440 0 64 Bucket 512 79 57 2683 0 30 69632 0 malloc-64 64 514 557 1573 0 254 68544 0 malloc-128 128 391 136 1531 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-16384 16384 4 0 5 0 1 65536 0 malloc-8192 8192 8 0 9 0 1 65536 0 malloc-4096 4096 14 2 22 0 2 65536 0 malloc-256 256 165 90 518 0 62 65280 0 malloc-256 256 98 157 1244 0 62 65280 0 malloc-64 64 292 527 77489 0 254 52416 0 malloc-64 64 488 331 967 0 254 52416 0 malloc-128 128 218 185 2828 0 126 51584 0 malloc-256 256 81 114 445 0 62 49920 0 32 Bucket 256 71 124 18462 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 20241 0 16 49152 0 malloc-8192 8192 4 2 30 0 1 49152 0 malloc-8192 8192 5 1 7 0 1 49152 0 malloc-1024 1024 7 41 1569 0 16 49152 0 VMSPACE 584 34 50 1849 0 16 49056 0 malloc-384 384 73 47 77 0 30 46080 0 PWD 40 17 1094 1090 0 254 44440 0 malloc-4096 4096 4 6 574 0 2 40960 0 pcpu-8 8 4738 382 5040 0 254 40960 0 pipe 736 19 36 379 0 16 40480 0 da_ccb 544 0 70 1524 0 16 38080 0 udp_inpcb 408 6 84 180 0 30 36720 0 malloc-64 64 68 499 2850 0 254 36288 0 malloc-64 64 173 394 2586 0 254 36288 0 malloc-64 64 8 559 75 0 254 36288 0 malloc-64 64 40 527 43 0 254 36288 0 malloc-128 128 18 261 67 0 126 35712 0 malloc-128 128 61 218 3316 0 126 35712 0 malloc-128 128 81 198 863 0 126 35712 0 malloc-128 128 78 201 2166 0 126 35712 0 routing nhops 256 26 109 37 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-256 256 104 31 1385 0 62 34560 0 malloc-256 256 9 126 2970 0 62 34560 0 TURNSTILE 136 169 83 169 0 62 34272 0 malloc-2048 2048 12 4 25 0 8 32768 0 malloc-2048 2048 8 8 24 0 8 32768 0 malloc-2048 2048 11 5 67 0 8 32768 0 malloc-2048 2048 0 16 50 0 8 32768 0 malloc-1024 1024 3 29 43 0 16 32768 0 malloc-1024 1024 3 29 160 0 16 32768 0 malloc-1024 1024 18 14 22 0 16 32768 0 malloc-1024 1024 20 12 20 0 16 32768 0 malloc-1024 1024 2 30 22 0 16 32768 0 malloc-512 512 1 63 111 0 30 32768 0 malloc-512 512 15 49 28 0 30 32768 0 malloc-512 512 1 63 19 0 30 32768 0 malloc-512 512 2 62 49 0 30 32768 0 malloc-512 512 2 62 26 0 30 32768 0 pcpu-64 64 496 16 496 0 254 32768 0 ertt_txseginfo 40 1 807 2017 0 254 32320 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 24 240 68 0 126 31680 0 clpbuf 2624 0 12 73 0 4 31488 0 malloc-32 32 381 501 718 0 254 28224 0 16 Bucket 144 55 141 359 0 62 28224 0 4 Bucket 48 6 582 14 0 254 28224 0 AIO 208 0 133 958 0 62 27664 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-8192 8192 1 2 82 0 1 24576 0 rtentry 168 29 115 37 0 62 24192 0 Files 80 119 181 9503 0 126 24000 0 8 Bucket 80 50 250 806 0 126 24000 0 tcp_inpcb 1304 6 12 13 0 8 23472 0 malloc-384 384 7 53 7 0 30 23040 0 malloc-384 384 0 60 343 0 30 23040 0 malloc-384 384 2 58 3 0 30 23040 0 malloc-384 384 41 19 461 0 30 23040 0 malloc-384 384 2 58 28 0 30 23040 0 ripcb 376 1 59 7 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 169 87 169 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 6 274 13 0 126 20160 0 malloc-32 32 44 586 531 0 254 20160 0 malloc-32 32 69 561 2001 0 254 20160 0 malloc-32 32 109 521 144 0 254 20160 0 malloc-32 32 81 549 128 0 254 20160 0 malloc-32 32 27 603 2704 0 254 20160 0 2 Bucket 32 61 569 402 0 254 20160 0 KNOTE 160 6 119 1179 0 62 20000 0 AIOLIO 272 0 70 958 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 0 2 19 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 5 0 2 16384 0 malloc-4096 4096 1 3 203 0 2 16384 0 malloc-2048 2048 4 4 4 0 8 16384 0 malloc-2048 2048 1 7 192 0 8 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 0 32 1 0 30 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 sctp_laddr 48 0 336 16 0 254 16128 0 kenv 258 17 43 1065 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 13 365 32 0 254 12096 0 malloc-16 16 20 730 1010 0 254 12000 0 malloc-16 16 74 676 293 0 254 12000 0 malloc-16 16 59 691 231 0 254 12000 0 malloc-16 16 223 527 5432 0 254 12000 0 malloc-16 16 9 741 9 0 254 12000 0 malloc-16 16 262 488 264 0 254 12000 0 malloc-16 16 14 736 24805 0 254 12000 0 malloc-4096 4096 0 2 2 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 6276 0 254 8016 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 sctp_ep 1152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcp_log 416 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb 408 0 0 0 0 30 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOCB 552 0 0 0 0 16 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0