2019/04/08 11:09:05 fuzzer started 2019/04/08 11:09:05 dialing manager at 127.0.0.1:42287 2019/04/08 11:09:05 syscalls: 212 2019/04/08 11:09:05 code coverage: support is not implemented in syzkaller 2019/04/08 11:09:05 comparison tracing: support is not implemented in syzkaller 2019/04/08 11:09:05 extra coverage: support is not implemented in syzkaller 2019/04/08 11:09:05 setuid sandbox: support is not implemented in syzkaller 2019/04/08 11:09:05 namespace sandbox: support is not implemented in syzkaller 2019/04/08 11:09:05 Android sandbox: support is not implemented in syzkaller 2019/04/08 11:09:05 fault injection: support is not implemented in syzkaller 2019/04/08 11:09:05 leak checking: support is not implemented in syzkaller 2019/04/08 11:09:05 net packet injection: support is not implemented in syzkaller 2019/04/08 11:09:05 net device setup: support is not implemented in syzkaller 11:09:05 executing program 0: openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000000)='/net/ndb\x00', 0x9, 0x3, 0x0) openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0) r0 = openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/.empty\x00', 0xc, 0x3, 0x0) openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0) openat$net_tcp_1_data(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/1/data\x00', 0x10, 0x3, 0x0) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000180)='/dev/stdout\x00', 0xc, 0x3, 0x0) openat$proc_self_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/mem\x00', 0xf, 0x1, 0x0) openat$dev_stderr(0xffffffffffffff9c, &(0x7f0000000200)='/dev/stderr\x00', 0xc, 0x3, 0x0) openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/core\x00', 0x10, 0x1, 0x0) openat$net_iproute(0xffffffffffffff9c, &(0x7f0000000280)='/net/iproute\x00', 0xd, 0x3, 0x0) openat$dev_empty(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/.empty\x00', 0xc, 0x3, 0x0) openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000300)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0) openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0xd, 0x1, 0x0) openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000380)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0) openat$proc_self_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/mem\x00', 0xf, 0x1, 0x0) openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0) openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000480)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0) openat$dev_pid(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/pid\x00', 0x9, 0x1, 0x0) openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f0000000500)='/net/icmp/stats\x00', 0x10, 0x1, 0x0) openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000540)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0) openat$net_empty(0xffffffffffffff9c, &(0x7f0000000580)='/net/.empty\x00', 0xc, 0x3, 0x0) openat$proc_self_proc(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/proc\x00', 0x10, 0x1, 0x0) openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hostowner\x00', 0xf, 0x3, 0x0) openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000640)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0) fcntl$F_SYNC(r0, 0x65) openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$proc_self_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/mem\x00', 0xf, 0x1, 0x0) 11:09:05 executing program 1: r0 = openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/segment\x00', 0x13, 0x1, 0x0) r1 = openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000040)='/net/udp/stats\x00', 0xf, 0x1, 0x0) r2 = openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f0000000080)='/net/udp/0/err\x00', 0xf, 0x3, 0x0) r3 = openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0) openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) r4 = openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0) dup_fds_to(0x0, &(0x7f0000000180)=[{r3}, {r2}], 0x2) r5 = openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f00000001c0)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) close(r1) openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000200)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0) r6 = openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000240)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) openat$net_udp_0_listen(0xffffffffffffff9c, &(0x7f0000000280)='/net/udp/0/listen\x00', 0x12, 0x3, 0x0) fwstat(r5, &(0x7f00000002c0)=""/14, 0xe, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kmesg\x00', 0xb, 0x1, 0x0) openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f0000000340)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0) openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0) write(r6, &(0x7f00000003c0)="17b59475509ff5634a7909f2096e7cff1fc594f9a26251bb92d104b5e794a2dec85a7e5818324542bfb3ddebc73286e6717c50a7ac1469e98b9177549d620b8578cb58ffe359c4d3e1ddf72de5408ec3a0743ea9060129d7cbbd5c44ea378ff363130394d960c811757911d97631ac2b7aba077d02c9841b37aefe96bb31033b0f636fe1dd2ae30adb1feb7eee80dc627c45b48462435a3f4af111efc63d9e6d0ebde5f693a3f9862d61533006c08f0d337674452b87d2c5c90647cc3a375a9f2133414d93237a10eec98dac93717fccd71f948893a1f8adfdd414c5", 0xdc) openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0) fstat(r0, &(0x7f0000000500)) openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/strace\x00', 0x12, 0x1, 0x0) fcntl$F_DUPFD(r5, 0x0, r4, 0x0) openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0) openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sysname\x00', 0xd, 0x3, 0x0) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/killkid\x00', 0xd, 0x3, 0x0) r7 = openat$dev_pgrpid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/pgrpid\x00', 0xc, 0x1, 0x0) openat$dev_sdctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sdctl\x00', 0xb, 0x3, 0x0) openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000700)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0) tcgetattr(r7, &(0x7f0000000740)) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kmesg\x00', 0xb, 0x1, 0x0) openat$dev_sdctl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sdctl\x00', 0xb, 0x3, 0x0) 11:09:05 executing program 2: proc_destroy(0x0, 0x3) r0 = proc_create(&(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000040)='@\x00', 0x2, 0x1) proc_destroy(r0, 0xa77c) openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/maps\x00', 0x10, 0x1, 0x0) proc_destroy(0x0, 0x10000) self_notify(0x5, 0x7, &(0x7f0000000140)={0xf, 0x200, 0xf40f, &(0x7f00000000c0)="968a0e81a2422dc2f8d3270525502e1369fc3062459ca9887b4cc0ea04850da5defb64a87a84ba30213af0a1e4960f0eed4039c2d66695ab909b01b94d5a6e82a8ed3544b6480d708cc3a6efd63bfe1f76b55a7a", 0x8}, 0x1) openat$dev_config(0xffffffffffffff9c, &(0x7f0000000180)='/dev/config\x00', 0xc, 0x1, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) r1 = openat$proc_self_ns(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/ns\x00', 0xe, 0x1, 0x0) openat$net_tcp_1_data(0xffffffffffffff9c, &(0x7f0000000240)='/net/tcp/1/data\x00', 0x10, 0x3, 0x0) llseek(r1, 0x80000001, 0x8, &(0x7f0000000280), 0x2) openat$net_udp_0_data(0xffffffffffffff9c, &(0x7f00000002c0)='/net/udp/0/data\x00', 0x10, 0x3, 0x0) r2 = openat$dev_osversion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/osversion\x00', 0xf, 0x1, 0x0) openat$net_tcp_1_data(0xffffffffffffff9c, &(0x7f0000000340)='/net/tcp/1/data\x00', 0x10, 0x3, 0x0) openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/core\x00', 0x10, 0x1, 0x0) r3 = proc_create(&(0x7f00000003c0)='./file1\x00', 0x8, &(0x7f0000000400)='\x00', 0x1, 0x1) openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0) proc_destroy(r3, 0x6) openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0) openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0) openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/wait\x00', 0x10, 0x1, 0x0) proc_create(&(0x7f0000000540)='./file0\x00', 0x8, &(0x7f0000000580)='\\}\xfb+.\x00', 0x6, 0x1) tcgetattr(r1, &(0x7f00000005c0)) openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0) fstat(r1, &(0x7f0000000640)) read(r2, &(0x7f00000006c0)=""/4096, 0x1000) openat$dev_zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0xa, 0x1, 0x0) openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f0000001700)='/net/udp/0/err\x00', 0xf, 0x3, 0x0) openat$net_tcp_1_remote(0xffffffffffffff9c, &(0x7f0000001740)='/net/tcp/1/remote\x00', 0x12, 0x1, 0x0) openat$proc_self_syscall(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/syscall\x00', 0x13, 0x1, 0x0) 11:09:05 executing program 3: vmm_poke_guest(0x101) openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppid\x00', 0xa, 0x1, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000080)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0) r0 = openat$dev_sysname(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sysname\x00', 0xd, 0x3, 0x0) openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0) openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000140)='/net/udp/0/local\x00', 0x11, 0x1, 0x0) r1 = openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/segment\x00', 0x13, 0x1, 0x0) openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0) openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0) r2 = openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0) fchdir(0xffffffffffffffff, r0) r3 = openat$dev_null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0xa, 0x1, 0x0) fcntl$F_SETFL(r0, 0x4, 0x80000) fcntl$F_SETFL(r3, 0x4, 0x0) abort_sysc_fd(r1) openat$proc_self_maps(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/maps\x00', 0x10, 0x1, 0x0) openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000000300)='/net/ether0/stats\x00', 0x12, 0x1, 0x0) openat$proc_self_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/mem\x00', 0xf, 0x1, 0x0) openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/noteid\x00', 0x12, 0x3, 0x0) openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0) openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000400)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0) r4 = openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/status\x00', 0x12, 0x1, 0x0) openat$proc_self_fpregs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0) openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) lstat(&(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000540)) openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/clone\x00', 0x12, 0x3, 0x0) fcntl$F_GETFD(r2, 0x1) openat$net_ether0_ifstats(0xffffffffffffff9c, &(0x7f0000000600)='/net/ether0/ifstats\x00', 0x14, 0x1, 0x0) fcntl$F_SETFL(r4, 0x4, 0x0) 11:09:05 executing program 4: r0 = openat$net_ipselftab(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipselftab\x00', 0xf, 0x1, 0x0) openat$dev_user(0xffffffffffffff9c, &(0x7f0000000040)='/dev/user\x00', 0xa, 0x3, 0x0) openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000080)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0) openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f00000000c0)='/net/udp/0/err\x00', 0xf, 0x3, 0x0) openat$net_icmpv6_clone(0xffffffffffffff9c, &(0x7f0000000100)='/net/icmpv6/clone\x00', 0x12, 0x3, 0x0) fstat(r0, &(0x7f0000000140)) openat$net_tcp_0_err(0xffffffffffffff9c, &(0x7f00000001c0)='/net/tcp/0/err\x00', 0xf, 0x3, 0x0) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/killkid\x00', 0xd, 0x3, 0x0) openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/status\x00', 0x12, 0x1, 0x0) openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000280)='/dev/.empty\x00', 0xc, 0x3, 0x0) openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f00000002c0)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0) openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000300)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0) openat$prof_kpctl(0xffffffffffffff9c, &(0x7f0000000340)='/prof/kpctl\x00', 0xc, 0x3, 0x0) openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000380)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0) openat$dev_kprint(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kprint\x00', 0xc, 0x1, 0x0) openat$net_tcp_2_listen(0xffffffffffffff9c, &(0x7f0000000400)='/net/tcp/2/listen\x00', 0x12, 0x3, 0x0) openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000000440)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0) openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f0000000480)='/net/udp/0/status\x00', 0x12, 0x1, 0x0) openat$net_log(0xffffffffffffff9c, &(0x7f00000004c0)='/net/log\x00', 0x9, 0x3, 0x0) openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0) openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0) openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0) openat$proc_self_profile(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/profile\x00', 0x13, 0x1, 0x0) openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f0000000600)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0) openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000000640)='/net/ether0/stats\x00', 0x12, 0x1, 0x0) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000680)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$prof_kpctl(0xffffffffffffff9c, &(0x7f00000006c0)='/prof/kpctl\x00', 0xc, 0x3, 0x0) openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000700)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/note\x00', 0x10, 0x1, 0x0) openat$dev_caphash(0xffffffffffffff9c, &(0x7f0000000780)='/dev/caphash\x00', 0xd, 0x3, 0x0) 11:09:05 executing program 5: r0 = openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/killkid\x00', 0xd, 0x3, 0x0) r1 = openat$net_ether0_ifstats(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/ifstats\x00', 0x14, 0x1, 0x0) abort_sysc_fd(r0) openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0) openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0) r2 = openat$proc_self_fpregs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0) openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000180)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) r3 = openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/net/icmp/stats\x00', 0x10, 0x1, 0x0) openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f0000000200)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0) r4 = openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000240)='/dev/drivers\x00', 0xd, 0x1, 0x0) openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f0000000280)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0) r5 = proc_create(&(0x7f00000002c0)='./file0\x00', 0x8, &(0x7f0000000300)='/proc/self/fpregs\x00', 0x12, 0x1) dup_fds_to(r5, &(0x7f0000000340)=[{r3}, {r2}, {r1}, {r2}], 0x4) chdir(r5, &(0x7f0000000380)='./file0\x00', 0x8) openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/net/icmp/stats\x00', 0x10, 0x1, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kmesg\x00', 0xb, 0x1, 0x0) openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000440)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0) openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hostdomain\x00', 0x10, 0x3, 0x0) openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0) read(r4, &(0x7f0000000500)=""/91, 0x5b) openat$proc_self_fpregs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0) openat$dev_user(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/user\x00', 0xa, 0x3, 0x0) openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000600)='/dev/drivers\x00', 0xd, 0x1, 0x0) openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000640)='/net/ether0/addr\x00', 0x11, 0x3, 0x0) openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0) openat$net_ether0_1_ifstats(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/1/ifstats\x00', 0x16, 0x1, 0x0) openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000700)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000740)='/prof/kptrace\x00', 0xe, 0x3, 0x0) chdir(0x0, &(0x7f0000000780)='./file0\x00', 0x8) 11:09:05 executing program 6: openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sdctl\x00', 0xb, 0x3, 0x0) openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capuse\x00', 0xc, 0x3, 0x0) fork() openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kmesg\x00', 0xb, 0x1, 0x0) r0 = openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0) openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000140)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0) openat$net_cs(0xffffffffffffff9c, &(0x7f0000000180)='/net/cs\x00', 0x8, 0x3, 0x0) openat$dev_klog(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/klog\x00', 0xa, 0x1, 0x0) openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sdctl\x00', 0xb, 0x3, 0x0) openat$dev_cputime(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cputime\x00', 0xd, 0x1, 0x0) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000280)='/prof/kptrace\x00', 0xe, 0x3, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000300)='/prof/kptrace\x00', 0xe, 0x3, 0x0) abort_sysc_fd(r0) openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pid\x00', 0x9, 0x1, 0x0) openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/clone\x00', 0xf, 0x3, 0x0) openat$dev_stdout(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/stdout\x00', 0xc, 0x3, 0x0) openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000400)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0) openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0) openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000480)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0) openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hostdomain\x00', 0x10, 0x3, 0x0) r1 = openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0) openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f0000000540)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0) openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000580)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) tap_fds(&(0x7f0000000680)=[{r1, 0x1, 0x108, 0xffff, &(0x7f0000000640)={&(0x7f00000005c0)="598d0edda36f51fd5f4c6c5b630cb2a02c14dea5b9b6b29449a20c39046c41ce9debb2542c37262127bed555b82cad8b76b145ead8a8b717d575f00e42d01af637a447ee187fb881eb512ac26f310bbf", 0x249, 0x1, 0x1, 0x8000, 0x8}}], 0x1) openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0) openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000700)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) openat$prof_kptrace_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/prof/kptrace_ctl\x00', 0x12, 0x3, 0x0) openat$prof_kprintx(0xffffffffffffff9c, &(0x7f0000000780)='/prof/kprintx\x00', 0xe, 0x3, 0x0) 11:09:05 executing program 7: openat$proc_self_user(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/user\x00', 0x10, 0x1, 0x0) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000040)='/prof/kptrace\x00', 0xe, 0x3, 0x0) r0 = openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0) fstat(r0, &(0x7f00000000c0)) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000140)='/prof/kptrace\x00', 0xe, 0x3, 0x0) openat$dev_null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xa, 0x1, 0x0) r1 = openat$net_log(0xffffffffffffff9c, &(0x7f00000001c0)='/net/log\x00', 0x9, 0x3, 0x0) openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000200)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0) close(r1) openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0) openat$net_tcp_1_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/1/ctl\x00', 0xf, 0x3, 0x0) openat$proc_self_proc(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/proc\x00', 0x10, 0x1, 0x0) openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/0/local\x00', 0x11, 0x1, 0x0) openat$dev_kprint(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kprint\x00', 0xc, 0x1, 0x0) fcntl$F_GETFL(r0, 0x3) openat$net_ipifc_1_local(0xffffffffffffff9c, &(0x7f0000000380)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0) r2 = openat$proc_self_maps(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/maps\x00', 0x10, 0x1, 0x0) fcntl$F_SETFL(r2, 0x4, 0x800) openat$net_ether0_ifstats(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/ifstats\x00', 0x14, 0x1, 0x0) openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000440)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0) r3 = openat$proc_self_profile(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/profile\x00', 0x13, 0x1, 0x0) openat$dev_urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0xd, 0x1, 0x0) fcntl$F_GETFL(r3, 0x3) openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/addr\x00', 0x11, 0x3, 0x0) openat$net_ether0_2_stats(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/2/stats\x00', 0x14, 0x1, 0x0) openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0) openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0) openat$dev_stdin(0xffffffffffffff9c, &(0x7f0000000600)='/dev/stdin\x00', 0xb, 0x3, 0x0) openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000640)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0) openat$dev_osversion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/osversion\x00', 0xf, 0x1, 0x0) 11:09:07 executing program 0: r0 = openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x400000000040, 0x0) openat$dev_null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xa, 0x1, 0x0) 11:09:07 executing program 0: r0 = openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/clone\x00', 0xf, 0x3, 0x0) fcntl$F_GETFD(r0, 0x1) close(r0) openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0) r1 = openat$net_ether0_2_stats(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/2/stats\x00', 0x14, 0x1, 0x0) r2 = openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hostdomain\x00', 0x10, 0x3, 0x0) openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000100)='/net/icmp/clone\x00', 0x10, 0x3, 0x0) openat$net_tcp_2_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/net/tcp/2/ctl\x00', 0xf, 0x3, 0x0) fstat(r1, &(0x7f0000000180)) openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000000200)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) r3 = openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/0/err\x00', 0xf, 0x3, 0x0) openat$proc_self_args(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/args\x00', 0x10, 0x3, 0x0) r4 = openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/core\x00', 0x10, 0x1, 0x0) fcntl$F_DUPFD(r3, 0x0, r4, 0x1) openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ether0/clone\x00', 0x12, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x8, 0x11801, 0x154) openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/ctl\x00', 0xf, 0x3, 0x0) r5 = openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0) r6 = openat$dev_config(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/config\x00', 0xc, 0x1, 0x0) openat$proc_self_fpregs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0) openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0) openat$prof_kprintx(0xffffffffffffff9c, &(0x7f0000000580)='/prof/kprintx\x00', 0xe, 0x3, 0x0) tap_fds(&(0x7f0000000800)=[{r6, 0x3, 0x80, 0x5e, &(0x7f0000000640)={&(0x7f00000005c0)="fe12c3d655168082e5f2968d2b9516941e74d494d094fe21e464160b900ced504e7a18d05f2b7225f0f36de3391eff72a3d270b7dd77cf14b4756f8bf3369eb64251794e05465bccf3e3cab6be84a9dc", 0x5a, 0x1, 0x4, 0x400, 0x5}}, {r2, 0x3, 0x218, 0x4981, &(0x7f0000000700)={&(0x7f0000000680)="58db0c7df5076401d8ef7783f541ce2b751b0667e9c0dc36c0d5ffcc024bceaac492238c9c1ca9dbb71a543e9fd31e78f865def3416ae21928c49194fb1fa43bf6aa84c251cd8bc2efc804af11ce2264", 0x6, 0x0, 0x6, 0xfffffffffffffff7, 0x4}}, {r5, 0x3, 0x144, 0x7, &(0x7f00000007c0)={&(0x7f0000000740)="9baf125c38f2410d5e83a7247eef7a7fa032b8c9a2a0703617aad0895e7f5b1afc73516ed418e1f5bc57d23121bffb35e40067936059cf0bf7f7b6347ec6386fd1be27f0ce090f77e6ab7fba0d68bfb6", 0x8000, 0x0, 0x1200000000, 0xcd, 0x3}}], 0x3) openat$net_tcp_0_err(0xffffffffffffff9c, &(0x7f0000000880)='/net/tcp/0/err\x00', 0xf, 0x3, 0x0) openat$proc_self_segment(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/segment\x00', 0x13, 0x1, 0x0) openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000900)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) openat$dev_config(0xffffffffffffff9c, &(0x7f0000000940)='/dev/config\x00', 0xc, 0x1, 0x0) 11:09:07 executing program 0: openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/clone\x00', 0x12, 0x3, 0x0) openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/0/ctl\x00', 0xb, 0x3, 0x0) 11:09:07 executing program 0: populate_va(&(0x7f0000ff9000/0x4000)=nil, 0x1) populate_va(&(0x7f0000ff7000/0x3000)=nil, 0x1) openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000) populate_va(&(0x7f0000ff9000/0x3000)=nil, 0x2) populate_va(&(0x7f0000ffa000/0x4000)=nil, 0x1) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) r0 = openat$dev_user(0xffffffffffffff9c, &(0x7f0000000040)='/dev/user\x00', 0xa, 0x3, 0x0) proc_create(&(0x7f0000000080)='./file0\x00', 0x8, &(0x7f00000000c0)='/net/ipifc/0/status\x00', 0x14, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kmesg\x00', 0xb, 0x1, 0x0) fcntl$F_DUPFD(r0, 0x0, r0, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000180)) stat(&(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000240)) openat$dev_stdout(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/stdout\x00', 0xc, 0x3, 0x0) openat$dev_null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0xa, 0x1, 0x0) openat$proc_self_fpregs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/fpregs\x00', 0x12, 0x1, 0x0) openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000380)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0) populate_va(&(0x7f0000ff9000/0x4000)=nil, 0x27) openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f00000003c0)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0) populate_va(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffd2) openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) syz_execute_func(&(0x7f0000000440)="3643f60702646566420f380b83000000002e660f383a8b000080203e6744dbc966439c8fc878ee0f79c403215d9e300000008b0f0fa8f9efffff0dc422d8f7a7bf7e0000c42379dfe04b") openat$dev_config(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/config\x00', 0xc, 0x1, 0x0) openat$dev_klog(0xffffffffffffff9c, &(0x7f0000000500)='/dev/klog\x00', 0xa, 0x1, 0x0) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000580)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0) openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f00000005c0)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0) openat$net_ether0_1_type(0xffffffffffffff9c, &(0x7f0000000600)='/net/ether0/1/type\x00', 0x13, 0x1, 0x0) openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppid\x00', 0xa, 0x1, 0x0) openat$net_icmpv6_stats(0xffffffffffffff9c, &(0x7f0000000680)='/net/icmpv6/stats\x00', 0x12, 0x1, 0x0) bash-4.3$ kernel panic at kern/src/mm.c:759, from core 1: assertion failed: !pte_is_mapped(pte) Stack Backtrace on Core 1: #01 [<0xffffffffc200a39c>] in backtrace #02 [<0xffffffffc2009b35>] in _panic #03 [<0xffffffffc200d9e3>] in map_page_at_addr #04 [<0xffffffffc200da32>] in populate_anon_va #05 [<0xffffffffc200faa2>] in populate_va #06 [<0xffffffffc2056e00>] in sys_populate_va #07 [<0xffffffffc2059a29>] in syscall #08 [<0xffffffffc205a5d8>] in run_local_syscall #09 [<0xffffffffc205ab19>] in prep_syscalls #10 [<0xffffffffc20ac432>] in sysenter_callwrapper Entering Nanwan's Dungeon on Core 1 (Ints on): Type 'help' for a list of commands.