2018/07/22 21:56:49 fuzzer started
2018/07/22 21:56:50 dialing manager at 127.0.0.1:46267
2018/07/22 21:56:50 syscalls: 213
2018/07/22 21:56:50 code coverage: support is not implemented in syzkaller
2018/07/22 21:56:50 comparison tracing: support is not implemented in syzkaller
2018/07/22 21:56:50 setuid sandbox: support is not implemented in syzkaller
2018/07/22 21:56:50 namespace sandbox: support is not implemented in syzkaller
2018/07/22 21:56:50 fault injection: support is not implemented in syzkaller
2018/07/22 21:56:50 leak checking: support is not implemented in syzkaller
2018/07/22 21:56:50 net packed injection: support is not implemented in syzkaller
2018/07/22 21:56:50 net device setup: support is not implemented in syzkaller
21:56:50 executing program 1:
r0 = openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
fcntl$F_SETFL(r0, 0x4, 0x8800)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000040)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/consctl\x00', 0xd, 0x3, 0x0)
openat$net_tcp_2_listen(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/2/listen\x00', 0x12, 0x3, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppid\x00', 0xa, 0x1, 0x0)
openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000000140)='/net/ether0/stats\x00', 0x12, 0x1, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000180)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0)
openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f0000000200)='/net/udp/0/status\x00', 0x12, 0x1, 0x0)
openat$dev_cons(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cons\x00', 0xa, 0x3, 0x0)
openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f0000000280)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
abort_sysc_fd(r0)
openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f00000002c0)='/net/tcp/clone\x00', 0xf, 0x3, 0x0)
openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f0000000300)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0)
openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000340)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0)
r1 = openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000400)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000480)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f00000004c0)='/net/udp/0/status\x00', 0x12, 0x1, 0x0)
openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
openat$net_tcp_0_err(0xffffffffffffff9c, &(0x7f0000000540)='/net/tcp/0/err\x00', 0xf, 0x3, 0x0)
openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f0000000580)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppid\x00', 0xa, 0x1, 0x0)
openat$net_ipselftab(0xffffffffffffff9c, &(0x7f0000000600)='/net/ipselftab\x00', 0xf, 0x1, 0x0)
fstat(r1, &(0x7f0000000640))
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f00000006c0)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffff9c, 0x2000000000000)

21:56:50 executing program 0:
openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f0000000080)='/net/log\x00', 0x9, 0x3, 0x0)
openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f0000000100)='/net/log\x00', 0x9, 0x3, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000140)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
r0 = openat$net_log(0xffffffffffffff9c, &(0x7f00000001c0)='/net/log\x00', 0x9, 0x3, 0x0)
openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000240)='/net/udp/0/local\x00', 0x11, 0x1, 0x0)
openat$proc_self_fpregs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
openat$net_ether0_2_ifstats(0xffffffffffffff9c, &(0x7f0000000300)='/net/ether0/2/ifstats\x00', 0x16, 0x1, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000340)='/net/ndb\x00', 0x9, 0x3, 0x0)
openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000380)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
send_event(&(0x7f0000000440)={&(0x7f00000003c0)="1e1bc5592747db69379c00216f80ef2597e5b65525528e8e90c1a34afaf18e427cd3f7217d5655c5a02e2462417361b45d6debbbf4b67614a22015a973593f8dce220a64a8fdeaef6904e8bee1fec539", 0xd145, 0x1, 0x7, 0xfffffffffffffffd, 0x7}, &(0x7f0000000500)={0xc, 0x9, 0xcc, &(0x7f0000000480)="4c52ec7849118b064125a129495cf540aa8f58cf6ef7b42f1e8f94555db10db4e3d18980f046de2d5a0375d6a42626dc09bcc308fb984b8847945a2017c6a4abcf1647c8acdde7eb1574623efe8921f179e2", 0x1ff}, 0x1)
openat$prof_kpdata(0xffffffffffffff9c, &(0x7f0000000540)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
openat$dev_null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0xa, 0x1, 0x0)
llseek(r0, 0x9, 0xb8, &(0x7f00000005c0), 0x0)
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000600)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
r1 = openat$net_tcp_0_remote(0xffffffffffffff9c, &(0x7f0000000640)='/net/tcp/0/remote\x00', 0x12, 0x1, 0x0)
llseek(r1, 0x7, 0xffffffff, &(0x7f0000000680), 0x2)
r2 = openat$dev_kmesg(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kmesg\x00', 0xb, 0x1, 0x0)
openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000000700)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)
openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000740)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000780)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f00000007c0)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0)
openat$dev_time(0xffffffffffffff9c, &(0x7f0000000800)='/dev/time\x00', 0xa, 0x3, 0x0)
openat$net_cs(0xffffffffffffff9c, &(0x7f0000000840)='/net/cs\x00', 0x8, 0x3, 0x0)
llseek(r2, 0xeeb, 0x7ff, &(0x7f0000000880), 0x1)

21:56:50 executing program 2:
r0 = openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
read(r0, &(0x7f0000000040)=""/24, 0x18)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6)
openat$dev_stdin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/stdin\x00', 0xb, 0x3, 0x0)
openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/status\x00', 0x12, 0x1, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$net_iprouter(0xffffffffffffff9c, &(0x7f0000000180)='/net/iprouter\x00', 0xe, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f00000001c0)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000200)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)
openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f00000002c0)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/0/local\x00', 0x11, 0x1, 0x0)
r1 = openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$dev_user(0xffffffffffffff9c, &(0x7f0000000380)='/dev/user\x00', 0xa, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f00000003c0)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000400)='/dev/.empty\x00', 0xc, 0x3, 0x0)
openat$net_ether0_2_ifstats(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/2/ifstats\x00', 0x16, 0x1, 0x0)
openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000480)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0)
r2 = proc_create(&(0x7f00000004c0)='./file0\x00', 0x8, &(0x7f0000000500)='/dev/.empty\x00', 0xc, 0x1)
fchdir(r2, r1)
openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sysname\x00', 0xd, 0x3, 0x0)
openat$prof_kptrace_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/prof/kptrace_ctl\x00', 0x12, 0x3, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0)
openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f0000000600)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0)
nunmount(&(0x7f0000000640)='./file0\x00', 0x8, &(0x7f0000000680)='./file0\x00', 0x8)
openat$net_ether0_2_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/2/stats\x00', 0x14, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)

21:56:50 executing program 3:
openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000000)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0)
openat$net_tcp_1_data(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/1/data\x00', 0x10, 0x3, 0x0)
openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/ns\x00', 0xe, 0x1, 0x0)
r0 = openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000140)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000180)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)
openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
llseek(r0, 0x3, 0x2, &(0x7f0000000200), 0x2)
r1 = openat$net_udp_0_listen(0xffffffffffffff9c, &(0x7f0000000240)='/net/udp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f00000002c0)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
r2 = openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/segment\x00', 0x13, 0x1, 0x0)
openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000340)='/dev/stdout\x00', 0xc, 0x3, 0x0)
openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f00000003c0)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
r3 = openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/proc\x00', 0x10, 0x1, 0x0)
nmount(r2, &(0x7f0000000440)='./file0\x00', 0x8, 0x4)
fcntl$F_SETFD(r3, 0x2, 0x1)
openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/maps\x00', 0x10, 0x1, 0x0)
openat$dev_user(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/user\x00', 0xa, 0x3, 0x0)
r4 = openat$dev_null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0xa, 0x1, 0x0)
nmount(r1, &(0x7f0000000540)='./file0\x00', 0x8, 0xc4d7e4260e2aee76)
openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000580)='/dev/pid\x00', 0x9, 0x1, 0x0)
abort_sysc_fd(r4)
openat$proc_self_syscall(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/syscall\x00', 0x13, 0x1, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/random\x00', 0xc, 0x1, 0x0)
openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f0000000640)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0)
openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0)
openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f00000006c0)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0)

21:56:50 executing program 4:
pop_ctx(&(0x7f0000000000)="60cf2450a146c42b3a16ffcccc92d8e980bc7d93921b5d74df6b4fbb4811c5f2198541deab555feeb159c1368fc9fb3e17f9d07f4e68a140e5e5249ce9e67c7358cac3f04485aa9c0e4db37873befc1ff6505920fb8c7521bc19e6007b86dc05f400f41dcb1d10af48ff37da00ca1c2e18dd344a5b4206ea33913dd3d8c3ad812ebe59e22a410a95613c9ecd32aac0c4042967f70404589f347ceb082913afca886e0f92dc34af76b5e193318fcfa92a796a56ce9d47f69f1321010f58a8747ef13b71e90b4b2df65c17a17dad415567686105934084d069")
openat$dev_config(0xffffffffffffff9c, &(0x7f0000000100)='/dev/config\x00', 0xc, 0x1, 0x0)
openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/pid\x00', 0x9, 0x1, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000180)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$dev_capuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capuse\x00', 0xc, 0x3, 0x0)
r0 = openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f0000000200)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0)
openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/pid\x00', 0x9, 0x1, 0x0)
fstat(r0, &(0x7f0000000280))
openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f0000000300)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0)
openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0)
provision(0xffffffffffffffff, 0x0, 0x6)
r1 = openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000380)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0)
openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f00000003c0)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0)
r2 = openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
write(r1, &(0x7f0000000440)="2fc3b8aa5eb7acb9056b5626aed851dd4f668b16bdae8b2e61ec27acc96324b792e7048348d519ce5473b010f782280a451fd5545c09752441cc00ec1badd1049d676702d8b576305d30e7e96df9853671582fb2d85c2c337d9086d71b0303a4b01a736a8ee4350330b131951fb33614f6b48e75b271eace692e2799eaaa99d86399685aa0a91fb71b943df0a2451110b4e9bd66a04ffeb1ba3db6ba7740f03964292ca35e184d892b8a80ac25457766099544eb29df71bb14c2f72c4416b77edc9eab7ff1f4adf89f021810724654abe4a165ec533931183d46cc1905982e4cb25e54", 0xe3)
r3 = openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
fstat(r2, &(0x7f0000000580))
close(r3)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x912, 0xffffffffffffffff, 0x1)
openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000600)='/prof/mpstat\x00', 0xd, 0x3, 0x0)
openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/text\x00', 0x10, 0x1, 0x0)
openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0)
openat$dev_null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0xa, 0x1, 0x0)
provision(0xffffffffffffffff, 0x0, 0x4425)
r4 = openat$dev_sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sysctl\x00', 0xc, 0x3, 0x0)
block(0x4)
openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0)
openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000780)='/net/ndb\x00', 0x9, 0x3, 0x0)
fcntl$F_SYNC(r4, 0x65)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f00000007c0)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)

21:56:50 executing program 7:
openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000000)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0)
openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/wait\x00', 0x10, 0x1, 0x0)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000080)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f00000000c0)='/net/udp/0/err\x00', 0xf, 0x3, 0x0)
openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000140)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0)
vmm_poke_guest(0x8)
openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
openat$dev_cons(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cons\x00', 0xa, 0x3, 0x0)
openat$proc_self_fd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/fd\x00', 0xe, 0x1, 0x0)
openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000280)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0)
openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0)
openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/consctl\x00', 0xd, 0x3, 0x0)
r0 = openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000340)='/dev/.empty\x00', 0xc, 0x3, 0x0)
openat$net_ether0_ifstats(0xffffffffffffff9c, &(0x7f0000000380)='/net/ether0/ifstats\x00', 0x14, 0x1, 0x0)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f00000003c0)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
fcntl$F_SETFD(r0, 0x2, 0x1)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000400)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000440)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f0000000480)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0)
openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0)
openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f0000000500)='/net/udp/0/status\x00', 0x12, 0x1, 0x0)
openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000540)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0)
openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hostdomain\x00', 0x10, 0x3, 0x0)
getvcoreid()
openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_1_local(0xffffffffffffff9c, &(0x7f0000000600)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000640)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)

21:56:50 executing program 5:
openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/segment\x00', 0x13, 0x1, 0x0)
openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0)
openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0)
openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0)
r0 = openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000000140)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)
openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000180)='/dev/stdout\x00', 0xc, 0x3, 0x0)
r1 = openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0)
openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000200)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0)
openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000000240)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0)
fcntl$F_SETFL(r1, 0x4, 0x800)
openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000280)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0)
openat$net_udp_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/net/udp/stats\x00', 0xf, 0x1, 0x0)
openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/killkid\x00', 0xd, 0x3, 0x0)
openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000380)='/net/udp/0/local\x00', 0x11, 0x1, 0x0)
openat$dev_zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0xa, 0x1, 0x0)
openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000440)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0)
openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/consctl\x00', 0xd, 0x3, 0x0)
tcgetattr(r0, &(0x7f00000004c0))
openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000500)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0)
openat$prof_kpdata(0xffffffffffffff9c, &(0x7f0000000580)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
openat$proc_self_user(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/user\x00', 0x10, 0x1, 0x0)
openat$prof_kpdata(0xffffffffffffff9c, &(0x7f0000000600)='/prof/kpdata\x00', 0xd, 0x3, 0x0)
openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000640)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0)
openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/core\x00', 0x10, 0x1, 0x0)
openat$net_ipifc_1_local(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0)
openat$net_log(0xffffffffffffff9c, &(0x7f0000000700)='/net/log\x00', 0x9, 0x3, 0x0)

21:56:50 executing program 6:
openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000000)='/dev/stdout\x00', 0xc, 0x3, 0x0)
r0 = openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0)
r1 = openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
fcntl$F_SETFL(r0, 0x4, 0x8000)
openat$net_ipselftab(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipselftab\x00', 0xf, 0x1, 0x0)
openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)
openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/consctl\x00', 0xd, 0x3, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppid\x00', 0xa, 0x1, 0x0)
openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/strace\x00', 0x12, 0x1, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000240)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0)
openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0)
openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000300)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0)
openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/notepg\x00', 0x12, 0x1, 0x0)
openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sysstat\x00', 0xd, 0x3, 0x0)
openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0)
r2 = openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000400)='/net/icmp/clone\x00', 0x10, 0x3, 0x0)
openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppid\x00', 0xa, 0x1, 0x0)
openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000480)='/dev/.empty\x00', 0xc, 0x3, 0x0)
openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0)
openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f0000000500)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0)
openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000540)='/dev/drivers\x00', 0xd, 0x1, 0x0)
openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0xa, 0x1, 0x0)
openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/clone\x00', 0x12, 0x3, 0x0)
openat$dev_random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/random\x00', 0xc, 0x1, 0x0)
openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f0000000640)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0)
fcntl$F_DUPFD(r2, 0x0, r1, 0x1)
openat$net_empty(0xffffffffffffff9c, &(0x7f0000000680)='/net/.empty\x00', 0xc, 0x3, 0x0)
openat$dev_swap(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/swap\x00', 0xa, 0x3, 0x0)

21:56:51 executing program 1:
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0)
openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0)
openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0)

21:56:51 executing program 1:
r0 = openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f0000000000)='/net/udp/0/status\x00', 0x294, 0x1, 0x0)
fcntl$F_GETFD(r0, 0x1)
openat$proc_self_profile(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/profile\x00', 0x13, 0x1, 0x0)
openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/strace\x00', 0x12, 0x1, 0x0)

21:56:51 executing program 1:
mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0)
openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0)
openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capuse\x00', 0x1287fba90afc5c88, 0x3, 0x0)
openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sdctl\x00', 0xb, 0x3, 0x0)

21:56:51 executing program 1:
r0 = openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f00000001c0)='/net/tcp/2/status\x00', 0xf6, 0x1, 0x0)
tcgetattr(r0, &(0x7f0000000040))

21:56:51 executing program 1:
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0)
rename(&(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000080)='./file0\x00', 0x8)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000100)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
openat$dev_cons(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cons\x00', 0xa, 0x3, 0x0)

21:56:51 executing program 1:
r0 = openat$dev_user(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/user\x00', 0x0, 0x3, 0x0)
read(r0, &(0x7f0000000980)=""/240, 0xf0)

21:56:51 executing program 1:
openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capuse\x00', 0xc, 0x3, 0x0)
openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000040)='/net/udp/clone\x00', 0xf, 0x3, 0x0)
openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/noteid\x00', 0x12, 0x3, 0x0)

21:56:51 executing program 1:
openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0)
openat$dev_swap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swap\x00', 0xa, 0x3, 0x0)

21:56:51 executing program 1:
r0 = openat$proc_self_status(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/status\x00', 0x12, 0x1, 0x0)
openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ctl\x00', 0xf, 0x3, 0x0)
openat$proc_self_segment(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/segment\x00', 0x13, 0x1, 0x0)
r1 = openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hostowner\x00', 0xf, 0x3, 0x0)
r2 = openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0)
abort_sysc_fd(r1)
write(r2, &(0x7f0000000100)="051b9a6569e1206aa34fb20f026a3bc0db0d42af9942adfe0c49744cf089fde0367e2ffe4106811c81dbaea7c1e917560abe6f110cfb1d57ca317a7afe90cac84f65f398a610009eb960585213fb41acc7ce3f4130c3b09303b67e66d586e3f8bf06ee1f80ce87a0a45e29f0e4437409267b2c9f8a00ee7914b52032111593c7d0461cc9b3e8c401e4e14866af1dc4f246b15f8527237d34197f56fafb", 0x9d)
close(r0)
openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000200)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0)


bash-4.3$ [kernel] Unknown mbox type 1506089758!

Unhandled user trap in vcore context from VC 1

HW TRAP frame (partial) at 0xffffffffc8667ca0 on core 1

  rax  0xfffffffffffffffd

  rbx  0x0000100000006a70

  rcx  0x0000300000011040

  rdx  0x0000000000000000

  rbp  0x000030000001af40

  rsi  0x0000000000000008

  rdi  0x0000000020000440

  r8   0x0000000000000000

  r9   0x0000000000000000

  r10  0x0000000000000000

  r11  0x0000000000000200

  r12  0x000030000001af00

  r13  0x0000000000000008

  r14  0x0000000000000000

  r15  0x0000000000000000

  trap 0x0000000e Page Fault

  gsbs 0x0000000000000000

  fsbs 0x0000000000000000

  err  0x--------00000005

  rip  0xfffffffffffffffd

  cs   0x------------0023

  flag 0x0000000000010282

  rsp  0x000030000001aef8

  ss   0x------------001b

err 0x5 (for PFs: User 4, Wr 2, Rd 1), aux 0xfffffffffffffffd

Addr 0xfffffffffffffffd has no VMR

VM Regions for proc 49

NR:                                     Range:       Prot,      Flags,               File,                Off

00: (0x0000000000400000 - 0x00000000004b5000): 0x00000005, 0x00000001, 0xffff800002c62620, 0x0000000000000000

01: (0x00000000004b5000 - 0x00000000004b6000): 0x00000005, 0x00000002, 0xffff800002c62620, 0x00000000000b5000

02: (0x00000000006b5000 - 0x00000000006b8000): 0x00000003, 0x00000002, 0xffff800002c62620, 0x00000000000b5000

03: (0x00000000006b8000 - 0x00000000008e5000): 0x00000003, 0x00000002, 0x0000000000000000, 0x0000000000000000

04: (0x0000000020000000 - 0x0000000021000000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

05: (0x0000100000000000 - 0x0000100000024000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

06: (0x0000300000000000 - 0x0000300000001000): 0x00000003, 0x00000002, 0xffff800002c62620, 0x0000000000000000

07: (0x0000300000001000 - 0x0000300000005000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

08: (0x0000300000005000 - 0x0000300000007000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

09: (0x0000300000007000 - 0x0000300000019000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

10: (0x0000300000019000 - 0x000030000003d000): 0x00000007, 0x00000022, 0x0000000000000000, 0x0000000000000000

11: (0x00007f7fff8ff000 - 0x00007f7fff9ff000): 0x00000003, 0x00000022, 0x0000000000000000, 0x0000000000000000

21:56:58 executing program 0:
openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sysname\x00', 0xd, 0x3, 0x0)
r0 = openat$net_tcp_2_local(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/2/local\x00', 0x11, 0x1, 0x0)
tcgetattr(r0, &(0x7f0000000400))


Backtrace of user context on Core 1:

	Offsets only matter for shared libraries

#01 Addr 0xfffffffffffffffd has no VMR

#02 Addr 0x000000000040c8a6 is in syz-executor at offset 0x000000000000c8a6

#03 Addr 0x000000000040c9f2 is in syz-executor at offset 0x000000000000c9f2

#04 Addr 0x0000000000408028 is in syz-executor at offset 0x0000000000008028

#05 Addr 0x0000000000403a89 is in syz-executor at offset 0x0000000000003a89

#06 Addr 0x00000000004143fc is in syz-executor at offset 0x00000000000143fc

#07 Addr 0x0000000000414401 is in syz-executor at offset 0x0000000000014401

IRQOK: Core 2, irq depth 0, ktrap depth 0, irqon 512


kernel panic at kern/src/atomic.c:66, from core 2: Lock 0xffffffffc8665240 tried to spin when it shouldn't


Stack Backtrace on Core 2:

#01 [<0xffffffffc200a2bc>] in backtrace

#02 [<0xffffffffc2009afd>] in _panic

#03 [<0xffffffffc2003998>] in spin_lock

#04 [<0xffffffffc2031615>] in newchan

#05 [<0xffffffffc2036c42>] in devclone

#06 [<0xffffffffc2037134>] in devwalk

#07 [<0xffffffffc2016414>] in ipwalk

#08 [<0xffffffffc2032d1d>] in walk

#09 [<0xffffffffc2033429>] in __namec_from

#10 [<0xffffffffc203400f>] in namec

#11 [<0xffffffffc20414d6>] in sysopenat

#12 [<0xffffffffc205888f>] in sys_openat

#13 [<0xffffffffc2059439>] in syscall

#14 [<0xffffffffc2059604>] in run_local_syscall

#15 [<0xffffffffc2059b39>] in prep_syscalls

#16 [<0xffffffffc20ab38a>] in sysenter_callwrapper


Entering Nanwan's Dungeon on Core 2 (Ints on):

Type 'help' for a list of commands.