Extracting prog: 16m5.085062748s Minimizing prog: 1h6m41.787563193s Simplifying prog options: 4m13.831428302s Extracting C: 55.763543388s Simplifying C: 0s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-ftruncate-open$dir-setsockopt$sock_splice-mmap-mmap-mlock-msync-socket$inet_udplite-socketpair$unix-dup2-socket$inet6_icmp_raw-connect$inet6-open$dir-sendfile detailed listing: executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ktimer_create-open-ftruncate-open$dir-preadv-shm_unlink-ktimer_settime-ktimer_gettime-socket$inet6_sctp-syz_emit_ethernet-socket-socket-open$dir-open$dir-symlinkat-mkdirat-rename-open$dir-symlinkat-open$dir-symlinkat-rename-unlink-rename-open$dir-setresuid-chroot-rename-rename-open$dir detailed listing: executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ksem_init-ksem_wait-ksem_wait-ksem_post detailed listing: executing program 0: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): kevent-socket$inet-openat-aio_write-open-socket$inet_udplite-mlockall-mmap-rfork-sync-setsockopt$inet_tcp_TCP_FUNCTION_BLK-getsockopt$inet6_sctp_SCTP_MAXSEG-openat$ptmx-socket-ktimer_delete-ioctl$OPIO_KEYMAP-kqueue-kevent-mlockall-setsockopt$sock_int-openat$ptmx-read-ioctl$DIOCRADDADDRS-bind$inet-connect$inet-accept$inet6-connect$inet6-fork-socket$inet6_udp-setsockopt$inet6_group_source_req detailed listing: executing program 0: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 22, 2, 22, 30, 29, 7, 29, 18, 2, 17, 30, 1, 30, 29, 40, 30, 30, 13, 2, 12, 4, 30, 15] detailed listing: executing program 1: symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x4, 0x0, 0x101, 0x7]}], 0x1, 0x0, 0x0, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$CIOCGSESSION2(r1, 0xc030636a, &(0x7f0000000000)={0x29, 0x0, 0x10, &(0x7f0000000040)="72e8789fa2e77d9bcf47eaa3c96be443", 0x0, 0x0, 0x0, 0x7d32559c, [0x8, 0x0, 0x0, 0x60]}) ioctl$CIOCCRYPT(r1, 0xc01c6367, &(0x7f0000000700)={0x0, 0x1, 0x0, 0x3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x188, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x1f, &(0x7f00000001c0)=0x6, 0x4) sendto$inet(r3, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendto(r3, 0x0, 0x0, 0x20000, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2, 0xc25a, @rand_addr="14c9aff4fabe0fef28529d00b7c9ff29", 0x8}, 0x1c) sendmsg$unix(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYBLOB="28bec22fdb2842907f1235c0c53753a1a410f89f17b95de5fdff72029dc53aaecf74c70ad6e7d1c81d02ec9169071ee549b38dea6b1c8a83c6613cdc6aaed03013cd7974e63164e60b254df1244837d70e7cd55cea45715da9ceefdb0730535da34e2b1a7242b56e41081b84a128f8bdbafed2d09629c8ab1512806385e56ead2b3c4c107f468c94b5c720066b83c586a48680cf", @ANYRES32, @ANYRES16=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="44d390b2e8a5465ad4490cb290552564aee253241a928282eefb43633b", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x100, 0x20081}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r4) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) extattr_get_fd(r5, 0x2, &(0x7f00000002c0)='\xb4\xfb\xb4\x9a\x10\r\xb6F<', 0x0, 0x0) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r6, 0x0) executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x17, 0x20000000, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_fhstatfs(0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r4 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r4}) wait4(r4, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, r5, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x17, 0x20000000, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_fhstatfs(0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r4 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r4}) wait4(r4, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fhlinkat(&(0x7f0000000280)={{[0x2, 0x3]}, {0x5, 0x2, "b45300"}}, r5, 0x0) executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x17, 0x20000000, 0x7) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000040)="b100050400000000000708000101000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c500000002000000000000020208a371a3f80004000000000000000100000000000000100000", 0xb1, 0x20009, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_fhstatfs(0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="a74e672ef6ee45db1890836f21edd4e47326c14ff92f795c46548d909244403dce6510b74c5ffc5b0d891b6d7d58f10336e8ce3bcdfb8c300245c62eabe3712acf249197e2a59507d63edc923d12d1cfc0218d9b9f24b9539aa70e31e98682d53bf4f02bb24e73ffbba53923949e681475c645dfc6be03886dd59202eb", 0x7d}], 0x1}, 0x0) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x103, 0x1) chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0) close(r5) truncate(&(0x7f0000000040)='./file0\x00', 0x3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00'], 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) r7 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x101, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r7}) wait4(r7, 0x0, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) executing program 1: socket(0x1c, 0x1, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x62) writev(r1, &(0x7f0000000340), 0x0) clock_gettime(0x96ac322769254c0f, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x188) getpgrp(0x0) r2 = open(0x0, 0x8000, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={&(0x7f0000000080)="f0825b329dc4e108545599720c260faea43565ffffffc4e17e1110f26f8fe818a3c3008fe978d671fef20f5f31c4e37d083fb8", 0x0}}}) (fail_nth: 1) mlockall(0x2) cpuset_getdomain(0x3, 0x2, 0x100000000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x1e, &(0x7f0000000300)={0x0, 0x3, 0x9b}, &(0x7f00000003c0)=0x8) setresuid(0xee00, 0x0, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) setpriority(0x1, 0xffffffff, 0xef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x60000000) sync() setsockopt$inet6_group_source_req(r0, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x0, 0x2, @rand_addr="65cb30df060000000b603666ab2f3df4", 0x140}}, {{0x1c, 0x1c, 0x1, 0x0, @mcast1, 0x3}}}, 0xfc) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) munlockall() fork() msync(&(0x7f0000a60000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) munmap(&(0x7f0000a37000/0x1000)=nil, 0x1000) executing program 3: procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setitimer(0x2, &(0x7f0000000080)={{0x1c, 0x8}, {0x6000000000000}}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000280)) syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff7fffff0800460000200000000000019078ac1400bbf96400bb890300001000907800000634"]) r1 = getpgrp(0x0) procctl$PROC_REAP_STATUS(0x0, r1, 0x4, &(0x7f0000000000)) executing program 3: socket(0x1c, 0x1, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x62) writev(r1, &(0x7f0000000340), 0x0) clock_gettime(0x96ac322769254c0f, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x188) getpgrp(0x0) r2 = open(0x0, 0x8000, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (fail_nth: 1) aio_write(&(0x7f0000000240)={r3, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={&(0x7f0000000080)="f0825b329dc4e108545599720c260faea43565ffffffc4e17e1110f26f8fe818a3c3008fe978d671fef20f5f31c4e37d083fb8", 0x0}}}) mlockall(0x2) cpuset_getdomain(0x3, 0x2, 0x100000000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x1e, &(0x7f0000000300)={0x0, 0x3, 0x9b}, &(0x7f00000003c0)=0x8) setresuid(0xee00, 0x0, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) setpriority(0x1, 0xffffffff, 0xef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x60000000) sync() setsockopt$inet6_group_source_req(r0, 0x29, 0xc, &(0x7f0000000080)={0x7ff, {{0x1c, 0x1c, 0x0, 0x2, @rand_addr="65cb30df060000000b603666ab2f3df4", 0x140}}, {{0x1c, 0x1c, 0x1, 0x0, @mcast1, 0x3}}}, 0xfc) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) munlockall() fork() msync(&(0x7f0000a60000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) munmap(&(0x7f0000a37000/0x1000)=nil, 0x1000) executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) (async, rerun: 32) semop(r2, &(0x7f0000001240)=[{0x3}], 0x1) (async, rerun: 32) __semctl$SETVAL(r2, 0x1, 0x8, &(0x7f0000000040)=0x0) (async) sigaction(0x9, &(0x7f0000000240)={0x0, 0x6, {[0x2, 0x4f, 0xfc5, 0x80]}}, &(0x7f0000000300)={0x0}) (async) getfhat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) aio_waitcomplete(0x0, &(0x7f0000000600)={0x0, 0x4c2}) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000200)) (async, rerun: 32) r3 = fork() (async, rerun: 32) setreuid(0xee01, 0x0) rtprio(0x1, r3, &(0x7f0000000040)={0x4, 0xb}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000280)={0x8, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x800, 0xe6, 0x3, 0xdb4, 0x0, [0x5, 0x7fffffff, 0xd, 0x1f, 0x7, 0x40, 0x0, 0x1, 0x5, 0x6, 0x7, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x401, 0xb0c, 0x1, 0x6, 0x4dc, 0x10002, 0x9, 0x1, 0x100, 0x3, 0x9, 0x80de, 0x0, 0x7ff, 0xda8, 0x0, 0x80, 0x3, 0xfffff1e3, 0x1a1c, 0x7, 0x9de, 0x4, 0x81, 0x58c3, 0x3e, 0x1, 0x2000400, 0xffff01f5, 0x7fff, 0xfffffff7, 0x3ff, 0x1f, 0x5, 0x5, 0x2, 0x7f, 0x1f4, 0x6, 0x400, 0xfffffffd, 0x2, 0xc41, 0xe8ea, 0x100, 0xfffd, 0x0, 0x3, 0xa3f5, 0x1b4146a1, 0x7, 0x8, 0xfffffffd, 0x5, 0x10001, 0x4, 0x7, 0xffff, 0x5, 0x0, 0x8, 0x6, 0x100, 0x10000, 0x2, 0x8, 0x1, 0x3, 0x0, 0x99, 0x7ff, 0x9, 0x7ff, 0x0, 0x6, 0x5, 0x3, 0x7e, 0x8, 0x100, 0x101]}) (async) sendto$inet6(r0, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0xfffffff8, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0x40, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) fork() mount(&(0x7f0000000040)='ext2fs\x00', &(0x7f00000000c0)='./file1\x00', 0x4000044b, &(0x7f0000000100)="506b31c1a93ce9c25f958ab64ddd1f251851be4eac2c3dd5778f0059fd9d9e577f726b6c2a7d792e9aba3ff9dac96ba0b10fd41b8408ac6d63d5c4ff3f811bf0effa809a200636258f3e95293cf298781372") r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x0) mlockall(0x2) r4 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x80000}], 0x10}, 0x75f7385a28dbb509) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r3, 0x0) mlockall(0x2) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) executing program 1: mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0xe, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra, @enc_lim]}], @icmpv6=@ndisc_ra}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0xee01, 0xee00) lchown(0x0, 0x0, 0xffffffffffffffff) thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) mincore(&(0x7f0000e74000/0x1000)=nil, 0x1000, &(0x7f0000001100)=""/86) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r5 = shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="1a7b4fa5e0d9fd18a9b7de56e6cd17d06fdcc4bdb699fabb7d070d2b5a81460acd07e6891cfc11c151ccc85b1a75dd5654e41fa04c227be30084b8dfd6af0275cbcf2a81eb5e930c7a7b5598a36e52a095e23b6ab432c1e53548440800d077443f0000ab1f584235083e89010000000000000094587902fb3d92dc563f6dce7937b90a167ca4fad41ec180386699de46ecaf628d3733a90c97e87fb71968c237db866867251f28a0f26c308bebb172dfd5ff3c8371eb9a8214959946af6e8b12227af5dc757b0f8c7e65dbef8b9b085a4cea9a989280a20af72255d3378ef611ef80f999ae1e2eb0d6df4a2f76e306e0f473c9d384c8ece6d257ed52769edaf2519d5067afb240465dc8b991ccf8f465e2cc0800e1dbb017944984558933cc00507e5ff7fe2e53a4e2be6d73f03dd9947bbfb3f6d074b88d7f300af97999e273eceb812d3d9f125b48e69a14d0a63dee4c55f27c091c0000000000000000000000ac6351cd75e1b0a95b8e38c96e9b0a46a98a7a6c7faeba2a76dae3deaeb2a1fa1c8ae1cafd3efe9ab1374ee02673bf90a45921c4b1f59b2d4a7623bd5e7efa926bc84f39f8efa83bf20c3b777fceae9052fead207a1e1b32504ad3c884ce6f2d69a659a87ea7786dc6411153a980253a9b318377b0d367103d246d43587e94cd53400000000000000000000000000000a90262c857ac55b8bd5226a097cf0cdabb22ac4c578497af9a19cc96e683b08878f54fc660cfb96935f6d4", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="8eefde975b8d18cbfb72cc06eac718ac0114e28565b7dca512334384669e4aee25a6b633ffaef0d829346ab163eff40fa8af1ba999c1d94a7f9df47fc8043083b332c45ba7c7b95aac743a0b8ab984378637fb965fe43dae6a4ceae71e77a5c1755f9bffbd7c15e35d3150acd8291737c3cc99a42cc5822006678897f985c2c1431a43124b5e61c1c3305ca5b21a5ae6ab7cf696f3d75e75a93b3d7ddb2b7958057687d2705b3c29599a21314a53db4a6fad23e1507e1da2e643a3466504d31fd45d5d35b2108ed96aec29bd96f98ccbeda48cf8fc6f404214196ce23fe016c2443965f17cde0622a8cd74c184791be1e9ec2b526d23a673c7d129847af75afbeb209651a00f370311f3032ab86f8e6a509c6c855c9b1ef658b1adc091", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') executing program 3: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"df45187d7638f2f7bc836152843806587e7ee1bd3970459cb2cbee8401dfc33320b75ccfd729a25b38df20b45c678215f49f53e09510b4b6914adcbc90ab07184b0ad82cd7384ed6c40686e93601819fb0b534d30b825c4b6f32dd0aeb13594b1d5d6e18070f475c62040e767a1675dafa428bd4cd50ba75aa99251bd476be7ed22a9b2f9d35db8e7d6672a9caba297d7ca6d23a0605562b94441d0c29b7be1f9685a2536b2a38da8c2d5eb87f3c489a956ed8ee3698d520ef8089198bc3429a67e0865de9152749003cfcabeeda083606cd1decc8848d9ec57747f51da25acd9070f37b11ac8c6f031bea2d6ec44f4222f106f1fbb9711ecce444ef7ffb7edc53bef1149eadf39c6452d65c392c95425e281a6d68e8a449eab0e678af021a9b565da5ab53a4d452cc890b61412baaf8ebb313f553cbf95f715ee19e907bb0caed501e48a66509799b8257d03a7980794513eda1fe9483c9a7fe0d64bd813e7e4218d8fa8550d94e2341d21d7f410af62c9ea1827e6249af29ce2e96cfc6028576160b54a9622dc58b629276d399c1094a20683e8e091bd1ed2c7045a949309daf5aca74652701f4e26c2d530eef192c1b713216c8c677fff95d9104097a3da48d674e5fb106e6b1c79639a341f4191044ae3ae1dbc112f1c1574d3cf8fd148326dd4e7d73b6940978413f5198caa090c0a4541775bff5851e09f5d6bfc7bf5b4902a282709216bda29d6c6aa64446aaeead04633f0dcd83c4b87964564108220d13a1a11ddea1006ce04c6ab96362e9f7780b82e8627f9298430855b151bc2c8429fa6fc1c9486388103f62e96bcbd87fec7d2f8b460f5973493a987bbafe8200000000595a645af34a594644dd369be6c42dcc99d9306f5fd7f963675bfe9aa133b7ec8d578f21e878a5f29d56af3887f8b5bc09e1363848e7ad02a9b1a4ad1da369869cfc2123e13588d249b8c0aab32534c4b6f1fbce459ce19f75f5153107c2884c6740bc04843b3f844d147061f4ccbe71c0e27eb42a370756560ecd81ad1ded939926794889b64e42c16830c07c99325f0e69c9daeded96af750e3894b819592f9fe1a6ecb7a9b99253ba4e8b4673dd4b14c7da84bd4e020080f19d3d07031cb9501828b6fc6eae4e94717d8cd8d9bd7f4d16653d5ac50a53858493fd7a747e35868ad247ce1865f8397827bdb2ff4dbda235b81813214a96ffc7db32dee1656be4fa080b61aab0b70a0646ef2d98106742fc28efd8c4858c4464b2a3f2c3d9b9df3832af68b77ba8ad698eddae6c38d90709c11b4e962ae43ad62d987a7b292be9c00b44671a1fc6c921ef9a4653883602c38c1fba148f3f1e1117ba61e080eb3991d8e8205b8e999adf52ab01cec50ec27d4c11b100", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) executing program 2: r0 = kqueue() r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000080)=r2) write(r2, &(0x7f0000000100)="ce96e9fb588a6cde", 0x8) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$DIOCADDALTQV0(r2, 0xc100442d, &(0x7f0000000200)="6cf0359c911d2c22eb5127debab742d73c740de61e5ce4392fd924164b869deab1ce4ff15e4193b7cd8ce4efa5fb6274ef77bb890a12008ac5ea09b79d336816c33060bfb9e5b5") sendto$inet6(r3, &(0x7f0000002700)="010164f80c04449d", 0x8, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x19, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}, {0x0, 0xfffffffffffffffa, 0x67d957a8950cd6bc, 0x1000000, 0x80000000, 0x3, [0x3, 0x5, 0x6b, 0x2]}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp(0x1c, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) r5 = semget$private(0x0, 0x2, 0x8) __semctl$SETVAL(r5, 0x2467b7dcbef3a9b7, 0x8, &(0x7f0000000080)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10, 0x2, 0x3, @broadcast}}}, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1b, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$BIOCLOCK(r8, 0x2000427a) ioctl$BIOCGRTIMEOUT32(r8, 0x4008426e, &(0x7f0000000040)) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) executing program 2: r0 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x51, &(0x7f0000000400)={0x1005, {{0x1c, 0x1c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, 0x0}, 0x400c0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000004c0)={0x0, 0x0, 0x42, 0x0, 0x492b7, 0x8, 0x6, 0x0, 0x0, 0xfffbfffa, 0x0, [0x2, 0x0, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0xcf, 0x1, 0x1, 0xc, 0x0, 0xfffffffc, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e2, 0x1, 0xffffffff, 0x0, 0xff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x20, 0xfffffff7, 0x9ed, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fc, 0x43a, 0x3, 0x0, 0xffffd14c, 0x83, 0x0, 0xffffffff, 0xfffeffff, 0x0, 0x0, 0x1000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x81) shutdown(r3, 0x2) r4 = accept$inet(r3, 0x0, 0x0) sendfile(r0, r3, 0x2, 0x41, &(0x7f00000002c0)={&(0x7f0000000240)=[{&(0x7f0000000340)="8f5208b82ed6628b22e1a041f6a3fd787c052a9a2f57754f01ed822efc5de66765528fc4e152d80bc01865785283d60865da125f232dd940957c3188b6bffef65b70cc31d0fc5d375bcc7f849e321ff892d22f883bbf13bd460bfb5d5a10cc9df832c1d0d36a1a49a9cc4a36031845be749d75984092a9d329c1c527068eaa93188d855dd4708ec05582", 0x8a}, {&(0x7f0000000100)="4085967b3f479d8e1278a19654d5b6a27d6fdf6c2322a09b9bed1b6ae6cc7068be97a0d6ef8fc4398a7109b60253058788a82c4348bb847af2879739dbae35f5638701ea2c905f83a27e340f8a3354ba5d9a6ee574b7d9e6fb36a0cbc04ab24b9711557cfef66e7b11a3d4eb31aa60f06568f3d5d509eafbf437fd67", 0x7c}, {&(0x7f0000000180)="f6c6d7d9e81598d53baccf99d1c2eeaf5ef9d5485e00965446fcdc9a89240cf2facd078f216d5b14fa25e4bf83a7b9044861acffa647ecf97c113b7dcf7af099fca16d2ae0bf99b7768f50dd1961ac53b1442a6c2772f9275008f18c66c8d43892fe70e42d5919aff18011494120098cf046d7c9c8dd03164d103a0aecb0c137f1862fbf14fe0083aa20d78badb14e3d57b9ca4f444379a29ff8eaac5d815518b13822f27bb0738f4945e0025068b9fabde4", 0xb2}], 0x3, &(0x7f0000000040)}, &(0x7f0000000300), 0x18) ioctl$KDSETRAD(r4, 0x20044b43) truncate(&(0x7f0000000040)='./file0\x00', 0x4) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1b, 0x3, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 1) executing program 2: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program crashed: panic: failed to reclaim memory bisect: bisecting 24 programs bisect: split chunks (needed=false): <24> bisect: split chunk #0 of len 24 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 2, 17, 30, 1, 30, 29, 40, 30, 30, 13, 2, 12, 4, 30, 15] detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) (async, rerun: 32) semop(r2, &(0x7f0000001240)=[{0x3}], 0x1) (async, rerun: 32) __semctl$SETVAL(r2, 0x1, 0x8, &(0x7f0000000040)=0x0) (async) sigaction(0x9, &(0x7f0000000240)={0x0, 0x6, {[0x2, 0x4f, 0xfc5, 0x80]}}, &(0x7f0000000300)={0x0}) (async) getfhat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) aio_waitcomplete(0x0, &(0x7f0000000600)={0x0, 0x4c2}) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000200)) (async, rerun: 32) r3 = fork() (async, rerun: 32) setreuid(0xee01, 0x0) rtprio(0x1, r3, &(0x7f0000000040)={0x4, 0xb}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000280)={0x8, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x800, 0xe6, 0x3, 0xdb4, 0x0, [0x5, 0x7fffffff, 0xd, 0x1f, 0x7, 0x40, 0x0, 0x1, 0x5, 0x6, 0x7, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x401, 0xb0c, 0x1, 0x6, 0x4dc, 0x10002, 0x9, 0x1, 0x100, 0x3, 0x9, 0x80de, 0x0, 0x7ff, 0xda8, 0x0, 0x80, 0x3, 0xfffff1e3, 0x1a1c, 0x7, 0x9de, 0x4, 0x81, 0x58c3, 0x3e, 0x1, 0x2000400, 0xffff01f5, 0x7fff, 0xfffffff7, 0x3ff, 0x1f, 0x5, 0x5, 0x2, 0x7f, 0x1f4, 0x6, 0x400, 0xfffffffd, 0x2, 0xc41, 0xe8ea, 0x100, 0xfffd, 0x0, 0x3, 0xa3f5, 0x1b4146a1, 0x7, 0x8, 0xfffffffd, 0x5, 0x10001, 0x4, 0x7, 0xffff, 0x5, 0x0, 0x8, 0x6, 0x100, 0x10000, 0x2, 0x8, 0x1, 0x3, 0x0, 0x99, 0x7ff, 0x9, 0x7ff, 0x0, 0x6, 0x5, 0x3, 0x7e, 0x8, 0x100, 0x101]}) (async) sendto$inet6(r0, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0xfffffff8, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0x40, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) fork() mount(&(0x7f0000000040)='ext2fs\x00', &(0x7f00000000c0)='./file1\x00', 0x4000044b, &(0x7f0000000100)="506b31c1a93ce9c25f958ab64ddd1f251851be4eac2c3dd5778f0059fd9d9e577f726b6c2a7d792e9aba3ff9dac96ba0b10fd41b8408ac6d63d5c4ff3f811bf0effa809a200636258f3e95293cf298781372") r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x0) mlockall(0x2) r4 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x80000}], 0x10}, 0x75f7385a28dbb509) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r3, 0x0) mlockall(0x2) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) executing program 1: mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0xe, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra, @enc_lim]}], @icmpv6=@ndisc_ra}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0xee01, 0xee00) lchown(0x0, 0x0, 0xffffffffffffffff) thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) mincore(&(0x7f0000e74000/0x1000)=nil, 0x1000, &(0x7f0000001100)=""/86) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r5 = shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="1a7b4fa5e0d9fd18a9b7de56e6cd17d06fdcc4bdb699fabb7d070d2b5a81460acd07e6891cfc11c151ccc85b1a75dd5654e41fa04c227be30084b8dfd6af0275cbcf2a81eb5e930c7a7b5598a36e52a095e23b6ab432c1e53548440800d077443f0000ab1f584235083e89010000000000000094587902fb3d92dc563f6dce7937b90a167ca4fad41ec180386699de46ecaf628d3733a90c97e87fb71968c237db866867251f28a0f26c308bebb172dfd5ff3c8371eb9a8214959946af6e8b12227af5dc757b0f8c7e65dbef8b9b085a4cea9a989280a20af72255d3378ef611ef80f999ae1e2eb0d6df4a2f76e306e0f473c9d384c8ece6d257ed52769edaf2519d5067afb240465dc8b991ccf8f465e2cc0800e1dbb017944984558933cc00507e5ff7fe2e53a4e2be6d73f03dd9947bbfb3f6d074b88d7f300af97999e273eceb812d3d9f125b48e69a14d0a63dee4c55f27c091c0000000000000000000000ac6351cd75e1b0a95b8e38c96e9b0a46a98a7a6c7faeba2a76dae3deaeb2a1fa1c8ae1cafd3efe9ab1374ee02673bf90a45921c4b1f59b2d4a7623bd5e7efa926bc84f39f8efa83bf20c3b777fceae9052fead207a1e1b32504ad3c884ce6f2d69a659a87ea7786dc6411153a980253a9b318377b0d367103d246d43587e94cd53400000000000000000000000000000a90262c857ac55b8bd5226a097cf0cdabb22ac4c578497af9a19cc96e683b08878f54fc660cfb96935f6d4", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="8eefde975b8d18cbfb72cc06eac718ac0114e28565b7dca512334384669e4aee25a6b633ffaef0d829346ab163eff40fa8af1ba999c1d94a7f9df47fc8043083b332c45ba7c7b95aac743a0b8ab984378637fb965fe43dae6a4ceae71e77a5c1755f9bffbd7c15e35d3150acd8291737c3cc99a42cc5822006678897f985c2c1431a43124b5e61c1c3305ca5b21a5ae6ab7cf696f3d75e75a93b3d7ddb2b7958057687d2705b3c29599a21314a53db4a6fad23e1507e1da2e643a3466504d31fd45d5d35b2108ed96aec29bd96f98ccbeda48cf8fc6f404214196ce23fe016c2443965f17cde0622a8cd74c184791be1e9ec2b526d23a673c7d129847af75afbeb209651a00f370311f3032ab86f8e6a509c6c855c9b1ef658b1adc091", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') executing program 3: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) executing program 2: r0 = kqueue() r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000080)=r2) write(r2, &(0x7f0000000100)="ce96e9fb588a6cde", 0x8) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$DIOCADDALTQV0(r2, 0xc100442d, &(0x7f0000000200)="6cf0359c911d2c22eb5127debab742d73c740de61e5ce4392fd924164b869deab1ce4ff15e4193b7cd8ce4efa5fb6274ef77bb890a12008ac5ea09b79d336816c33060bfb9e5b5") sendto$inet6(r3, &(0x7f0000002700)="010164f80c04449d", 0x8, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x19, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}, {0x0, 0xfffffffffffffffa, 0x67d957a8950cd6bc, 0x1000000, 0x80000000, 0x3, [0x3, 0x5, 0x6b, 0x2]}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp(0x1c, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) r5 = semget$private(0x0, 0x2, 0x8) __semctl$SETVAL(r5, 0x2467b7dcbef3a9b7, 0x8, &(0x7f0000000080)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10, 0x2, 0x3, @broadcast}}}, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1b, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$BIOCLOCK(r8, 0x2000427a) ioctl$BIOCGRTIMEOUT32(r8, 0x4008426e, &(0x7f0000000040)) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) executing program 2: r0 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x51, &(0x7f0000000400)={0x1005, {{0x1c, 0x1c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, 0x0}, 0x400c0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000004c0)={0x0, 0x0, 0x42, 0x0, 0x492b7, 0x8, 0x6, 0x0, 0x0, 0xfffbfffa, 0x0, [0x2, 0x0, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0xcf, 0x1, 0x1, 0xc, 0x0, 0xfffffffc, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e2, 0x1, 0xffffffff, 0x0, 0xff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x20, 0xfffffff7, 0x9ed, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fc, 0x43a, 0x3, 0x0, 0xffffd14c, 0x83, 0x0, 0xffffffff, 0xfffeffff, 0x0, 0x0, 0x1000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x81) shutdown(r3, 0x2) r4 = accept$inet(r3, 0x0, 0x0) sendfile(r0, r3, 0x2, 0x41, &(0x7f00000002c0)={&(0x7f0000000240)=[{&(0x7f0000000340)="8f5208b82ed6628b22e1a041f6a3fd787c052a9a2f57754f01ed822efc5de66765528fc4e152d80bc01865785283d60865da125f232dd940957c3188b6bffef65b70cc31d0fc5d375bcc7f849e321ff892d22f883bbf13bd460bfb5d5a10cc9df832c1d0d36a1a49a9cc4a36031845be749d75984092a9d329c1c527068eaa93188d855dd4708ec05582", 0x8a}, {&(0x7f0000000100)="4085967b3f479d8e1278a19654d5b6a27d6fdf6c2322a09b9bed1b6ae6cc7068be97a0d6ef8fc4398a7109b60253058788a82c4348bb847af2879739dbae35f5638701ea2c905f83a27e340f8a3354ba5d9a6ee574b7d9e6fb36a0cbc04ab24b9711557cfef66e7b11a3d4eb31aa60f06568f3d5d509eafbf437fd67", 0x7c}, {&(0x7f0000000180)="f6c6d7d9e81598d53baccf99d1c2eeaf5ef9d5485e00965446fcdc9a89240cf2facd078f216d5b14fa25e4bf83a7b9044861acffa647ecf97c113b7dcf7af099fca16d2ae0bf99b7768f50dd1961ac53b1442a6c2772f9275008f18c66c8d43892fe70e42d5919aff18011494120098cf046d7c9c8dd03164d103a0aecb0c137f1862fbf14fe0083aa20d78badb14e3d57b9ca4f444379a29ff8eaac5d815518b13822f27bb0738f4945e0025068b9fabde4", 0xb2}], 0x3, &(0x7f0000000040)}, &(0x7f0000000300), 0x18) ioctl$KDSETRAD(r4, 0x20044b43) truncate(&(0x7f0000000040)='./file0\x00', 0x4) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1b, 0x3, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 1) executing program 2: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 13, 2, 12, 4, 30, 15] detailed listing: executing program 3: kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1c, 0x2, 0x3) ktimer_delete(0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) mlockall(0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read(r2, &(0x7f0000000000)=""/20, 0x14) ioctl$DIOCRADDADDRS(r3, 0xc0184415, &(0x7f0000000a80)={{"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", "0920cf14d501a846a22d8eb300fbff0400000000000000001000"}, 0x0, 0x6, 0x2, 0xf7b2, 0x20000002, 0xb, 0x0, 0x0, 0xfffffffc}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) connect$inet6(r4, &(0x7f00000002c0)={0x1c, 0x1c, 0x0, 0x0, @mcast1, 0xffe}, 0x1c) fork() r5 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0xd, &(0x7f0000000080)={0x10007ff, {{0x1c, 0x1c, 0x2, 0x0, @empty}}, {{0x1c, 0x1c, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0xfc) executing program 2: r0 = kqueue() r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = __specialfd$eventfd(0x1, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$FILEMON_SET_FD(r1, 0xc0045301, &(0x7f0000000080)=r2) write(r2, &(0x7f0000000100)="ce96e9fb588a6cde", 0x8) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) ioctl$DIOCADDALTQV0(r2, 0xc100442d, &(0x7f0000000200)="6cf0359c911d2c22eb5127debab742d73c740de61e5ce4392fd924164b869deab1ce4ff15e4193b7cd8ce4efa5fb6274ef77bb890a12008ac5ea09b79d336816c33060bfb9e5b5") sendto$inet6(r3, &(0x7f0000002700)="010164f80c04449d", 0x8, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f0000000500)={0x18b, {{0x10, 0x2, 0x1, @multicast2}}}, 0x84) r4 = kqueue() kevent(r4, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9, 0x19, 0x8, 0xe8c5, 0x0, [0x7, 0x0, 0x7, 0x40000000000000]}, {0x0, 0xfffffffffffffffa, 0x67d957a8950cd6bc, 0x1000000, 0x80000000, 0x3, [0x3, 0x5, 0x6b, 0x2]}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp(0x1c, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1c, 0x1, 0x0) r5 = semget$private(0x0, 0x2, 0x8) __semctl$SETVAL(r5, 0x2467b7dcbef3a9b7, 0x8, &(0x7f0000000080)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10, 0x2, 0x3, @broadcast}}}, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1b, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$BIOCLOCK(r8, 0x2000427a) ioctl$BIOCGRTIMEOUT32(r8, 0x4008426e, &(0x7f0000000040)) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) executing program 2: r0 = openat$md(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6_icmp(0x1c, 0x2, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x51, &(0x7f0000000400)={0x1005, {{0x1c, 0x1c, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, 0x0}, 0x400c0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f00000004c0)={0x0, 0x0, 0x42, 0x0, 0x492b7, 0x8, 0x6, 0x0, 0x0, 0xfffbfffa, 0x0, [0x2, 0x0, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0xcf, 0x1, 0x1, 0xc, 0x0, 0xfffffffc, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e2, 0x1, 0xffffffff, 0x0, 0xff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x20, 0xfffffff7, 0x9ed, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fc, 0x43a, 0x3, 0x0, 0xffffd14c, 0x83, 0x0, 0xffffffff, 0xfffeffff, 0x0, 0x0, 0x1000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x81) shutdown(r3, 0x2) r4 = accept$inet(r3, 0x0, 0x0) sendfile(r0, r3, 0x2, 0x41, &(0x7f00000002c0)={&(0x7f0000000240)=[{&(0x7f0000000340)="8f5208b82ed6628b22e1a041f6a3fd787c052a9a2f57754f01ed822efc5de66765528fc4e152d80bc01865785283d60865da125f232dd940957c3188b6bffef65b70cc31d0fc5d375bcc7f849e321ff892d22f883bbf13bd460bfb5d5a10cc9df832c1d0d36a1a49a9cc4a36031845be749d75984092a9d329c1c527068eaa93188d855dd4708ec05582", 0x8a}, {&(0x7f0000000100)="4085967b3f479d8e1278a19654d5b6a27d6fdf6c2322a09b9bed1b6ae6cc7068be97a0d6ef8fc4398a7109b60253058788a82c4348bb847af2879739dbae35f5638701ea2c905f83a27e340f8a3354ba5d9a6ee574b7d9e6fb36a0cbc04ab24b9711557cfef66e7b11a3d4eb31aa60f06568f3d5d509eafbf437fd67", 0x7c}, {&(0x7f0000000180)="f6c6d7d9e81598d53baccf99d1c2eeaf5ef9d5485e00965446fcdc9a89240cf2facd078f216d5b14fa25e4bf83a7b9044861acffa647ecf97c113b7dcf7af099fca16d2ae0bf99b7768f50dd1961ac53b1442a6c2772f9275008f18c66c8d43892fe70e42d5919aff18011494120098cf046d7c9c8dd03164d103a0aecb0c137f1862fbf14fe0083aa20d78badb14e3d57b9ca4f444379a29ff8eaac5d815518b13822f27bb0738f4945e0025068b9fabde4", 0xb2}], 0x3, &(0x7f0000000040)}, &(0x7f0000000300), 0x18) ioctl$KDSETRAD(r4, 0x20044b43) truncate(&(0x7f0000000040)='./file0\x00', 0x4) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) socket(0x1b, 0x3, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 1) executing program 2: ksem_init(&(0x7f0000000100)=0x0, 0x1) ksem_wait(r0) ksem_wait(r0) ksem_post(r0) executing program 0: ktimer_create(0xf, 0x0, &(0x7f0000000240)=0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3862) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) shm_unlink(&(0x7f00000001c0)='./file0\x00') ktimer_settime(r0, 0x1, &(0x7f00000002c0)={{0x40}}, 0x0) ktimer_gettime(r0, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) syz_emit_ethernet(0xdee, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file3\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setresuid(0x0, 0xee01, 0xee00) chroot(&(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file3\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) setsockopt$sock_splice(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000000c0)={0xffffffffffffffff, 0xe, {0x3, 0x4}}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x5, @mcast2, 0x4}, 0x17) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r2, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000), 0x42}, &(0x7f0000000000), 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 2, 17, 30, 1, 30, 29, 40] detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0x8a}], 0x1) (async, rerun: 32) semop(r2, &(0x7f0000001240)=[{0x3}], 0x1) (async, rerun: 32) __semctl$SETVAL(r2, 0x1, 0x8, &(0x7f0000000040)=0x0) (async) sigaction(0x9, &(0x7f0000000240)={0x0, 0x6, {[0x2, 0x4f, 0xfc5, 0x80]}}, &(0x7f0000000300)={0x0}) (async) getfhat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) aio_waitcomplete(0x0, &(0x7f0000000600)={0x0, 0x4c2}) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000200)) (async, rerun: 32) r3 = fork() (async, rerun: 32) setreuid(0xee01, 0x0) rtprio(0x1, r3, &(0x7f0000000040)={0x4, 0xb}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000280)={0x8, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x800, 0xe6, 0x3, 0xdb4, 0x0, [0x5, 0x7fffffff, 0xd, 0x1f, 0x7, 0x40, 0x0, 0x1, 0x5, 0x6, 0x7, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x401, 0xb0c, 0x1, 0x6, 0x4dc, 0x10002, 0x9, 0x1, 0x100, 0x3, 0x9, 0x80de, 0x0, 0x7ff, 0xda8, 0x0, 0x80, 0x3, 0xfffff1e3, 0x1a1c, 0x7, 0x9de, 0x4, 0x81, 0x58c3, 0x3e, 0x1, 0x2000400, 0xffff01f5, 0x7fff, 0xfffffff7, 0x3ff, 0x1f, 0x5, 0x5, 0x2, 0x7f, 0x1f4, 0x6, 0x400, 0xfffffffd, 0x2, 0xc41, 0xe8ea, 0x100, 0xfffd, 0x0, 0x3, 0xa3f5, 0x1b4146a1, 0x7, 0x8, 0xfffffffd, 0x5, 0x10001, 0x4, 0x7, 0xffff, 0x5, 0x0, 0x8, 0x6, 0x100, 0x10000, 0x2, 0x8, 0x1, 0x3, 0x0, 0x99, 0x7ff, 0x9, 0x7ff, 0x0, 0x6, 0x5, 0x3, 0x7e, 0x8, 0x100, 0x101]}) (async) sendto$inet6(r0, &(0x7f0000000040)="84d5c69c169818d2", 0x8, 0x0, &(0x7f0000000880)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) freebsd11_lstat(&(0x7f0000000200)='./file0\x00', 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0xfffffff8, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int=0x40, @spare=[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r2, 0x0) fork() mount(&(0x7f0000000040)='ext2fs\x00', &(0x7f00000000c0)='./file1\x00', 0x4000044b, &(0x7f0000000100)="506b31c1a93ce9c25f958ab64ddd1f251851be4eac2c3dd5778f0059fd9d9e577f726b6c2a7d792e9aba3ff9dac96ba0b10fd41b8408ac6d63d5c4ff3f811bf0effa809a200636258f3e95293cf298781372") r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000, 0x0) mlockall(0x2) r4 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x80000}], 0x10}, 0x75f7385a28dbb509) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x20011, r3, 0x0) mlockall(0x2) open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) executing program 1: mlock(&(0x7f0000c05000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1cf622f598bff36064"], 0x1c}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0xe, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra, @enc_lim]}], @icmpv6=@ndisc_ra}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(&(0x7f0000000100)='./file0\x00') aio_write(&(0x7f0000000340)={r3, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(0x0, 0xee01, 0xee00) lchown(0x0, 0x0, 0xffffffffffffffff) thr_suspend(&(0x7f0000000000)={0xfffffffffffffffe, 0x6}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/231) mincore(&(0x7f0000e74000/0x1000)=nil, 0x1000, &(0x7f0000001100)=""/86) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r5 = shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="1a7b4fa5e0d9fd18a9b7de56e6cd17d06fdcc4bdb699fabb7d070d2b5a81460acd07e6891cfc11c151ccc85b1a75dd5654e41fa04c227be30084b8dfd6af0275cbcf2a81eb5e930c7a7b5598a36e52a095e23b6ab432c1e53548440800d077443f0000ab1f584235083e89010000000000000094587902fb3d92dc563f6dce7937b90a167ca4fad41ec180386699de46ecaf628d3733a90c97e87fb71968c237db866867251f28a0f26c308bebb172dfd5ff3c8371eb9a8214959946af6e8b12227af5dc757b0f8c7e65dbef8b9b085a4cea9a989280a20af72255d3378ef611ef80f999ae1e2eb0d6df4a2f76e306e0f473c9d384c8ece6d257ed52769edaf2519d5067afb240465dc8b991ccf8f465e2cc0800e1dbb017944984558933cc00507e5ff7fe2e53a4e2be6d73f03dd9947bbfb3f6d074b88d7f300af97999e273eceb812d3d9f125b48e69a14d0a63dee4c55f27c091c0000000000000000000000ac6351cd75e1b0a95b8e38c96e9b0a46a98a7a6c7faeba2a76dae3deaeb2a1fa1c8ae1cafd3efe9ab1374ee02673bf90a45921c4b1f59b2d4a7623bd5e7efa926bc84f39f8efa83bf20c3b777fceae9052fead207a1e1b32504ad3c884ce6f2d69a659a87ea7786dc6411153a980253a9b318377b0d367103d246d43587e94cd53400000000000000000000000000000a90262c857ac55b8bd5226a097cf0cdabb22ac4c578497af9a19cc96e683b08878f54fc660cfb96935f6d4", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30, 29, 40] detailed listing: executing program 3: fhlinkat(0x0, 0xffffffffffffffff, 0x0) executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x1c2) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x110) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x108, &(0x7f0000000180)={0x10, 0x2, 0x3, @rand_addr=0x81}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f0000003840)={'bbr\x00'}, 0x37) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) sigtimedwait(&(0x7f0000000040)={[0x0, 0x8, 0x9, 0xd42]}, 0x0, &(0x7f0000000100)={0x9955, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x8}, &(0x7f00000003c0)=0x10) getsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000007c0)={@in={{0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}}, 0x0, 0x1670ebce, 0xffffffc0, 0xe, 0x9, 0x0, 0xf}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, 0x0, &(0x7f0000000940)) sendto(r4, 0x0, 0x1a, 0x7a9d308a77d81119, 0x0, 0xfffffffffffffda5) syz_emit_ethernet(0x0, 0x0) clock_gettime(0x4, 0x0) sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x0, 0x1c3e, 0x712d}) sendto$inet(r4, &(0x7f0000000c40)="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", 0x21c, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x0, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x101, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={[0x2]}) cpuset_setaffinity(0x3, 0x1, 0xffffffffffffffff, 0x42, &(0x7f0000000000)) fdatasync(r0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="8eefde975b8d18cbfb72cc06eac718ac0114e28565b7dca512334384669e4aee25a6b633ffaef0d829346ab163eff40fa8af1ba999c1d94a7f9df47fc8043083b332c45ba7c7b95aac743a0b8ab984378637fb965fe43dae6a4ceae71e77a5c1755f9bffbd7c15e35d3150acd8291737c3cc99a42cc5822006678897f985c2c1431a43124b5e61c1c3305ca5b21a5ae6ab7cf696f3d75e75a93b3d7ddb2b7958057687d2705b3c29599a21314a53db4a6fad23e1507e1da2e643a3466504d31fd45d5d35b2108ed96aec29bd96f98ccbeda48cf8fc6f404214196ce23fe016c2443965f17cde0622a8cd74c184791be1e9ec2b526d23a673c7d129847af75afbeb209651a00f370311f3032ab86f8e6a509c6c855c9b1ef658b1adc091", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 40] detailed listing: executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="47658daea6fc00000000000008060001080006"]) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000140)={0xb, 0x0, 0x10, &(0x7f0000000100)="0b6fac4103e7a00d4689e808d0d4755a", 0x0, 0x0, 0x0, 0x7d866998, [0x0, 0x0, 0xffffffff]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000640)={0x0, 0x1, 0x9, 0x60, &(0x7f00000007c0), 0x0, 0x0, 0x0}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000002580)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$FILEMON_SET_FD(0xffffffffffffffff, 0xc0045301, &(0x7f0000000280)) ioctl$DIOCGETRULESETS(0xffffffffffffffff, 0xc444443a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @loopback}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x52, &(0x7f0000000140)={0x3, {{0x10, 0x2, 0x2, @multicast2}}, {{0x10, 0x2, 0x1, @multicast2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = kqueue() kevent(r3, 0x0, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r5 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="8eefde975b8d18cbfb72cc06eac718ac0114e28565b7dca512334384669e4aee25a6b633ffaef0d829346ab163eff40fa8af1ba999c1d94a7f9df47fc8043083b332c45ba7c7b95aac743a0b8ab984378637fb965fe43dae6a4ceae71e77a5c1755f9bffbd7c15e35d3150acd8291737c3cc99a42cc5822006678897f985c2c1431a43124b5e61c1c3305ca5b21a5ae6ab7cf696f3d75e75a93b3d7ddb2b7958057687d2705b3c29599a21314a53db4a6fad23e1507e1da2e643a3466504d31fd45d5d35b2108ed96aec29bd96f98ccbeda48cf8fc6f404214196ce23fe016c2443965f17cde0622a8cd74c184791be1e9ec2b526d23a673c7d129847af75afbeb209651a00f370311f3032ab86f8e6a509c6c855c9b1ef658b1adc091", 0x11d}], 0x1, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80001001, &(0x7f0000000300)="e2b76e", 0x3, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare=[0x0, 0x1, 0x0, 0xa, 0x0, 0x100000000, 0x800000000000]}}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x40, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x18400480, 0x0) socket(0x2, 0x1, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH-fstatat-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH-fstatat-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h bisect: concatenation succeeded found reproducer with 40 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH-fstatat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) fstatat(r5, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4000) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md-ioctl$MDIOCATTACH detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x7, 0x0, 0x0, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x80, 0x0, 0x7, 0xfffffff9, 0x0, 0x0, 0x1]}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev-openat$md detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid-pwritev detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid-setuid detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir-setuid detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) setuid(0xffffffffffffffff) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink-unlink detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) unlink(0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename-unlink detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat-rename detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir-symlinkat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(0x0, 0x200, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat-symlinkat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir-symlinkat detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio-open$dir detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-ktimer_create detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) ktimer_create(0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-rfork-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-setitimer-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-pwritev-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-open$dir-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-connect$inet-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-connect$inet-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = socket(0x2, 0x20000001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, @rand_addr=0x81000}, 0x10) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-socket-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) socket(0x2, 0x20000001, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-rename-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-mkdirat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) mkdirat(r0, 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-mkdirat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) mkdirat(r0, 0x0, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-symlinkat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) symlinkat(0x0, r0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: Fatal trap NUM: page fault in callout_process testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-symlinkat-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(0x0, 0x0, 0x0) symlinkat(0x0, r0, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) open$dir(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$getflags-open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: fcntl$getflags(0xffffffffffffffff, 0x10) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) (async) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) (async) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(0x0, 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program crashed: panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, 0x0, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio program did not crash simplifying guilty program options testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-pwritev-setitimer-rfork-setitimer-lio_listio detailed listing: executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000001600)={{0x0, 0x6}, {0x0, 0x10001}}, 0x0) rfork(0x1000) setitimer(0x0, &(0x7f0000000040)={{}, {0x9, 0x80000}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) program did not crash reproducing took 1h27m56.467696052s repro crashed as (corrupted=false): panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe0007fbdbd0 first->prev != head cpuid = 1 time = 1745881128 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00576a8530 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00576a8690 vpanic() at vpanic+0x257/frame 0xfffffe00576a8850 panic() at panic+0xb5/frame 0xfffffe00576a8910 callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe00576a8970 callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe00576a8a90 kern_setitimer() at kern_setitimer+0x835/frame 0xfffffe00576a8bb0 sys_setitimer() at sys_setitimer+0x170/frame 0xfffffe00576a8d10 amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00576a8f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00576a8f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x8211dcf08, rbp = 0x8211dcf80 --- KDB: enter: panic [ thread pid 4414 tid 103643 ] Stopped at kdb_enter+0x6e: movq $0,0x25be387(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0xdffff7c000000000 rbx 0xffffffff827a7620 .str.27 rsp 0xfffffe00576a8670 rbp 0xfffffe00576a8690 rsi 0 rdi 0xffffffff830004c0 panicstr r8 0 r9 0xffffffff r10 0x69a56dcd713b5ac7 r11 0xfffffe0054925520 r12 0xfffffe0054925000 r13 0xfffffffffffffffd r14 0xffffffff827a7620 .str.27 r15 0 rip 0xffffffff815fce0e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25be387(%rip) db> show proc Process 4414 (syz-executor) at 0xfffffe005492f000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 3421 at 0xfffffe0054902ac0 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe000800e920 (map 0xfffffe000800e920) (map.pmap 0xfffffe000800e9c0) (pmap 0xfffffe000800ea30) threads: 2 102430 RunQ syz-executor 103643 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 4414 3421 3421 0 R (threaded) syz-executor 102430 RunQ syz-executor 103643 Run CPU 1 syz-executor 4412 3267 3267 0 R (threaded) syz-executor 100126 Run CPU 0 syz-executor 103641 RunQ syz-executor 4411 3245 3245 0 R (threaded) syz-executor 100179 RunQ syz-executor 103640 S uwait 0xfffffe0059ecdc00 syz-executor 3486 3466 3486 0 Ss select 0xfffffe006ee13dc0 dhclient 3473 1 3473 0 Ss select 0xfffffe006edc7640 dhclient 3466 3447 424 65 S select 0xfffffe006ee14540 dhclient 3447 424 424 0 S wait 0xfffffe0054905060 sh 3421 774 3421 0 S nanslp 0xffffffff83b9c501 syz-executor 3296 774 3296 0 R syz-executor 3267 774 3267 0 S nanslp 0xffffffff83b9c500 syz-executor 3245 774 3245 0 S nanslp 0xffffffff83b9c501 syz-executor 864 0 0 0 DL aiordy 0xfffffe005490d580 [aiod4] 863 0 0 0 DL aiordy 0xfffffe005490dae0 [aiod3] 862 0 0 0 DL aiordy 0xfffffe00548e3060 [aiod2] 861 0 0 0 DL aiordy 0xfffffe005490c000 [aiod1] 774 773 771 0 S select 0xfffffe0059ecdec0 syz-executor 773 771 771 0 S (threaded) syz-execprog 100109 S uwait 0xfffffe0059bfbc00 syz-execprog 100112 S uwait 0xfffffe0059bfbf00 syz-execprog 100113 S uwait 0xfffffe0059bfc080 syz-execprog 100114 S uwait 0xfffffe0059bfc180 syz-execprog 100115 S kqread 0xfffffe0008bf4700 syz-execprog 100116 S uwait 0xfffffe006e3b2f00 syz-execprog 100117 S uwait 0xfffffe006e3b4080 syz-execprog 100118 S uwait 0xfffffe0059ecd800 syz-execprog 771 769 771 0 Ss pause 0xfffffe0054902610 csh 769 682 769 0 Ss select 0xfffffe0059ece8c0 sshd 750 1 750 0 Ss+ ttyin 0xfffffe0007ff78b0 getty 749 1 749 0 Ss+ ttyin 0xfffffe0058dcf4b0 getty 748 1 748 0 Ss+ ttyin 0xfffffe0058dcf8b0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058dcfcb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0058dd00b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dd04b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dd08b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058dd0cb0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dd10b0 getty 740 1 18 0 S+ piperd 0xfffffe006e7568a0 logger 739 738 18 0 S+ nanslp 0xffffffff83b9c501 sleep 738 1 18 0 S+ wait 0xfffffe0008007b00 sh 686 1 686 0 Ss nanslp 0xffffffff83b9c501 cron 682 1 682 0 Ss select 0xfffffe0059ecdd40 sshd 495 1 495 0 Ss select 0xfffffe006e3b4b40 syslogd 424 1 424 0 Ss wait 0xfffffe0054803580 devd 423 1 423 65 Ss select 0xfffffe0059ece140 dhclient 338 1 338 0 Ss select 0xfffffe0059ece0c0 dhclient 335 1 335 0 Ss select 0xfffffe006e3b4640 dhclient 17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb8360 [bufdaemon] 100083 D - 0xffffffff83002140 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0059e9c4e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83ce92f8 [dom0] 100081 D launds 0xffffffff83ce9304 [laundry: dom0] 100082 D umarcl 0xffffffff81dc63e0 [uma] 7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84771850 [pf purge] 5 0 0 0 DL waiting 0xffffffff845155c0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e4340 [doneq0] 100047 D - 0xffffffff838e42c0 [async] 100076 D - 0xffffffff838e4140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce4b00 [crypto] 100044 D crypto_ 0xfffffe005856e030 [crypto returns 0] 100045 D crypto_ 0xfffffe005856e080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00547f6088 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b44f00 [g_event] 100038 D - 0xffffffff83b44f20 [g_up] 100039 D - 0xffffffff83b44f40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c29ff0 [swapper] 100005 D - 0xfffffe0008bf7d00 [softirq_0] 100006 D - 0xfffffe0008bf7c00 [softirq_1] 100007 D - 0xfffffe0008bf7b00 [if_io_tqg_0] 100008 D - 0xfffffe0008bf7a00 [if_io_tqg_1] 100009 D - 0xfffffe0008bf7900 [if_config_tqg_0] 100010 D - 0xfffffe0008bf7800 [kqueue_ctx taskq] 100011 D - 0xfffffe0008bf7700 [jail_remove taskq] 100012 D - 0xfffffe0008bf7600 [bus taskq] 100015 D - 0xfffffe0008bf7300 [thread taskq] 100017 D - 0xfffffe0008bf7100 [aiod_kick taskq] 100018 D - 0xfffffe0008bf7000 [deferred_unmount ta] 100019 D - 0xfffffe0008bf6e00 [inm_free taskq] 100020 D - 0xfffffe0008bf6d00 [in6m_free taskq] 100021 D - 0xfffffe0008bf6c00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008bf6900 [firmware taskq] 100041 D - 0xfffffe0008bf6600 [crypto_0] 100042 D - 0xfffffe0008bf6600 [crypto_1] 100057 D - 0xfffffe0008bf6400 [vtnet0 rxq 0] 100058 D - 0xfffffe0008bf6300 [vtnet0 txq 0] 100059 D - 0xfffffe0008bf6200 [vtnet0 rxq 1] 100060 D - 0xfffffe0008bf6100 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0058587680 [virtio_balloon] 100066 D - 0xffffffff827ac961 [deadlkres] 100070 D - 0xfffffe0058f59b00 [acpi_task_0] 100071 D - 0xfffffe0058f59b00 [acpi_task_1] 100072 D - 0xfffffe0058f59b00 [acpi_task_2] 100074 D - 0xfffffe0008bf8100 [mca taskq] 100075 D - 0xfffffe0008bf6500 [CAM taskq] 100077 D - 0xfffffe0008bf5e00 [ipsec_offload] db> show all locks Process 4414 (syz-executor) thread 0xfffffe0054925000 (103643) exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe005492f128) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_time.c:841 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5059K 486 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 34854 2053K 34929 vtbuf 24 1968K 46 newblk 1830 1482K 5393 kobj 331 1324K 495 inodedep 1406 1039K 7080 vfscache 3 1025K 3 pcb 24 669K 66 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 dirrem 1330 333K 6980 subproc 134 254K 4493 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54426 freefile 1333 167K 6965 vmem 5 144K 6 tidhash 3 141K 3 pagedep 49 140K 3537 tfo_ccache 1 128K 1 IP reass 1 128K 1 filedesc 16 121K 7145 DEVFS1 114 114K 141 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 umtx 336 42K 336 kdtrace 207 42K 8059 temp 35 37K 2354 BPF 22 36K 43 LRO 34 35K 44 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 128 32K 143 msg 4 30K 4 kbdmux 6 28K 6 routetbl 357 23K 1142 DEVFS_RULE 56 20K 56 ifaddr 67 19K 117 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 84 ifnet 7 13K 12 ether_multi 152 13K 330 kenv 95 12K 95 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 4 9K 7044 plimit 23 9K 503 in6_multi 65 9K 125 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 mkdir 56 7K 7048 diradd 56 7K 7039 kqueue 59 7K 4420 sglist 6 7K 6 cred 24 6K 295 CAM DEV 3 6K 510 newdirblk 44 6K 3524 pfs_nodes 22 6K 22 pf_ifnet 14 6K 45 ufs_dirhash 24 5K 24 UMA 266 5K 266 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 pwddesc 56 4K 7886 acpisem 28 4K 28 proc-args 83 4K 5752 selfd 48 3K 145771 terminal 11 3K 11 session 22 3K 56 indirdep 10 3K 10 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 9 lockf 21 3K 44 ip6ndp 13 3K 25 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 Unitno 28 2K 70 sctp_ifa 13 2K 25 CAM XPT 22 2K 543 in_multi 6 2K 14 tun 4 2K 9 toponodes 6 2K 6 ipsecpolicy 2 2K 2 select 11 2K 45 freework 6 2K 3504 freeblks 5 2K 3503 msi 9 2K 9 netlink 2 2K 182 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 25 ipsec 3 1K 3 mld 6 1K 11 CC Mem 6 1K 13 igmp 6 1K 11 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 4 encap_export_host 12 1K 12 osd 11 1K 29 DEVFSP 10 1K 47 cdev 2 1K 2 lkpikmalloc 8 1K 9 inpcbpolicy 14 1K 241 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 procdesc 2 1K 12 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 7 prison 6 1K 6 cryptodev 2 1K 49 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 pmchooks 1 1K 1 filecaps 5 1K 84 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3466 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 62 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 mqdata 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 filemon 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 31 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 31 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 final repro crashed as (corrupted=false): panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe0007fbdbd0 first->prev != head cpuid = 1 time = 1745881128 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00576a8530 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00576a8690 vpanic() at vpanic+0x257/frame 0xfffffe00576a8850 panic() at panic+0xb5/frame 0xfffffe00576a8910 callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe00576a8970 callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe00576a8a90 kern_setitimer() at kern_setitimer+0x835/frame 0xfffffe00576a8bb0 sys_setitimer() at sys_setitimer+0x170/frame 0xfffffe00576a8d10 amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00576a8f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00576a8f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x8211dcf08, rbp = 0x8211dcf80 --- KDB: enter: panic [ thread pid 4414 tid 103643 ] Stopped at kdb_enter+0x6e: movq $0,0x25be387(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0xdffff7c000000000 rbx 0xffffffff827a7620 .str.27 rsp 0xfffffe00576a8670 rbp 0xfffffe00576a8690 rsi 0 rdi 0xffffffff830004c0 panicstr r8 0 r9 0xffffffff r10 0x69a56dcd713b5ac7 r11 0xfffffe0054925520 r12 0xfffffe0054925000 r13 0xfffffffffffffffd r14 0xffffffff827a7620 .str.27 r15 0 rip 0xffffffff815fce0e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25be387(%rip) db> show proc Process 4414 (syz-executor) at 0xfffffe005492f000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 3421 at 0xfffffe0054902ac0 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe000800e920 (map 0xfffffe000800e920) (map.pmap 0xfffffe000800e9c0) (pmap 0xfffffe000800ea30) threads: 2 102430 RunQ syz-executor 103643 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 4414 3421 3421 0 R (threaded) syz-executor 102430 RunQ syz-executor 103643 Run CPU 1 syz-executor 4412 3267 3267 0 R (threaded) syz-executor 100126 Run CPU 0 syz-executor 103641 RunQ syz-executor 4411 3245 3245 0 R (threaded) syz-executor 100179 RunQ syz-executor 103640 S uwait 0xfffffe0059ecdc00 syz-executor 3486 3466 3486 0 Ss select 0xfffffe006ee13dc0 dhclient 3473 1 3473 0 Ss select 0xfffffe006edc7640 dhclient 3466 3447 424 65 S select 0xfffffe006ee14540 dhclient 3447 424 424 0 S wait 0xfffffe0054905060 sh 3421 774 3421 0 S nanslp 0xffffffff83b9c501 syz-executor 3296 774 3296 0 R syz-executor 3267 774 3267 0 S nanslp 0xffffffff83b9c500 syz-executor 3245 774 3245 0 S nanslp 0xffffffff83b9c501 syz-executor 864 0 0 0 DL aiordy 0xfffffe005490d580 [aiod4] 863 0 0 0 DL aiordy 0xfffffe005490dae0 [aiod3] 862 0 0 0 DL aiordy 0xfffffe00548e3060 [aiod2] 861 0 0 0 DL aiordy 0xfffffe005490c000 [aiod1] 774 773 771 0 S select 0xfffffe0059ecdec0 syz-executor 773 771 771 0 S (threaded) syz-execprog 100109 S uwait 0xfffffe0059bfbc00 syz-execprog 100112 S uwait 0xfffffe0059bfbf00 syz-execprog 100113 S uwait 0xfffffe0059bfc080 syz-execprog 100114 S uwait 0xfffffe0059bfc180 syz-execprog 100115 S kqread 0xfffffe0008bf4700 syz-execprog 100116 S uwait 0xfffffe006e3b2f00 syz-execprog 100117 S uwait 0xfffffe006e3b4080 syz-execprog 100118 S uwait 0xfffffe0059ecd800 syz-execprog 771 769 771 0 Ss pause 0xfffffe0054902610 csh 769 682 769 0 Ss select 0xfffffe0059ece8c0 sshd 750 1 750 0 Ss+ ttyin 0xfffffe0007ff78b0 getty 749 1 749 0 Ss+ ttyin 0xfffffe0058dcf4b0 getty 748 1 748 0 Ss+ ttyin 0xfffffe0058dcf8b0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058dcfcb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0058dd00b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dd04b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dd08b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058dd0cb0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dd10b0 getty 740 1 18 0 S+ piperd 0xfffffe006e7568a0 logger 739 738 18 0 S+ nanslp 0xffffffff83b9c501 sleep 738 1 18 0 S+ wait 0xfffffe0008007b00 sh 686 1 686 0 Ss nanslp 0xffffffff83b9c501 cron 682 1 682 0 Ss select 0xfffffe0059ecdd40 sshd 495 1 495 0 Ss select 0xfffffe006e3b4b40 syslogd 424 1 424 0 Ss wait 0xfffffe0054803580 devd 423 1 423 65 Ss select 0xfffffe0059ece140 dhclient 338 1 338 0 Ss select 0xfffffe0059ece0c0 dhclient 335 1 335 0 Ss select 0xfffffe006e3b4640 dhclient 17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb8360 [bufdaemon] 100083 D - 0xffffffff83002140 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0059e9c4e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83ce92f8 [dom0] 100081 D launds 0xffffffff83ce9304 [laundry: dom0] 100082 D umarcl 0xffffffff81dc63e0 [uma] 7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84771850 [pf purge] 5 0 0 0 DL waiting 0xffffffff845155c0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e4340 [doneq0] 100047 D - 0xffffffff838e42c0 [async] 100076 D - 0xffffffff838e4140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce4b00 [crypto] 100044 D crypto_ 0xfffffe005856e030 [crypto returns 0] 100045 D crypto_ 0xfffffe005856e080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00547f6088 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b44f00 [g_event] 100038 D - 0xffffffff83b44f20 [g_up] 100039 D - 0xffffffff83b44f40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c29ff0 [swapper] 100005 D - 0xfffffe0008bf7d00 [softirq_0] 100006 D - 0xfffffe0008bf7c00 [softirq_1] 100007 D - 0xfffffe0008bf7b00 [if_io_tqg_0] 100008 D - 0xfffffe0008bf7a00 [if_io_tqg_1] 100009 D - 0xfffffe0008bf7900 [if_config_tqg_0] 100010 D - 0xfffffe0008bf7800 [kqueue_ctx taskq] 100011 D - 0xfffffe0008bf7700 [jail_remove taskq] 100012 D - 0xfffffe0008bf7600 [bus taskq] 100015 D - 0xfffffe0008bf7300 [thread taskq] 100017 D - 0xfffffe0008bf7100 [aiod_kick taskq] 100018 D - 0xfffffe0008bf7000 [deferred_unmount ta] 100019 D - 0xfffffe0008bf6e00 [inm_free taskq] 100020 D - 0xfffffe0008bf6d00 [in6m_free taskq] 100021 D - 0xfffffe0008bf6c00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0008bf6b00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0008bf6a00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008bf6900 [firmware taskq] 100041 D - 0xfffffe0008bf6600 [crypto_0] 100042 D - 0xfffffe0008bf6600 [crypto_1] 100057 D - 0xfffffe0008bf6400 [vtnet0 rxq 0] 100058 D - 0xfffffe0008bf6300 [vtnet0 txq 0] 100059 D - 0xfffffe0008bf6200 [vtnet0 rxq 1] 100060 D - 0xfffffe0008bf6100 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0058587680 [virtio_balloon] 100066 D - 0xffffffff827ac961 [deadlkres] 100070 D - 0xfffffe0058f59b00 [acpi_task_0] 100071 D - 0xfffffe0058f59b00 [acpi_task_1] 100072 D - 0xfffffe0058f59b00 [acpi_task_2] 100074 D - 0xfffffe0008bf8100 [mca taskq] 100075 D - 0xfffffe0008bf6500 [CAM taskq] 100077 D - 0xfffffe0008bf5e00 [ipsec_offload] db> show all locks Process 4414 (syz-executor) thread 0xfffffe0054925000 (103643) exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe005492f128) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_time.c:841 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5059K 486 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 34854 2053K 34929 vtbuf 24 1968K 46 newblk 1830 1482K 5393 kobj 331 1324K 495 inodedep 1406 1039K 7080 vfscache 3 1025K 3 pcb 24 669K 66 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 dirrem 1330 333K 6980 subproc 134 254K 4493 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54426 freefile 1333 167K 6965 vmem 5 144K 6 tidhash 3 141K 3 pagedep 49 140K 3537 tfo_ccache 1 128K 1 IP reass 1 128K 1 filedesc 16 121K 7145 DEVFS1 114 114K 141 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 umtx 336 42K 336 kdtrace 207 42K 8059 temp 35 37K 2354 BPF 22 36K 43 LRO 34 35K 44 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 128 32K 143 msg 4 30K 4 kbdmux 6 28K 6 routetbl 357 23K 1142 DEVFS_RULE 56 20K 56 ifaddr 67 19K 117 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 84 ifnet 7 13K 12 ether_multi 152 13K 330 kenv 95 12K 95 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 4 9K 7044 plimit 23 9K 503 in6_multi 65 9K 125 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 mkdir 56 7K 7048 diradd 56 7K 7039 kqueue 59 7K 4420 sglist 6 7K 6 cred 24 6K 295 CAM DEV 3 6K 510 newdirblk 44 6K 3524 pfs_nodes 22 6K 22 pf_ifnet 14 6K 45 ufs_dirhash 24 5K 24 UMA 266 5K 266 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 pwddesc 56 4K 7886 acpisem 28 4K 28 proc-args 83 4K 5752 selfd 48 3K 145771 terminal 11 3K 11 session 22 3K 56 indirdep 10 3K 10 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 9 lockf 21 3K 44 ip6ndp 13 3K 25 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 Unitno 28 2K 70 sctp_ifa 13 2K 25 CAM XPT 22 2K 543 in_multi 6 2K 14 tun 4 2K 9 toponodes 6 2K 6 ipsecpolicy 2 2K 2 select 11 2K 45 freework 6 2K 3504 freeblks 5 2K 3503 msi 9 2K 9 netlink 2 2K 182 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 25 ipsec 3 1K 3 mld 6 1K 11 CC Mem 6 1K 13 igmp 6 1K 11 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 4 encap_export_host 12 1K 12 osd 11 1K 29 DEVFSP 10 1K 47 cdev 2 1K 2 lkpikmalloc 8 1K 9 inpcbpolicy 14 1K 241 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 procdesc 2 1K 12 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 7 prison 6 1K 6 cryptodev 2 1K 49 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 pmchooks 1 1K 1 filecaps 5 1K 84 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3466 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 62 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 mqdata 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 filemon 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 31 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 31 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0