2019/05/16 19:47:31 fuzzer started
2019/05/16 19:47:31 dialing manager at 127.0.0.1:42177
2019/05/16 19:47:31 syscalls: 212
2019/05/16 19:47:31 code coverage: support is not implemented in syzkaller
2019/05/16 19:47:31 comparison tracing: support is not implemented in syzkaller
2019/05/16 19:47:31 extra coverage: support is not implemented in syzkaller
2019/05/16 19:47:31 setuid sandbox: support is not implemented in syzkaller
2019/05/16 19:47:31 namespace sandbox: support is not implemented in syzkaller
2019/05/16 19:47:31 Android sandbox: support is not implemented in syzkaller
2019/05/16 19:47:31 fault injection: support is not implemented in syzkaller
2019/05/16 19:47:31 leak checking: support is not implemented in syzkaller
2019/05/16 19:47:31 net packet injection: support is not implemented in syzkaller
2019/05/16 19:47:31 net device setup: support is not implemented in syzkaller
19:47:31 executing program 0:
openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sysname\x00', 0xd, 0x3, 0x0)
r0 = openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f00000001c0)='/net/log\x00', 0x9, 0x3, 0x0)
openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000200)='/dev/.empty\x00', 0xc, 0x3, 0x0)
openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/status\x00', 0x12, 0x1, 0x0)
openat$dev_stdin(0xffffffffffffff9c, &(0x7f0000000280)='/dev/stdin\x00', 0xb, 0x3, 0x0)
openat$dev_kprint(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kprint\x00', 0xc, 0x1, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000300)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000340)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
fstat(r0, &(0x7f0000000380))
openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f0000000400)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0)
openat$dev_stdin(0xffffffffffffff9c, &(0x7f0000000440)='/dev/stdin\x00', 0xb, 0x3, 0x0)
openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/text\x00', 0x10, 0x1, 0x0)
openat$dev_time(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/time\x00', 0xa, 0x3, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/text\x00', 0x10, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
tcgetattr(r0, &(0x7f00000005c0))
openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0xd, 0x1, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f0000000640)='/dev/random\x00', 0xc, 0x1, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f0000000680)='/net/log\x00', 0x9, 0x3, 0x0)
openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000700)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/ns\x00', 0xe, 0x1, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000000780)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)

19:47:31 executing program 1:
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$prof_kpdata(0xffffffffffffff9c, &(0x7f0000000040)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
r0 = openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000080)='/net/udp/0/local\x00', 0x11, 0x1, 0x0)
r1 = openat$proc_self_wait(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0)
openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f0000000140)='/net/tcp/0/local\x00', 0x11, 0x1, 0x0)
fcntl$F_GETFL(r1, 0x3)
r2 = openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)
openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000240)='/dev/stdout\x00', 0xc, 0x3, 0x0)
fwstat(r2, &(0x7f0000000280)=""/105, 0x69, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000340)='/net/ndb\x00', 0x9, 0x3, 0x0)
r3 = openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000380)='/dev/stdout\x00', 0xc, 0x3, 0x0)
openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
fstat(r3, &(0x7f0000000400))
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f00000004c0)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0)
r4 = openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0)
close(r4)
fcntl$F_GETFD(r0, 0x1)
openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capuse\x00', 0xc, 0x3, 0x0)
openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f0000000580)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0)
openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)
openat$dev_kprint(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kprint\x00', 0xc, 0x1, 0x0)
openat$net_ipifc_stats(0xffffffffffffff9c, &(0x7f0000000640)='/net/ipifc/stats\x00', 0x11, 0x1, 0x0)
openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000680)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/stats\x00', 0x12, 0x1, 0x0)
openat$dev_klog(0xffffffffffffff9c, &(0x7f0000000700)='/dev/klog\x00', 0xa, 0x1, 0x0)

19:47:31 executing program 2:
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000000)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$dev_osversion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/osversion\x00', 0xf, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
r0 = openat$net_log(0xffffffffffffff9c, &(0x7f00000000c0)='/net/log\x00', 0x9, 0x3, 0x0)
abort_sysc_fd(r0)
openat$dev_user(0xffffffffffffff9c, &(0x7f0000000100)='/dev/user\x00', 0xa, 0x3, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000140)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000180)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
r1 = openat$dev_caphash(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/caphash\x00', 0xd, 0x3, 0x0)
openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
openat$proc_self_fd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/fd\x00', 0xe, 0x1, 0x0)
openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$dev_swap(0xffffffffffffff9c, &(0x7f0000000340)='/dev/swap\x00', 0xa, 0x3, 0x0)
openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000380)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
r2 = openat$proc_self_core(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$net_tcp_1_remote(0xffffffffffffff9c, &(0x7f0000000400)='/net/tcp/1/remote\x00', 0x12, 0x1, 0x0)
openat$dev_user(0xffffffffffffff9c, &(0x7f0000000440)='/dev/user\x00', 0xa, 0x3, 0x0)
openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000000480)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)
openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
close(r1)
openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000640)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10110, r2, 0x4)
openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0xa, 0x1, 0x0)

19:47:31 executing program 3:
openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000000)='/prof/kptrace\x00', 0xe, 0x3, 0x0)
r0 = openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
r1 = openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000100)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$prof_kprintx(0xffffffffffffff9c, &(0x7f0000000140)='/prof/kprintx\x00', 0xe, 0x3, 0x0)
openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$dev_capuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capuse\x00', 0xc, 0x3, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0xa, 0x1, 0x0)
getvcoreid()
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
fcntl$F_SETFL(r1, 0x4, 0x8000)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$dev_config(0xffffffffffffff9c, &(0x7f0000000300)='/dev/config\x00', 0xc, 0x1, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
openat$prof_kptrace(0xffffffffffffff9c, &(0x7f00000003c0)='/prof/kptrace\x00', 0xe, 0x3, 0x0)
r2 = openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000400)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000440)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/ns\x00', 0xe, 0x1, 0x0)
fcntl$F_SETFD(r0, 0x2, 0x1)
openat$dev_config(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/config\x00', 0xc, 0x1, 0x0)
openat$net_tcp_2_local(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/2/local\x00', 0x11, 0x1, 0x0)
vmm_ctl$VMM_CTL_GET_FLAGS(0x3)
r3 = openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/ns\x00', 0xe, 0x1, 0x0)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000580)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
openat(r2, &(0x7f00000005c0)='./file0\x00', 0x8, 0x80000, 0x20)
openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000600)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0)
fstat(r3, &(0x7f0000000640))

19:47:31 executing program 4:
r0 = openat$dev_klog(0xffffffffffffff9c, &(0x7f0000000000)='/dev/klog\x00', 0xa, 0x1, 0x0)
openat$net_udp_0_data(0xffffffffffffff9c, &(0x7f0000000040)='/net/udp/0/data\x00', 0x10, 0x3, 0x0)
r1 = openat$dev_stderr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/stderr\x00', 0xc, 0x3, 0x0)
fcntl$F_SETFL(r1, 0x4, 0x0)
r2 = openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000100)='/net/udp/0/local\x00', 0x11, 0x1, 0x0)
openat(r2, &(0x7f0000000140)='./file0\x00', 0x8, 0x1000, 0x32)
openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0)
nanosleep(&(0x7f00000001c0)={0x8, 0x10}, 0x0)
openat$net_tcp_0_err(0xffffffffffffff9c, &(0x7f0000000200)='/net/tcp/0/err\x00', 0xf, 0x3, 0x0)
vmm_ctl$VMM_CTL_GET_FLAGS(0x3)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
fcntl$F_SETFD(r0, 0x2, 0x1)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000280)='/net/ndb\x00', 0x9, 0x3, 0x0)
r3 = openat$net_tcp_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/net/tcp/stats\x00', 0xf, 0x1, 0x0)
openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/0/status\x00', 0x12, 0x1, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000340)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$dev_kprint(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kprint\x00', 0xc, 0x1, 0x0)
openat$net_iprouter(0xffffffffffffff9c, &(0x7f0000000440)='/net/iprouter\x00', 0xe, 0x3, 0x0)
openat$dev_cputime(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cputime\x00', 0xd, 0x1, 0x0)
r4 = proc_create(&(0x7f00000004c0)='./file0\x00', 0x8, &(0x7f0000000500)='/net/ipifc/0/ctl\x00', 0x11, 0x0)
fchdir(r4, r3)
proc_create(&(0x7f0000000540)='./file0\x00', 0x8, &(0x7f0000000580)='\x00', 0x1, 0x1)
openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000000600)='/net/ether0/stats\x00', 0x12, 0x1, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000640)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$dev_sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sysctl\x00', 0xc, 0x3, 0x0)
nunmount(&(0x7f00000006c0)='./file1\x00', 0x8, &(0x7f0000000700)='./file0\x00', 0x8)

19:47:31 executing program 5:
link(&(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000040)='./file0\x00', 0x8)
getpcoreid()
r0 = openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
fd2path(r0, &(0x7f00000000c0)=""/48, 0x30)
r1 = openat$dev_klog(0xffffffffffffff9c, &(0x7f0000000100)='/dev/klog\x00', 0xa, 0x1, 0x0)
r2 = openat$net_ipifc_stats(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/stats\x00', 0x11, 0x1, 0x0)
openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000180)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0)
openat$prof_kpctl(0xffffffffffffff9c, &(0x7f00000001c0)='/prof/kpctl\x00', 0xc, 0x3, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000200)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
link(&(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000280)='./file0\x00', 0x8)
r3 = openat$net_cs(0xffffffffffffff9c, &(0x7f00000002c0)='/net/cs\x00', 0x8, 0x3, 0x0)
mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000003, 0x20010, r2, 0x2)
r4 = openat$dev_cputime(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cputime\x00', 0xd, 0x1, 0x0)
r5 = openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0xa, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$dev_pgrpid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/pgrpid\x00', 0xc, 0x1, 0x0)
r6 = openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0)
openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f0000000440)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0)
openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/note\x00', 0x10, 0x1, 0x0)
stat(&(0x7f00000004c0)='./file0\x00', 0x8, &(0x7f0000000500))
openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_tcp_1_data(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/1/data\x00', 0x10, 0x3, 0x0)
r7 = proc_create(&(0x7f0000000600)='./file1\x00', 0x8, &(0x7f0000000640)='/net/udp/stats\x00', 0xf, 0x0)
dup_fds_to(r7, &(0x7f0000000680)=[{r5}, {r1}, {r3}, {r4}, {r6}], 0x5)
openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000700)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
abort_sysc(0x6)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000740)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ppid\x00', 0xa, 0x1, 0x0)
stat(&(0x7f00000007c0)='./file2\x00', 0x8, &(0x7f0000000800))

19:47:31 executing program 6:
openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/proc\x00', 0x10, 0x1, 0x0)
r0 = openat$net_ipifc_stats(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/stats\x00', 0x11, 0x1, 0x0)
r1 = openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000080)='/prof/kptrace\x00', 0xe, 0x3, 0x0)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
read(r0, &(0x7f0000000100)=""/12, 0xc)
fcntl$F_SETFL(r1, 0x4, 0x8000)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f0000000180)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0)
openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f00000001c0)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0)
openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0)
openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/pid\x00', 0x9, 0x1, 0x0)
r2 = openat$prof_kpdata(0xffffffffffffff9c, &(0x7f0000000280)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
write(r2, &(0x7f00000002c0)="e85efddd2ac76548acd52c65bd234950a856a02e73d04bb2f33a7e25385f5203bdd4081615480183b0c00f940579a29243eb81e45960c4b9d01c69807e44f860f74324fe9cfeec0257e8af2681248d945b8c35b61f9a5b818a8d82f109c6af842e5b37c85830b7c9d033625daa2393f28bba4dbb3a3f21ce088c6e87a1a7b02c815a4f48c4ab23a81d94e9a80974311d49751fcbbbf3e055a4e6dc", 0x9b)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f00000003c0)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/note\x00', 0x10, 0x1, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000480)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
openat$dev_osversion(0xffffffffffffff9c, &(0x7f0000000580)='/dev/osversion\x00', 0xf, 0x1, 0x0)
openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f00000005c0)='/net/udp/0/status\x00', 0x12, 0x1, 0x0)
openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f0000000600)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0)
r3 = openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000640)='/net/udp/0/local\x00', 0x11, 0x1, 0x0)
openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/note\x00', 0x10, 0x1, 0x0)
openat$prof_empty(0xffffffffffffff9c, &(0x7f00000006c0)='/prof/.empty\x00', 0xd, 0x3, 0x0)
vmm_ctl$VMM_CTL_SET_FLAGS(0x4, 0x4)
llseek(r3, 0x200, 0xfffffffffffffffa, &(0x7f0000000700), 0x2)
openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/capuse\x00', 0xc, 0x3, 0x0)

19:47:31 executing program 7:
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0)
self_notify(0x5, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x2, &(0x7f00000000c0)="86ae88309d9c90b539722d81b90eb28b960fa4", 0xfffffffffffffffa}, 0x0)
openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/note\x00', 0x10, 0x1, 0x0)
openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000180)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0)
r0 = openat$dev_config(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/config\x00', 0xc, 0x1, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f0000000200)='/net/log\x00', 0x9, 0x3, 0x0)
openat$net_tcp_stats(0xffffffffffffff9c, &(0x7f0000000240)='/net/tcp/stats\x00', 0xf, 0x1, 0x0)
openat$prof_kpdata(0xffffffffffffff9c, &(0x7f0000000280)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f00000002c0)='/net/tcp/clone\x00', 0xf, 0x3, 0x0)
openat(r0, &(0x7f0000000300)='./file0\x00', 0x8, 0x10000, 0x1)
openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
openat$net_ether0_ifstats(0xffffffffffffff9c, &(0x7f0000000380)='/net/ether0/ifstats\x00', 0x14, 0x1, 0x0)
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f00000003c0)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/addr\x00', 0x11, 0x3, 0x0)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000480)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
r1 = openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
close(r1)
openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/addr\x00', 0x11, 0x3, 0x0)
openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f0000000540)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$prof_kpdata(0xffffffffffffff9c, &(0x7f00000005c0)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0)
openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000640)='/net/ether0/addr\x00', 0x11, 0x3, 0x0)
openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000680)='/dev/stdout\x00', 0xc, 0x3, 0x0)
openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0)
openat$proc_self_user(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/user\x00', 0x10, 0x1, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000740)='/dev/kmesg\x00', 0xb, 0x1, 0x0)

19:47:32 executing program 0:
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/1/data\x00', 0x0, 0x3, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000000)='/net/udp/stats\x00', 0xf, 0x1, 0x0)

19:47:32 executing program 0:
r0 = openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
fcntl$F_SETFL(r0, 0x4, 0x0)
openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0)
openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0)
r1 = openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f0000000180)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0)
pop_ctx(&(0x7f00000001c0)="93a358c905b249ddfe6b0015d7e9c1028ad46157923a1c499a273b8b048cf87fd1e0d5eeb179d60cba7ceec84831cbca7a09b2cbe1abc9cb798d10768ebead661a749f95dd03361c489a8cfd19dbd86c8650f01adc79000e2e36dbf1ef4d7822970e27ff03538ffb63eebf29bb92f207a366f12032be6b178d4d1dfede37af0061365cd020b3d7b2cb30508a56e3f9687e71017af8b5070d588166623b0be2abd083a981d0806ad320392964991826581c3e62ef47ec338d06ded7099a14ce3d9934f75448b11314c4b11675a0e65f793763e1fccc6f074d")
openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0)
openat$prof_kptrace_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/prof/kptrace_ctl\x00', 0x12, 0x3, 0x0)
openat$net_tcp_2_listen(0xffffffffffffff9c, &(0x7f0000000340)='/net/tcp/2/listen\x00', 0x12, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
abort_sysc(0x800)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f00000003c0)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
r2 = openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000480)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
openat(r1, &(0x7f00000004c0)='./file0\x00', 0x8, 0x0, 0x7a)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f0000000540)='/net/tcp/0/local\x00', 0x11, 0x1, 0x0)
openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
fcntl$F_SETFL(r2, 0x4, 0x800)
openat$dev_empty(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/.empty\x00', 0xc, 0x3, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000600)='/net/.empty\x00', 0xc, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000640)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f0000000680)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0)
openat$proc_self_syscall(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/syscall\x00', 0x13, 0x1, 0x0)
fcntl$F_SETFL(r2, 0x4, 0x88800)


bash-4.3$ Unhandled user trap in vcore context from VC 1

HW TRAP frame (partial) at 0xffffffffc8e37e20 on core 1

  rax  0x000000005a5a4e80

  rbx  0x000030000001ae90

  rcx  0x0000000000000150

  rdx  0x000010000000a4c0

  rbp  0x000030000001ae80

  rsi  0x000010000000a5c0

  rdi  0x000000005a5a4f80

  r8   0x000000005a5a5a5a

  r9   0x000000005a5a4e80

  r10  0x0000000000000000

  r11  0x0000000000000200

  r12  0x0000000000410050

  r13  0x000010000000a4c0

  r14  0x0000000000000004

  r15  0x00007f7fffa01f40

  trap 0x0000000e Page Fault

  gsbs 0x0000000000000000

  fsbs 0x0000000000000000

  err  0x--------00000006

  rip  0x000000000040fe36

  cs   0x------------0023

  flag 0x0000000000010202

  rsp  0x000030000001ad80

  ss   0x------------001b

err 0x6 (for PFs: User 4, Wr 2, Rd 1), aux 0x000000005a5a4f80

Addr 0x000000000040fe36 is in syz-executor at offset 0x000000000000fe36

VM Regions for proc 40

NR:                                     Range:       Prot,      Flags,               File,                Off

00: (0x0000000000400000 - 0x00000000004b6000): 0x00000005, 0x00000001, 0xffff8000048ad020, 0x0000000000000000

01: (0x00000000004b6000 - 0x00000000004b7000): 0x00000005, 0x00000002, 0xffff8000048ad020, 0x00000000000b6000

02: (0x00000000006b6000 - 0x00000000006b9000): 0x00000003, 0x00000002, 0xffff8000048ad020, 0x00000000000b6000

03: (0x00000000006b9000 - 0x00000000008e5000): 0x00000003, 0x00000002, 0x0000000000000000, 0x0000000000000000

04: (0x0000000020000000 - 0x0000000021000000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

05: (0x0000100000000000 - 0x0000100000024000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

06: (0x0000300000000000 - 0x0000300000001000): 0x00000003, 0x00000002, 0xffff8000048ad020, 0x0000000000000000

07: (0x0000300000001000 - 0x0000300000005000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

08: (0x0000300000005000 - 0x0000300000007000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

09: (0x0000300000007000 - 0x0000300000019000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

10: (0x0000300000019000 - 0x000030000003d000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

11: (0x00007f7fff8ff000 - 0x00007f7fff9ff000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000


Backtrace of user context on Core 1:

	Offsets only matter for shared libraries

#01 Addr 0x000000000040fe36 is in syz-executor at offset 0x000000000000fe36

#02 Addr 0x000000000041025e is in syz-executor at offset 0x000000000001025e

#03 Addr 0x000000000041580d is in syz-executor at offset 0x000000000001580d

#04 Addr 0x00000000004080fb is in syz-executor at offset 0x00000000000080fb

#05 Addr 0x0000000000414c60 is in syz-executor at offset 0x0000000000014c60

#06 Addr 0x000000000040862a is in syz-executor at offset 0x000000000000862a

#07 Addr 0x0000000000404019 is in syz-executor at offset 0x0000000000004019

#08 Addr 0x000000000041498c is in syz-executor at offset 0x000000000001498c

#09 Addr 0x0000000000414991 is in syz-executor at offset 0x0000000000014991
19:47:36 executing program 0:
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x6012, 0xffffffffffffff9c, 0x0)
openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)

19:47:36 executing program 0:
openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0)
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000040)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$net_tcp_1_remote(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/1/remote\x00', 0x12, 0x1, 0x0)
openat$net_tcp_0_remote(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/0/remote\x00', 0x12, 0x1, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/random\x00', 0xc, 0x1, 0x0)
openat$net_iprouter(0xffffffffffffff9c, &(0x7f0000000180)='/net/iprouter\x00', 0xe, 0x3, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0)
openat$prof_empty(0xffffffffffffff9c, &(0x7f0000000240)='/prof/.empty\x00', 0xd, 0x3, 0x0)
openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f0000000280)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/killkid\x00', 0xd, 0x3, 0x0)
openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f0000000400)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0)
openat$dev_caphash(0xffffffffffffff9c, &(0x7f0000000440)='/dev/caphash\x00', 0xd, 0x3, 0x0)
stat(&(0x7f0000000480)='./file0\x00', 0x8, &(0x7f00000004c0))
openat$dev_null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0xa, 0x1, 0x0)
openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f0000000580)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0)
openat$dev_sdctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sdctl\x00', 0xb, 0x3, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
openat$net_ether0_2_stats(0xffffffffffffff9c, &(0x7f0000000640)='/net/ether0/2/stats\x00', 0x14, 0x1, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$proc_self_strace(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000700)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$net_tcp_stats(0xffffffffffffff9c, &(0x7f0000000740)='/net/tcp/stats\x00', 0xf, 0x1, 0x0)
openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0)
openat$proc_self_user(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/user\x00', 0x10, 0x1, 0x0)

19:47:36 executing program 0:
vmm_ctl$VMM_CTL_SET_FLAGS(0x4, 0x2)
r0 = openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capuse\x00', 0xc, 0x3, 0x0)
fd2path(r0, &(0x7f0000000040)=""/4096, 0x1000)

19:47:36 executing program 3:
r0 = openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000080)='/net/ipifc/1/remote\x00', 0x1, 0x1, 0x0)
fcntl$F_SYNC(r0, 0x65)
openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)

19:47:36 executing program 2:
r0 = openat$dev_config(0xffffffffffffff9c, &(0x7f0000000000)='/dev/config\x00', 0xc, 0x1, 0x0)
close(r0)

19:47:36 executing program 0:
r0 = openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/text\x00', 0x10, 0x1, 0x0)
openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/text\x00', 0x10, 0x1, 0x0)
fwstat(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x0)
openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/proc\x00', 0x10, 0x1, 0x0)
openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f00000010c0)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f00000011c0)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000001200)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0)
vmm_ctl$VMM_CTL_SET_FLAGS(0x4, 0x1)
r1 = openat$dev_sysctl(0xffffffffffffff9c, &(0x7f0000001240)='/dev/sysctl\x00', 0xc, 0x3, 0x0)
openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000001280)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f00000012c0)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000001300)='/proc/self/proc\x00', 0x10, 0x1, 0x0)
openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000001340)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
r2 = openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000001380)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f00000013c0)='/net/.empty\x00', 0xc, 0x3, 0x0)
openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000001400)='/net/ether0/stats\x00', 0x12, 0x1, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000001440)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000001480)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f00000014c0)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
fcntl$F_GETFL(r2, 0x3)
openat$dev_sysctl(0xffffffffffffff9c, &(0x7f0000001500)='/dev/sysctl\x00', 0xc, 0x3, 0x0)
openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000001540)='/dev/drivers\x00', 0xd, 0x1, 0x0)
llseek(r1, 0x8, 0x8f, &(0x7f0000001580), 0x1)
openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f00000015c0)='/net/icmp/stats\x00', 0x10, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000001600)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f0000001640)='/dev/random\x00', 0xc, 0x1, 0x0)
openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000001680)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)

19:47:36 executing program 3:
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000040)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0)
openat$prof_kptrace_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/prof/kptrace_ctl\x00', 0x12, 0x3, 0x0)
r0 = openat$dev_kmesg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat$dev_time(0xffffffffffffff9c, &(0x7f0000000100)='/dev/time\x00', 0xa, 0x3, 0x0)
openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000140)='/prof/kptrace\x00', 0xe, 0x3, 0x0)
openat$prof_kprintx(0xffffffffffffff9c, &(0x7f0000000180)='/prof/kprintx\x00', 0xe, 0x3, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)
openat$net_udp_0_listen(0xffffffffffffff9c, &(0x7f0000000200)='/net/udp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000240)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0)
openat$net_ether0_2_ifstats(0xffffffffffffff9c, &(0x7f0000000280)='/net/ether0/2/ifstats\x00', 0x16, 0x1, 0x0)
fcntl$F_GETFD(r0, 0x1)
openat$prof_kptrace(0xffffffffffffff9c, &(0x7f00000002c0)='/prof/kptrace\x00', 0xe, 0x3, 0x0)
openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f0000000300)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0)
openat$prof_kprintx(0xffffffffffffff9c, &(0x7f0000000400)='/prof/kprintx\x00', 0xe, 0x3, 0x0)
openat$net_ether0_2_stats(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/2/stats\x00', 0x14, 0x1, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0)
openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
openat$dev_config(0xffffffffffffff9c, &(0x7f0000000580)='/dev/config\x00', 0xc, 0x1, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$net_ipifc_stats(0xffffffffffffff9c, &(0x7f0000000600)='/net/ipifc/stats\x00', 0x11, 0x1, 0x0)
openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
openat$proc_self_user(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/user\x00', 0x10, 0x1, 0x0)
openat$net_tcp_2_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/net/tcp/2/ctl\x00', 0xf, 0x3, 0x0)
openat$proc_self_fd(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/fd\x00', 0xe, 0x1, 0x0)

19:47:37 executing program 1:
r0 = openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0)
tcgetattr(r0, &(0x7f00000000c0))

19:47:37 executing program 0:
openat$prof_kptrace_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/prof/kptrace_ctl\x00', 0x12, 0x3, 0x0)
r0 = openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x8832, r0, 0x0)
openat$proc_self_ns(0xffffffffffffff9c, 0x0, 0x0, 0x1, 0x0)

19:47:37 executing program 2:
r0 = openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pid\x00', 0x9, 0x1, 0x0)
fcntl$F_SYNC(r0, 0x65)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppid\x00', 0xa, 0x1, 0x0)
r1 = openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/clone\x00', 0xf, 0x3, 0x0)
fcntl$F_SYNC(r0, 0x65)
openat$net_tcp_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/stats\x00', 0xf, 0x1, 0x0)
openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
r2 = openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000140)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
r3 = openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f0000000180)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f00000001c0)='/net/log\x00', 0x9, 0x3, 0x0)
openat$dev_user(0xffffffffffffff9c, &(0x7f0000000200)='/dev/user\x00', 0xa, 0x3, 0x0)
openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0)
fcntl$F_SYNC(r2, 0x65)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000280)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f00000002c0)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/0/err\x00', 0xf, 0x3, 0x0)
vc_entry()
openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000340)='/dev/stdout\x00', 0xc, 0x3, 0x0)
openat$net_ipifc_1_local(0xffffffffffffff9c, &(0x7f0000000380)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0)
openat$dev_swap(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/swap\x00', 0xa, 0x3, 0x0)
openat$net_ether0_2_ifstats(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/2/ifstats\x00', 0x16, 0x1, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x5010, r3, 0x5)
openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000440)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f0000000480)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0)
openat$net_cs(0xffffffffffffff9c, &(0x7f00000004c0)='/net/cs\x00', 0x8, 0x3, 0x0)
openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/addr\x00', 0x11, 0x3, 0x0)
fd2path(r1, &(0x7f0000000540)=""/251, 0xfb)
openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sysname\x00', 0xd, 0x3, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
read(r3, &(0x7f00000006c0)=""/4096, 0x1000)

19:47:37 executing program 3:
r0 = openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/segment\x00', 0x13, 0x1, 0x0)
close(r0)
r1 = openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/0/local\x00', 0xffffffffffffff8a, 0x1, 0x0)
openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0)
fcntl$F_GETFL(r1, 0x3)

19:47:37 executing program 0:
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
r0 = openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0)
pop_ctx(&(0x7f0000000080)="ca024f1168e072dfbf6c5b3733c1f438a0005538730c3456d8a690477b79c00f4d875aa6431268b9acc3a72f9221a9c0cd98d3de084746e2265b5c27364fdce3c58eb631acfbee0edd1342cbb0f7e20b1c2e9e1a9ed7504776f490b94b7f8d6ffda2ad4b9425fe58bd2646da4cd0df2373f818a271190a6371e1be8bb22bfc17273659b9dd119e2f1961b39e1b018158e6b0976c1829b321112ce3e9d213a222d9e645d3931184609ef07b90d1515e74c32d98142e7f8df03c9b6b7573658a75d70805e4037a31d1e28ba2008b9404cbe99336a0fb4560b0")
nmount(r0, &(0x7f0000000180)='./file0\x00', 0x8, 0x11)
rename(&(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000200)='./file0\x00', 0x8)
openat$net_ether0_2_ifstats(0xffffffffffffff9c, &(0x7f0000000240)='/net/ether0/2/ifstats\x00', 0x16, 0x1, 0x0)
r1 = openat$dev_null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0xa, 0x1, 0x0)
fcntl$F_DUPFD(r1, 0x0, r1, 0x1)
openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f00000002c0)='/net/udp/0/err\x00', 0xf, 0x3, 0x0)
openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000340)='/net/.empty\x00', 0xc, 0x3, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
r2 = openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000440)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0)
openat(r0, &(0x7f0000000480)='./file0\x00', 0x8, 0x80002, 0x8)
openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0)
nmount(r2, &(0x7f0000000540)='./file0\x00', 0x8, 0x0)
openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f0000000580)='/net/udp/0/err\x00', 0xf, 0x3, 0x0)
openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/addr\x00', 0x11, 0x3, 0x0)
openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/segment\x00', 0x13, 0x1, 0x0)
openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
openat$net_tcp_stats(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/stats\x00', 0xf, 0x1, 0x0)
openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/stats\x00', 0x12, 0x1, 0x0)
openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sdctl\x00', 0xb, 0x3, 0x0)
openat$dev_bintime(0xffffffffffffff9c, &(0x7f0000000740)='/dev/bintime\x00', 0xd, 0x3, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
populate_va(&(0x7f0000ffc000/0x2000)=nil, 0x6)
openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000780)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0)


Unhandled user trap in vcore context from VC 0

HW TRAP frame (partial) at 0xffffffffc8e37e20 on core 1

  rax  0x000000005a5a4e80

  rbx  0x0000300000006e90

  rcx  0x0000000000000150

  rdx  0x000010000000a4c0

  rbp  0x0000300000006e80

  rsi  0x000010000000a5c0

  rdi  0x000000005a5a4f80

  r8   0x000000005a5a5a5a

  r9   0x000000005a5a4e80

  r10  0x0000000000000000

  r11  0x0000000000000200

  r12  0x0000000000410050

  r13  0x000010000000a4c0

  r14  0x0000000000000004

  r15  0x00007f7fffa01200

  trap 0x0000000e Page Fault

  gsbs 0x0000000000000000

  fsbs 0x0000000000000000

  err  0x--------00000006

  rip  0x000000000040fe36

  cs   0x------------0023

  flag 0x0000000000010202

  rsp  0x0000300000006d80

  ss   0x------------001b

err 0x6 (for PFs: User 4, Wr 2, Rd 1), aux 0x000000005a5a4f80

Addr 0x000000000040fe36 is in syz-executor at offset 0x000000000000fe36

VM Regions for proc 72

NR:                                     Range:       Prot,      Flags,               File,                Off

00: (0x0000000000400000 - 0x00000000004b6000): 0x00000005, 0x00000001, 0xffff800007452220, 0x0000000000000000

01: (0x00000000004b6000 - 0x00000000004b7000): 0x00000005, 0x00000002, 0xffff800007452220, 0x00000000000b6000

02: (0x00000000006b6000 - 0x00000000006b9000): 0x00000003, 0x00000002, 0xffff800007452220, 0x00000000000b6000

03: (0x00000000006b9000 - 0x00000000008e5000): 0x00000003, 0x00000002, 0x0000000000000000, 0x0000000000000000

04: (0x0000000020000000 - 0x0000000021000000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

05: (0x0000100000000000 - 0x0000100000024000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

06: (0x0000300000000000 - 0x0000300000001000): 0x00000003, 0x00000002, 0xffff800007452220, 0x0000000000000000

07: (0x0000300000001000 - 0x0000300000005000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

08: (0x0000300000005000 - 0x0000300000007000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

09: (0x0000300000007000 - 0x0000300000019000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

10: (0x0000300000019000 - 0x000030000003d000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

11: (0x00007f7fff8ff000 - 0x00007f7fff9ff000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000


Backtrace of user context on Core 1:

	Offsets only matter for shared libraries

#01 Addr 0x000000000040fe36 is in syz-executor at offset 0x000000000000fe36

#02 Addr 0x000000000041025e is in syz-executor at offset 0x000000000001025e

#03 Addr 0x000000000041580d is in syz-executor at offset 0x000000000001580d

#04 Addr 0x00000000004080fb is in syz-executor at offset 0x00000000000080fb

#05 Addr 0x0000000000414c60 is in syz-executor at offset 0x0000000000014c60

#06 Addr 0x000000000040862a is in syz-executor at offset 0x000000000000862a

#07 Addr 0x0000000000404019 is in syz-executor at offset 0x0000000000004019

#08 Addr 0x000000000041498c is in syz-executor at offset 0x000000000001498c

#09 Addr 0x0000000000414991 is in syz-executor at offset 0x0000000000014991
19:47:41 executing program 4:
r0 = openat$net_tcp_2_local(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/2/local\x00', 0x11, 0x1, 0x0)
r1 = openat$dev_time(0xffffffffffffff9c, &(0x7f0000000180)='/dev/time\x00', 0xfffffffffffffe9d, 0x3, 0x0)
openat$dev_caphash(0xffffffffffffff9c, &(0x7f0000000200)='/dev/caphash\x00', 0x7, 0x3, 0x0)
fcntl$F_DUPFD(r1, 0x0, r0, 0x0)
openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/text\x00', 0xe2, 0x1, 0x0)

19:47:41 executing program 5:
r0 = openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sysstat\x00', 0xfffffffffffffe23, 0x3, 0x0)
llseek(r0, 0xfffffffffffffffe, 0x0, &(0x7f0000000180), 0x4)
dup_fds_to(0xffffffffffffffff, &(0x7f0000000000)=[{r0}, {r0}, {r0}, {r0}, {r0}], 0x5)

19:47:41 executing program 7:
r0 = openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
abort_sysc_fd(r0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
tcgetattr(r0, &(0x7f0000000680))

19:47:41 executing program 2:
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0)
r0 = proc_create(0xfffffffffffffffe, 0xffffffd6, &(0x7f0000000000)='$\xb3\x9cq/&\x00', 0x7, 0x0)
chdir(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffc0)

19:47:41 executing program 6:
openat$net_empty(0xffffffffffffff9c, &(0x7f00000000c0)='/net/.empty\x00', 0xc, 0x3, 0x0)
r0 = openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/proc\x00', 0x10, 0x1, 0x0)
write(r0, &(0x7f0000000040)="3ef28058c16375565e0518b94451bd7b46570f0f7378dffab693e39763642f48fd573688885765ebd0c88b98", 0x2c)
openat$net_iproute(0xffffffffffffff9c, &(0x7f0000000080)='/net/iproute\x00', 0x2, 0x3, 0x0)

19:47:41 executing program 0:
mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000000)
openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/1/snoop\x00', 0x228, 0x1, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000000)='/net/udp/stats\x00', 0xf, 0x1, 0x0)

19:47:41 executing program 3:
vmm_ctl$VMM_CTL_SET_EXITS(0x2, 0x1)
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000000)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000040)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000080)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppid\x00', 0xa, 0x1, 0x0)
r0 = openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000100)='/net/ether0/addr\x00', 0x11, 0x3, 0x0)
openat$net_ether0_2_ifstats(0xffffffffffffff9c, &(0x7f0000000140)='/net/ether0/2/ifstats\x00', 0x16, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
fcntl$F_SETFD(r0, 0x2, 0x1)
openat$dev_stdout(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/stdout\x00', 0xc, 0x3, 0x0)
openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
r1 = openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sdctl\x00', 0xb, 0x3, 0x0)
openat$dev_null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa, 0x1, 0x0)
openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f0000000300)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0)
r2 = openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sdctl\x00', 0xb, 0x3, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000380)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f00000003c0)='/net/udp/0/err\x00', 0xf, 0x3, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
fcntl$F_GETFL(r1, 0x3)
openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/note\x00', 0x10, 0x1, 0x0)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f00000004c0)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000500)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0)
openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000540)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
fcntl$F_GETFD(r2, 0x1)
openat$net_ndb(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/proc\x00', 0x10, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)

19:47:41 executing program 1:
r0 = openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa, 0x1, 0x0)
openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xd, 0x1, 0x0)
openat$dev_swap(0xffffffffffffff9c, &(0x7f0000000080)='/dev/swap\x00', 0xa, 0x3, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppid\x00', 0xa, 0x1, 0x0)
vmm_ctl$VMM_CTL_SET_EXITS(0x2, 0x0)
r1 = openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capuse\x00', 0xc, 0x3, 0x0)
openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f00000001c0)='/net/udp/0/status\x00', 0x12, 0x1, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000280)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0)
r2 = openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f00000002c0)='/net/tcp/clone\x00', 0xf, 0x3, 0x0)
llseek(r1, 0x100, 0x3f, &(0x7f0000000300), 0x0)
openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f0000000340)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0)
r3 = openat$net_cs(0xffffffffffffff9c, &(0x7f0000000380)='/net/cs\x00', 0x8, 0x3, 0x0)
openat$dev_zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0xa, 0x1, 0x0)
nmount(r2, &(0x7f0000000400)='./file0\x00', 0x8, 0x0)
r4 = openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000440)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0)
tap_fds(&(0x7f0000000600)=[{r4, 0x2, 0x3, 0x1f, &(0x7f0000000500)={&(0x7f0000000480)="8b917d8eda7404f276ea6f9f05b970cd67349d813642d0e3992eb66cdc164f8754a66c3aefe20b5f1c9fd8c2a750243bc31f7f588a827f2ab2c0a6f324df4e73ade7a96e1f4b803e85b4104f67a264fd", 0x2, 0x1, 0xffff, 0x100000001, 0x347}}, {r3, 0x1, 0x86, 0xfd, &(0x7f00000005c0)={&(0x7f0000000540)="ab22b57a35381dafaaa2525eb63eb0a9917a21f7f3efd596189fb804b6a0b352b4397c62f528b143f20cc7cc8cb490ea760ed82c8b3c753432c032c1513abed87cd633583c6ca1811a0cf77d9cb79c40", 0x9, 0x1, 0x9, 0x7, 0xdc}}], 0x2)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000640)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000680)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0)
openat$dev_time(0xffffffffffffff9c, &(0x7f0000000700)='/dev/time\x00', 0xa, 0x3, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0)
fstat(r0, &(0x7f00000007c0))
openat$prof_kpctl(0xffffffffffffff9c, &(0x7f0000000840)='/prof/kpctl\x00', 0xc, 0x3, 0x0)
openat$dev_caphash(0xffffffffffffff9c, &(0x7f0000000880)='/dev/caphash\x00', 0xd, 0x3, 0x0)
openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f00000008c0)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0)

19:47:41 executing program 4:
r0 = openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0)
openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000080)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
r1 = openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
fstat(r1, &(0x7f0000000100))
r2 = proc_create(&(0x7f0000000180)='./file0\x00', 0x8, &(0x7f00000001c0)='\x00', 0x1, 0x0)
fchdir(r2, r0)
openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/ns\x00', 0xe, 0x1, 0x0)
openat$dev_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sysctl\x00', 0xc, 0x3, 0x0)
openat$proc_self_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/mem\x00', 0xf, 0x1, 0x0)
openat$net_ipifc_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ipifc/stats\x00', 0x11, 0x1, 0x0)
openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/pid\x00', 0x9, 0x1, 0x0)
r3 = openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0xd, 0x1, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000380)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
openat$dev_stdout(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/stdout\x00', 0xc, 0x3, 0x0)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
openat$proc_self_syscall(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/syscall\x00', 0x13, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0)
openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000500)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)
openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000600)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0)
openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/status\x00', 0x12, 0x1, 0x0)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000680)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
fstat(r3, &(0x7f00000006c0))
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000740)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f00000007c0)='/net/udp/stats\x00', 0xf, 0x1, 0x0)

19:47:41 executing program 5:
block(0x0)
openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0)
r0 = openat$prof_kpctl(0xffffffffffffff9c, &(0x7f0000000040)='/prof/kpctl\x00', 0xc, 0x3, 0x0)
llseek(r0, 0x100, 0xfa, &(0x7f0000000080), 0x2)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0)
openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f0000000140)='/net/icmp/stats\x00', 0x10, 0x1, 0x0)
openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000180)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0)
r1 = openat$net_udp_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$dev_null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0xa, 0x1, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
r2 = openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f0000000280)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0)
openat$proc_self_user(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/user\x00', 0x10, 0x1, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/random\x00', 0xc, 0x1, 0x0)
openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$dev_pgrpid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/pgrpid\x00', 0xc, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r1, 0x3)
openat$net_ipselftab(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipselftab\x00', 0xf, 0x1, 0x0)
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000400)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sdctl\x00', 0xb, 0x3, 0x0)
openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
openat$proc_self_profile(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/profile\x00', 0x13, 0x1, 0x0)
openat$proc_self_syscall(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/syscall\x00', 0x13, 0x1, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000540)='/net/.empty\x00', 0xc, 0x3, 0x0)
fcntl$F_SETFD(r2, 0x2, 0x1)
openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f0000000580)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0)
openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000640)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0)
openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0)

19:47:41 executing program 7:
r0 = openat$net_tcp_2_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/2/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sysname\x00', 0xd, 0x3, 0x0)
r1 = openat$net_tcp_2_local(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/2/local\x00', 0x11, 0x1, 0x0)
r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x80000, 0x4)
openat(r2, &(0x7f0000000100)='./file0\x00', 0x8, 0x603, 0x90)
openat(r1, &(0x7f0000000140)='./file0\x00', 0x8, 0x80300, 0x8)
r3 = openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
r4 = proc_create(&(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000200)='\x00', 0x1, 0x1)
provision(r4, 0x0, 0x9)
r5 = openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capuse\x00', 0xc, 0x3, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
nmount(r5, &(0x7f00000002c0)='./file0\x00', 0x8, 0x5)
unlink(&(0x7f0000000300)='./file0\x00', 0x8)
abort_sysc_fd(r3)
proc_create(&(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000380)='/dev/sysname\x00', 0xd, 0x1)
nmount(r3, &(0x7f00000003c0)='./file0\x00', 0x8, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
fcntl$F_GETFL(r2, 0x3)
r6 = proc_create(&(0x7f0000000440)='./file0/file0\x00', 0xe, &(0x7f0000000480)='\x00', 0x1, 0x1)
openat$net_tcp_2_listen(0xffffffffffffff9c, &(0x7f00000004c0)='/net/tcp/2/listen\x00', 0x12, 0x3, 0x0)
openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
provision(r6, 0x0, 0xfffffffffffffffd)
nunmount(&(0x7f0000000540)='./file0\x00', 0x8, &(0x7f0000000580)='./file0\x00', 0x8)
openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0)
openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/ns\x00', 0xe, 0x1, 0x0)
fwstat(r2, &(0x7f0000000640)=""/15, 0xf, 0x0)
fork()
openat$dev_null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0xa, 0x1, 0x0)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
mkdir(&(0x7f0000000700)='./file0/file0\x00', 0xe, 0x160)

19:47:41 executing program 0:
r0 = proc_create(&(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000040)='.\x00', 0x2, 0x1)
r1 = openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
r2 = openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
r3 = openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/status\x00', 0x12, 0x1, 0x0)
r4 = openat$net_ipifc_1_local(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0)
r5 = openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0)
dup_fds_to(r0, &(0x7f00000001c0)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5)
r6 = openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000200)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0)
openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
syz_execute_func(&(0x7f00000002c0)="f2440f1206c481685e250d000000c421fe12f42e42d9e966440f3829dec4c15c58b199899999c4e3791d99b8dce310002ed9f6d9eac4c1a5649599899999")
r7 = openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/0/local\x00', 0x11, 0x1, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000340)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
fd2path(r1, &(0x7f0000000380)=""/250, 0xfa)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f0000000480)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000500)='/net/.empty\x00', 0xc, 0x3, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f0000000580)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/stats\x00', 0x12, 0x1, 0x0)
openat$net_tcp_2_local(0xffffffffffffff9c, &(0x7f0000000600)='/net/tcp/2/local\x00', 0x11, 0x1, 0x0)
openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/note\x00', 0x10, 0x1, 0x0)
fcntl$F_GETFL(r7, 0x3)
openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f0000000680)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0)
openat$proc_self_user(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/user\x00', 0x10, 0x1, 0x0)
openat$net_udp_0_listen(0xffffffffffffff9c, &(0x7f0000000700)='/net/udp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000000740)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f00000007c0)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)
fcntl$F_GETFD(r6, 0x1)

19:47:41 executing program 6:
r0 = openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0)
r1 = openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/status\x00', 0x12, 0x1, 0x0)
openat$dev_kprint(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kprint\x00', 0xc, 0x1, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
r2 = openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
r3 = proc_create(&(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000180)='/proc/self/status\x00', 0x12, 0x0)
fchdir(r3, r1)
fcntl$F_SYNC(r2, 0x65)
openat$dev_drivers(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/drivers\x00', 0xd, 0x1, 0x0)
openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f0000000200)='/net/tcp/0/local\x00', 0x11, 0x1, 0x0)
openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000240)='/prof/kptrace\x00', 0xe, 0x3, 0x0)
r4 = openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000280)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
openat$dev_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sysctl\x00', 0xc, 0x3, 0x0)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
r5 = openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000340)='/dev/drivers\x00', 0xd, 0x1, 0x0)
r6 = openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f0000000380)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0)
r7 = openat$net_arp(0xffffffffffffff9c, &(0x7f00000003c0)='/net/arp\x00', 0x9, 0x3, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f0000000440)='/net/log\x00', 0x9, 0x3, 0x0)
dup_fds_to(0xffffffffffffffff, &(0x7f0000000480)=[{r6}, {r5}, {r5}, {r4}, {r0}, {r7}, {r1}], 0x7)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000580)='/net/.empty\x00', 0xc, 0x3, 0x0)
lstat(&(0x7f00000005c0)='./file0\x00', 0x8, &(0x7f0000000600))
proc_run(0xffffffffffffffff)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$dev_osversion(0xffffffffffffff9c, &(0x7f0000000700)='/dev/osversion\x00', 0xf, 0x1, 0x0)
openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000740)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0)
openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000780)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)

19:47:41 executing program 2:
openat$prof_kprintx(0xffffffffffffff9c, &(0x7f0000000000)='/prof/kprintx\x00', 0xe, 0x3, 0x0)
r0 = openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
r1 = openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/note\x00', 0x10, 0x1, 0x0)
openat$dev_empty(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/.empty\x00', 0xc, 0x3, 0x0)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x4)
openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8, 0x100000, 0x18)
openat$dev_stderr(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/stderr\x00', 0xc, 0x3, 0x0)
r2 = openat$dev_bintime(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bintime\x00', 0xd, 0x3, 0x0)
openat$proc_self_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/mem\x00', 0xf, 0x1, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
llseek(r0, 0xa9af, 0x10001, &(0x7f00000002c0), 0x1)
openat$net_tcp_2_listen(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/2/listen\x00', 0x12, 0x3, 0x0)
openat$proc_self_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/mem\x00', 0xf, 0x1, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$net_ipselftab(0xffffffffffffff9c, &(0x7f0000000400)='/net/ipselftab\x00', 0xf, 0x1, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000480)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
llseek(r2, 0x1000, 0x1f, &(0x7f00000004c0), 0x2)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000580)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$proc_self_args(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/args\x00', 0x10, 0x3, 0x0)
fcntl$F_SYNC(r2, 0x65)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000600)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000640)='/net/.empty\x00', 0xc, 0x3, 0x0)
openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f0000000680)='/net/icmp/stats\x00', 0x10, 0x1, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)



kernel panic at /syzkaller/managers/main/kernel/kern/include/kref.h:61, from core 3: assertion failed: kref

Stack Backtrace on Core 3:

#01 [<0xffffffffc200a47c>] in backtrace

#02 [<0xffffffffc2009c15>] in _panic

#03 [<0xffffffffc2049856>] in kref_get

#04 [<0xffffffffc204988e>] in enum_proc.10295

#05 [<0xffffffffc20092b1>] in hash_for_each

#06 [<0xffffffffc204ed97>] in proc_get_set

#07 [<0xffffffffc2045e44>] in profiler_setup

#08 [<0xffffffffc207c117>] in kprof_open

#09 [<0xffffffffc2033c40>] in __namec_from

#10 [<0xffffffffc2034433>] in namec

#11 [<0xffffffffc2041896>] in sysopenat

#12 [<0xffffffffc2058f0f>] in sys_openat

#13 [<0xffffffffc2059b99>] in syscall

#14 [<0xffffffffc205a748>] in run_local_syscall

#15 [<0xffffffffc205ac89>] in prep_syscalls

#16 [<0xffffffffc20ac492>] in sysenter_callwrapper


Entering Nanwan's Dungeon on Core 3 (Ints on):

Type 'help' for a list of commands.