2018/07/16 23:33:49 fuzzer started 2018/07/16 23:33:49 dialing manager at 127.0.0.1:33665 2018/07/16 23:33:49 syscalls: 213 2018/07/16 23:33:49 code coverage: support is not implemented in syzkaller 2018/07/16 23:33:49 comparison tracing: support is not implemented in syzkaller 2018/07/16 23:33:49 setuid sandbox: support is not implemented in syzkaller 2018/07/16 23:33:49 namespace sandbox: support is not implemented in syzkaller 2018/07/16 23:33:49 fault injection: support is not implemented in syzkaller 2018/07/16 23:33:49 leak checking: support is not implemented in syzkaller 2018/07/16 23:33:49 net packed injection: support is not implemented in syzkaller 2018/07/16 23:33:49 net device setup: support is not implemented in syzkaller 23:33:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) r0 = openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000040)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0) rmdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = openat$net_tcp_0_remote(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/0/remote\x00', 0x12, 0x1, 0x0) r2 = openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000100)='/prof/mpstat\x00', 0xd, 0x3, 0x0) openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000140)='/prof/mpstat\x00', 0xd, 0x3, 0x0) openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000180)='/prof/mpstat\x00', 0xd, 0x3, 0x0) change_vcore(0xd9, 0x0) openat$net_iprouter(0xffffffffffffff9c, &(0x7f00000001c0)='/net/iprouter\x00', 0xe, 0x3, 0x0) openat$net_udp_clone(0xffffffffffffff9c, &(0x7f0000000200)='/net/udp/clone\x00', 0xf, 0x3, 0x0) r3 = openat$net_udp_0_remote(0xffffffffffffff9c, &(0x7f0000000240)='/net/udp/0/remote\x00', 0x12, 0x1, 0x0) openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f00000002c0)='/prof/kptrace\x00', 0xe, 0x3, 0x0) openat$net_tcp_0_remote(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/0/remote\x00', 0x12, 0x1, 0x0) openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000340)='/prof/mpstat\x00', 0xd, 0x3, 0x0) openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f0000000380)='/net/udp/0/local\x00', 0x11, 0x1, 0x0) read(r3, &(0x7f00000003c0)=""/20, 0x14) r4 = proc_create(&(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000440)='\x00', 0x1, 0x1) proc_run(r4) openat$net_ipifc_1_local(0xffffffffffffff9c, &(0x7f0000000480)='/net/ipifc/1/local\x00', 0x13, 0x1, 0x0) dup_fds_to(0xffffffffffffffff, &(0x7f00000004c0)=[{r0}, {r2}, {r1}], 0x3) openat$dev_sysname(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sysname\x00', 0xd, 0x3, 0x0) openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000540)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0) tcgetattr(r2, &(0x7f0000000580)) openat$net_udp_0_data(0xffffffffffffff9c, &(0x7f00000005c0)='/net/udp/0/data\x00', 0x10, 0x3, 0x0) openat$net_udp_0_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/net/udp/0/ctl\x00', 0xf, 0x3, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x8, 0x83) openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sdctl\x00', 0xb, 0x3, 0x0) stat(&(0x7f00000006c0)='./file1\x00', 0x8, &(0x7f0000000700)) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) 23:33:49 executing program 1: openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) openat$dev_user(0xffffffffffffff9c, &(0x7f0000000040)='/dev/user\x00', 0xa, 0x3, 0x0) openat$net_ipifc_1_snoop(0xffffffffffffff9c, &(0x7f0000000080)='/net/ipifc/1/snoop\x00', 0x13, 0x1, 0x0) r0 = openat$proc_self_profile(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/profile\x00', 0x13, 0x1, 0x0) r1 = openat$dev_time(0xffffffffffffff9c, &(0x7f0000000100)='/dev/time\x00', 0xa, 0x3, 0x0) r2 = openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0) openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/proc\x00', 0x10, 0x1, 0x0) openat$net_udp_0_data(0xffffffffffffff9c, &(0x7f00000001c0)='/net/udp/0/data\x00', 0x10, 0x3, 0x0) r3 = openat$proc_self_profile(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/profile\x00', 0x13, 0x1, 0x0) r4 = openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0) openat$dev_user(0xffffffffffffff9c, &(0x7f0000000280)='/dev/user\x00', 0xa, 0x3, 0x0) nmount(r3, &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) openat$net_tcp_stats(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/stats\x00', 0xf, 0x1, 0x0) rename(&(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000380)='./file0\x00', 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x2010, r0, 0x3f) fcntl$F_SETFL(r2, 0x4, 0x8000) openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f00000003c0)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0) openat$net_cs(0xffffffffffffff9c, &(0x7f0000000400)='/net/cs\x00', 0x8, 0x3, 0x0) fcntl$F_GETFL(r4, 0x3) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/killkid\x00', 0xd, 0x3, 0x0) fcntl$F_SYNC(r4, 0x65) fwstat(r1, &(0x7f0000000480)=""/82, 0x52, 0x0) r5 = openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f0000000500)='/net/icmp/stats\x00', 0x10, 0x1, 0x0) openat$dev_config(0xffffffffffffff9c, &(0x7f0000000540)='/dev/config\x00', 0xc, 0x1, 0x0) openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0xa, 0x1, 0x0) openat$dev_caphash(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/caphash\x00', 0xd, 0x3, 0x0) read(r5, &(0x7f0000000600)=""/147, 0x93) openat$net_log(0xffffffffffffff9c, &(0x7f00000006c0)='/net/log\x00', 0x9, 0x3, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kmesg\x00', 0xb, 0x1, 0x0) openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0) 23:33:49 executing program 2: openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/.empty\x00', 0xc, 0x3, 0x0) openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/notepg\x00', 0x12, 0x1, 0x0) openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) openat$proc_self_wait(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/wait\x00', 0x10, 0x1, 0x0) r0 = openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000100)='/prof/mpstat\x00', 0xd, 0x3, 0x0) r1 = openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000140)='/dev/.empty\x00', 0xc, 0x3, 0x0) r2 = proc_create(&(0x7f0000000180)='./file0\x00', 0x8, &(0x7f00000001c0)='\x00', 0x1, 0x1) r3 = openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000200)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) fstat(r3, &(0x7f0000000240)) fstat(r0, &(0x7f00000002c0)) openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hostowner\x00', 0xf, 0x3, 0x0) fstat(r1, &(0x7f0000000380)) openat$prof_empty(0xffffffffffffff9c, &(0x7f0000000400)='/prof/.empty\x00', 0xd, 0x3, 0x0) openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000440)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0) dup_fds_to(r2, &(0x7f0000000480)=[{r3}], 0x1) openat$net_ether0_0_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/0/ctl\x00', 0x12, 0x3, 0x0) openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0) openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f0000000580)='/net/ether0/0/ifstats\x00', 0x16, 0x1, 0x0) openat$proc_self_text(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/text\x00', 0x10, 0x1, 0x0) openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0xd, 0x1, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000640)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) openat$net_tcp_1_listen(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/1/listen\x00', 0x12, 0x3, 0x0) openat$net_ipifc_1_status(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ipifc/1/status\x00', 0x14, 0x1, 0x0) fcntl$F_SYNC(r3, 0x65) openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0) openat$net_tcp_0_err(0xffffffffffffff9c, &(0x7f0000000740)='/net/tcp/0/err\x00', 0xf, 0x3, 0x0) openat$dev_bintime(0xffffffffffffff9c, &(0x7f0000000780)='/dev/bintime\x00', 0xd, 0x3, 0x0) openat$dev_caphash(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/caphash\x00', 0xd, 0x3, 0x0) openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f0000000800)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0) 23:33:49 executing program 3: nanosleep(&(0x7f0000000000)={0x6, 0x5}, &(0x7f0000000040)) openat$dev_ppid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppid\x00', 0xa, 0x1, 0x0) openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0) openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x1, 0x0) openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000140)='/dev/drivers\x00', 0xd, 0x1, 0x0) openat$net_tcp_0_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/net/tcp/0/ctl\x00', 0xf, 0x3, 0x0) openat$prof_mpstat(0xffffffffffffff9c, &(0x7f00000001c0)='/prof/mpstat\x00', 0xd, 0x3, 0x0) openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0) openat$dev_hostowner(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hostowner\x00', 0xf, 0x3, 0x0) openat$dev_stdin(0xffffffffffffff9c, &(0x7f0000000280)='/dev/stdin\x00', 0xb, 0x3, 0x0) r0 = openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/core\x00', 0x10, 0x1, 0x0) openat$dev_cputime(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cputime\x00', 0xd, 0x1, 0x0) nbind(&(0x7f0000000380)='./file0\x00', 0x8, &(0x7f00000003c0)='./file0\x00', 0x8, 0x6) fstat(r0, &(0x7f0000000400)) openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000480)='/net/icmp/clone\x00', 0x10, 0x3, 0x0) openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f00000004c0)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0) openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0) openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000540)='/prof/mpstat\x00', 0xd, 0x3, 0x0) r1 = openat$net_tcp_1_status(0xffffffffffffff9c, &(0x7f0000000580)='/net/tcp/1/status\x00', 0x12, 0x1, 0x0) openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0) close(r1) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000600)='/dev/killkid\x00', 0xd, 0x3, 0x0) openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000640)='/net/icmp/clone\x00', 0x10, 0x3, 0x0) openat$net_tcp_0_remote(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/0/remote\x00', 0x12, 0x1, 0x0) vmm_ctl$VMM_CTL_SET_FLAGS(0x4, 0x4) openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f00000006c0)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0) openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/status\x00', 0x12, 0x1, 0x0) openat$proc_self_fd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/fd\x00', 0xe, 0x1, 0x0) openat$net_iprouter(0xffffffffffffff9c, &(0x7f0000000780)='/net/iprouter\x00', 0xe, 0x3, 0x0) 23:33:49 executing program 4: openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/core\x00', 0x10, 0x1, 0x0) openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/consctl\x00', 0xd, 0x3, 0x0) r0 = openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000080)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0) openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f00000000c0)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0) fcntl$F_GETFD(r0, 0x1) openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0) openat$net_tcp_0_local(0xffffffffffffff9c, &(0x7f0000000140)='/net/tcp/0/local\x00', 0x11, 0x1, 0x0) openat$proc_self_vmstatus(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/vmstatus\x00', 0x14, 0x1, 0x0) r1 = openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0) openat$proc_self_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/ctl\x00', 0xf, 0x3, 0x0) r2 = openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0) openat$dev_random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/random\x00', 0xc, 0x1, 0x0) openat$net_udp_0_local(0xffffffffffffff9c, &(0x7f00000002c0)='/net/udp/0/local\x00', 0x11, 0x1, 0x0) openat$net_iproute(0xffffffffffffff9c, &(0x7f0000000300)='/net/iproute\x00', 0xd, 0x3, 0x0) openat$proc_self_segment(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/segment\x00', 0x13, 0x1, 0x0) openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0) openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/core\x00', 0x10, 0x1, 0x0) openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000480)='/net/icmp/clone\x00', 0x10, 0x3, 0x0) openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0) openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000500)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0) openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/wait\x00', 0x10, 0x1, 0x0) openat$net_ipifc_0_local(0xffffffffffffff9c, &(0x7f0000000580)='/net/ipifc/0/local\x00', 0x13, 0x1, 0x0) r3 = proc_create(&(0x7f00000005c0)='./file0\x00', 0x8, &(0x7f0000000600)='/net/ipifc/0/local\x00', 0x13, 0x0) dup_fds_to(r3, &(0x7f0000000640)=[{r1}, {r2}], 0x2) openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000680)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) fd2path(r2, &(0x7f00000006c0)=""/86, 0x56) openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f0000000740)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000780)='/dev/drivers\x00', 0xd, 0x1, 0x0) 23:33:49 executing program 7: openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0) openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000040)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000080)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0) openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/noteid\x00', 0x12, 0x3, 0x0) openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/wait\x00', 0x10, 0x1, 0x0) openat$dev_bintime(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bintime\x00', 0xd, 0x3, 0x0) openat$dev_hostowner(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hostowner\x00', 0xf, 0x3, 0x0) openat$net_ipifc_1_data(0xffffffffffffff9c, &(0x7f0000000200)='/net/ipifc/1/data\x00', 0x12, 0x3, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000240)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sdctl\x00', 0xb, 0x3, 0x0) openat$proc_self_maps(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/maps\x00', 0x10, 0x1, 0x0) openat$net_ipifc_1_listen(0xffffffffffffff9c, &(0x7f0000000300)='/net/ipifc/1/listen\x00', 0x14, 0x3, 0x0) openat$dev_pgrpid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pgrpid\x00', 0xc, 0x1, 0x0) openat$net_tcp_clone(0xffffffffffffff9c, &(0x7f0000000380)='/net/tcp/clone\x00', 0xf, 0x3, 0x0) openat$prof_empty(0xffffffffffffff9c, &(0x7f00000003c0)='/prof/.empty\x00', 0xd, 0x3, 0x0) openat$proc_self_args(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/args\x00', 0x10, 0x3, 0x0) openat$dev_empty(0xffffffffffffff9c, &(0x7f0000000440)='/dev/.empty\x00', 0xc, 0x3, 0x0) openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capuse\x00', 0xc, 0x3, 0x0) openat$dev_cputime(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cputime\x00', 0xd, 0x1, 0x0) openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0) openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000540)='/dev/urandom\x00', 0xd, 0x1, 0x0) openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/consctl\x00', 0xd, 0x3, 0x0) openat$dev_config(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/config\x00', 0xc, 0x1, 0x0) openat$net_ether0_0_stats(0xffffffffffffff9c, &(0x7f0000000600)='/net/ether0/0/stats\x00', 0x14, 0x1, 0x0) openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sysstat\x00', 0xd, 0x3, 0x0) openat$prof_mpstat(0xffffffffffffff9c, &(0x7f0000000680)='/prof/mpstat\x00', 0xd, 0x3, 0x0) openat$net_ipifc_0_data(0xffffffffffffff9c, &(0x7f00000006c0)='/net/ipifc/0/data\x00', 0x12, 0x3, 0x0) openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000700)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) openat$proc_self_noteid(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/noteid\x00', 0x12, 0x3, 0x0) 23:33:49 executing program 5: r0 = openat$net_tcp_2_err(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/2/err\x00', 0xf, 0x3, 0x0) openat$proc_self_user(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/user\x00', 0x10, 0x1, 0x0) openat$net_icmp_stats(0xffffffffffffff9c, &(0x7f0000000080)='/net/icmp/stats\x00', 0x10, 0x1, 0x0) openat$net_udp_clone(0xffffffffffffff9c, &(0x7f00000000c0)='/net/udp/clone\x00', 0xf, 0x3, 0x0) openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sysstat\x00', 0xd, 0x3, 0x0) r1 = openat$net_ipifc_stats(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/stats\x00', 0x11, 0x1, 0x0) openat$net_ether0_addr(0xffffffffffffff9c, &(0x7f0000000180)='/net/ether0/addr\x00', 0x11, 0x3, 0x0) openat$dev_cputime(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cputime\x00', 0xd, 0x1, 0x0) openat$dev_drivers(0xffffffffffffff9c, &(0x7f0000000200)='/dev/drivers\x00', 0xd, 0x1, 0x0) openat$proc_self_status(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/status\x00', 0x12, 0x1, 0x0) openat$dev_capuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capuse\x00', 0xc, 0x3, 0x0) openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0) mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x3000003, 0x11, r0, 0x5) openat$net_udp_0_listen(0xffffffffffffff9c, &(0x7f0000000300)='/net/udp/0/listen\x00', 0x12, 0x3, 0x0) openat$proc_self_note(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/note\x00', 0x10, 0x1, 0x0) openat(r1, &(0x7f0000000380)='./file0\x00', 0x8, 0x400, 0x80) openat$net_udp_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/net/udp/stats\x00', 0xf, 0x1, 0x0) openat$prof_kptrace(0xffffffffffffff9c, &(0x7f0000000400)='/prof/kptrace\x00', 0xe, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x8, 0x600, 0x10) openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/proc\x00', 0x10, 0x1, 0x0) openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f0000000500)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0) openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f0000000540)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$dev_empty(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/.empty\x00', 0xc, 0x3, 0x0) openat$net_udp_0_status(0xffffffffffffff9c, &(0x7f0000000600)='/net/udp/0/status\x00', 0x12, 0x1, 0x0) openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000640)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0) fcntl$F_SETFD(r1, 0x2, 0x1) openat$dev_urandom(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0xd, 0x1, 0x0) openat$dev_bintime(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/bintime\x00', 0xd, 0x3, 0x0) 23:33:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x50) r1 = openat$net_ipifc_1_err(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/1/err\x00', 0x11, 0x3, 0x0) r2 = openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa, 0x1, 0x0) openat$prof_kpctl(0xffffffffffffff9c, &(0x7f00000000c0)='/prof/kpctl\x00', 0xc, 0x3, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x4, 0x8012, r1, 0x5) openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0) openat$dev_osversion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/osversion\x00', 0xf, 0x1, 0x0) r3 = openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000180)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0) r4 = openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f00000001c0)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0) write(r4, &(0x7f0000000200)="0c4a589af81804a75c6bf095ded4aa3a312d81fceeccd4116f3153d091765e92ffc265c26605661e807cedde4495e75175ccb798237fbf6a98dd10be4e4214e5aa70c4009e3698290681ce48e714d2043747783542afb2517927801fc6fac3775618d5b3594ed585a5ec723321cfeb0eaf3481593d12cc44175a6984585959e12973b69c83d7a974cb253791508396a3d0d7b5314f2cf546c1cbe1076e15c588e32d84741647682be1be6bbf70e50f5fbfb2bdc3982ec4cd5a52cfd74ef8683c0a3de3001e91ece9366aba8226b1b83ce256a4ef88d967df4a60604d72954a", 0xdf) openat$proc_self_core(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/core\x00', 0x10, 0x1, 0x0) openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f0000000340)='/net/icmp/clone\x00', 0x10, 0x3, 0x0) fcntl$F_SETFL(r0, 0x4, 0x80000) openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/pid\x00', 0x9, 0x1, 0x0) openat$net_ether0_1_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/net/ether0/1/stats\x00', 0x14, 0x1, 0x0) openat$net_ether0_clone(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/clone\x00', 0x12, 0x3, 0x0) openat$dev_pid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/pid\x00', 0x9, 0x1, 0x0) openat$net_ether0_1_data(0xffffffffffffff9c, &(0x7f0000000480)='/net/ether0/1/data\x00', 0x13, 0x3, 0x0) openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f00000004c0)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0) openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/stats\x00', 0x12, 0x1, 0x0) r5 = openat$net_arp(0xffffffffffffff9c, &(0x7f0000000540)='/net/arp\x00', 0x9, 0x3, 0x0) openat$proc_self_text(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/text\x00', 0x10, 0x1, 0x0) populate_va(&(0x7f0000ff9000/0x3000)=nil, 0x40) llseek(r2, 0xbbf5, 0x9, &(0x7f00000005c0), 0x0) openat$dev_pgrpid(0xffffffffffffff9c, &(0x7f0000000600)='/dev/pgrpid\x00', 0xc, 0x1, 0x0) openat$prof_kptrace_ctl(0xffffffffffffff9c, &(0x7f0000000640)='/prof/kptrace_ctl\x00', 0x12, 0x3, 0x0) openat$net_tcp_0_data(0xffffffffffffff9c, &(0x7f0000000680)='/net/tcp/0/data\x00', 0x10, 0x3, 0x0) openat$net_tcp_1_err(0xffffffffffffff9c, &(0x7f00000006c0)='/net/tcp/1/err\x00', 0xf, 0x3, 0x0) openat$net_ipifc_0_listen(0xffffffffffffff9c, &(0x7f0000000700)='/net/ipifc/0/listen\x00', 0x14, 0x3, 0x0) fcntl$F_DUPFD(r3, 0x0, r5, 0x0) 23:33:50 executing program 0: r0 = openat$net_ipselftab(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipselftab\x00', 0xf, 0x1, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kmesg\x00', 0xb, 0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3, 0x8832, r0, 0x0) bash-4.3$ nbuf 82, STAT_FIX_LEN_9P 49 BIT16SZ 2, GBIT16(buf) 0 This is bad! nbuf 82, STAT_FIX_LEN_9P 49 BIT16SZ 2, GBIT16(buf) 0 This is bad! 23:33:51 executing program 1: mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) openat$dev_sysstat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sysstat\x00', 0x9, 0x3, 0x0) 23:33:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x160, 0x0) llseek(r0, 0x80, 0xfffffffffffffffd, &(0x7f0000000000), 0x1) mkdir(&(0x7f0000000880)='./file0\x00', 0x8, 0x0) 23:33:51 executing program 1: r0 = openat$net_ipifc_0_remote(0xffffffffffffff9c, &(0x7f0000000400)='/net/ipifc/0/remote\x00', 0x14, 0x1, 0x0) fcntl$F_DUPFD(r0, 0x0, r0, 0x1) openat$net_tcp_2_remote(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/2/remote\x00', 0x12, 0x1, 0x0) fd2path(r0, &(0x7f00000000c0)=""/148, 0xfffffffffffffcbb) openat$net_empty(0xffffffffffffff9c, &(0x7f0000000040)='/net/.empty\x00', 0xc, 0x3, 0x0) openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000080)='/dev/stdout\x00', 0xc, 0x3, 0x0) openat$dev_stderr(0xffffffffffffff9c, &(0x7f0000000180)='/dev/stderr\x00', 0xc, 0x3, 0x0) [kernel] bad user addr 0x00000000200000c0 (+0xfffffffffffffcbb) in sys_fd2path (user bug) [kernel] bad user addr 0x00000000200000c0 (+0xfffffffffffffcbb) in sys_fd2path (user bug) 23:33:52 executing program 1: r0 = openat$dev_hostdomain(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hostdomain\x00', 0x10, 0x3, 0x0) fd2path(r0, &(0x7f0000000040)=""/44, 0x2c) 23:33:52 executing program 1: openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f0000000040)='/net/ipifc/0/err\x00', 0xfffffffffffffe39, 0x3, 0x0) openat$net_ipifc_0_status(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/0/status\x00', 0x14, 0x1, 0x0) 23:33:52 executing program 1: r0 = openat$net_ipifc_0_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/net/ipifc/0/ctl\x00', 0x11, 0x3, 0x0) openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000080)='/prof/mpstat-raw\x00', 0x11, 0x3, 0x0) tcgetattr(r0, &(0x7f0000000000)) openat$dev_stderr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/stderr\x00', 0xc, 0x3, 0x0) 23:33:52 executing program 1: r0 = openat$dev_sdctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sdctl\x00', 0xfffffffffffffff7, 0x3, 0x0) openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/154, 0x9a) 23:33:52 executing program 1: openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0) openat$proc_self_args(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/args\x00', 0x1, 0x3, 0x0) 23:33:52 executing program 1: access(&(0x7f0000000000)='./file0\x00', 0x8, 0x80) unlink(&(0x7f0000000040)='./file0\x00', 0x8) send_event(&(0x7f0000000100)={&(0x7f0000000080)="8b2cd016373109e898681458fdc8831ae2da0045cc3d48c1e92d6688540287a3f152c27aeeadb334d8e2b4664a324242bdc48948124013dc718402cbcd0c0898fdeadf34ed808137f7b80b5bc38caea2", 0xde42, 0x1, 0xfff, 0x8, 0xfffffffffffffffe}, &(0x7f0000000180)={0x4, 0x1, 0x100000001, &(0x7f0000000140), 0xe5b1}, 0x40f) [kernel] Vcoreid 4095 unsafe! (too big?) [kernel] Vcoreid 4095 unsafe! (too big?) 23:33:54 executing program 3: r0 = openat$net_udp_0_err(0xffffffffffffff9c, &(0x7f0000000440)='/net/udp/0/err\x00', 0xf, 0x3, 0x0) llseek(r0, 0x8b8a, 0x0, &(0x7f00000005c0), 0x0) 23:33:54 executing program 1: openat$net_ether0_2_data(0xffffffffffffff9c, &(0x7f0000000000)='/net/ether0/2/data\x00', 0x13, 0x3, 0x0) openat$net_tcp_2_listen(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/2/listen\x00', 0x12, 0x3, 0x0) openat$net_ipifc_0_err(0xffffffffffffff9c, &(0x7f0000000080)='/net/ipifc/0/err\x00', 0x11, 0x3, 0x0) openat$proc_self_text(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/text\x00', 0x10, 0x1, 0x0) openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/strace\x00', 0x12, 0x1, 0x0) openat$dev_time(0xffffffffffffff9c, &(0x7f0000000140)='/dev/time\x00', 0xa, 0x3, 0x0) openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f0000000180)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0) openat$dev_null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0xa, 0x1, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kmesg\x00', 0xb, 0x1, 0x0) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/killkid\x00', 0xd, 0x3, 0x0) openat$dev_kprint(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kprint\x00', 0xc, 0x1, 0x0) openat$net_iproute(0xffffffffffffff9c, &(0x7f00000002c0)='/net/iproute\x00', 0xd, 0x3, 0x0) openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000300)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0) openat$dev_killkid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/killkid\x00', 0xd, 0x3, 0x0) openat$proc_self_strace(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/strace\x00', 0x12, 0x1, 0x0) openat$dev_pgrpid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/pgrpid\x00', 0xc, 0x1, 0x0) openat$net_ether0_stats(0xffffffffffffff9c, &(0x7f0000000400)='/net/ether0/stats\x00', 0x12, 0x1, 0x0) openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000440)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0) openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000480)='/net/ether0/2/type\x00', 0x13, 0x1, 0x0) openat$net_ipifc_0_snoop(0xffffffffffffff9c, &(0x7f00000004c0)='/net/ipifc/0/snoop\x00', 0x13, 0x1, 0x0) openat$net_ether0_0_data(0xffffffffffffff9c, &(0x7f0000000500)='/net/ether0/0/data\x00', 0x13, 0x3, 0x0) openat$net_empty(0xffffffffffffff9c, &(0x7f0000000540)='/net/.empty\x00', 0xc, 0x3, 0x0) openat$proc_self_user(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/user\x00', 0x10, 0x1, 0x0) openat$dev_drivers(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/drivers\x00', 0xd, 0x1, 0x0) openat$dev_kmesg(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kmesg\x00', 0xb, 0x1, 0x0) openat$net_log(0xffffffffffffff9c, &(0x7f0000000640)='/net/log\x00', 0x9, 0x3, 0x0) openat$proc_self_notepg(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/notepg\x00', 0x12, 0x1, 0x0) openat$proc_self_text(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/text\x00', 0x10, 0x1, 0x0) openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f0000000700)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0) openat$net_ether0_0_type(0xffffffffffffff9c, &(0x7f0000000740)='/net/ether0/0/type\x00', 0x13, 0x1, 0x0) 23:33:54 executing program 2: r0 = openat$net_tcp_2_status(0xffffffffffffff9c, &(0x7f0000000040)='/net/tcp/2/status\x00', 0x12, 0x1, 0x0) r1 = openat$net_tcp_2_data(0xffffffffffffff9c, &(0x7f0000000280)='/net/tcp/2/data\x00', 0x10, 0x3, 0x0) fcntl$F_GETFL(r0, 0x3) tcgetattr(r1, &(0x7f0000000000)) 23:33:59 executing program 3: mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) openat$prof_kpctl(0xffffffffffffff9c, &(0x7f0000000040)='/prof/kpctl\x00', 0xc, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 23:33:59 executing program 4: r0 = openat$net_arp(0xffffffffffffff9c, &(0x7f0000000240)='/net/arp\x00', 0xc265c51255056e3d, 0x3, 0x0) openat$proc_self_maps(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x10, 0x1, 0x0) fd2path(r0, &(0x7f0000001180)=""/4096, 0x1000) 23:33:59 executing program 1: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000b) openat$net_ndb(0xffffffffffffff9c, &(0x7f0000000140)='/net/ndb\x00', 0x9, 0x3, 0x0) 23:33:59 executing program 5: r0 = openat$net_empty(0xffffffffffffff9c, &(0x7f0000000140)='/net/.empty\x00', 0x4, 0x3, 0x0) openat$net_ipifc_clone(0xffffffffffffff9c, &(0x7f0000000080)='/net/ipifc/clone\x00', 0x11, 0x3, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0xe, 0x0) openat$net_ether0_1_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ether0/1/ctl\x00', 0x12, 0x3, 0x0) fcntl$F_DUPFD(r0, 0x0, r0, 0x1) openat$net_tcp_0_listen(0xffffffffffffff9c, &(0x7f0000000100)='/net/tcp/0/listen\x00', 0x12, 0x3, 0x0) openat$dev_random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/random\x00', 0xc, 0x1, 0x0) 23:33:59 executing program 6: r0 = openat$dev_stdout(0xffffffffffffff9c, &(0x7f0000000000)='/dev/stdout\x00', 0xc, 0x3, 0x0) abort_sysc_fd(r0) openat$dev_consctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/consctl\x00', 0xd, 0x3, 0x0) abort_sysc_fd(r0) 23:33:59 executing program 2: openat$dev_zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0xe01d, 0xffffffffffffff9c, 0x0) openat$net_tcp_1_local(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/1/local\x00', 0x11, 0x1, 0x0) 23:33:59 executing program 7: r0 = openat$proc_self_wait(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/wait\x00', 0xfffffffffffffdde, 0x1, 0x0) fstat(r0, &(0x7f0000000040)) openat$proc_self_proc(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/proc\x00', 0x10, 0x1, 0x0) openat$net_ether0_2_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/net/ether0/2/ctl\x00', 0x12, 0x3, 0x0) 23:33:59 executing program 0: r0 = openat$net_ether0_0_ifstats(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ether0/0/ifstats\x00', 0xffffffffffffff2f, 0x1, 0x0) r1 = openat$proc_self_profile(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/profile\x00', 0x13, 0x1, 0x0) fwstat(r1, &(0x7f0000000400)=""/223, 0xdf, 0x0) r2 = openat$net_icmp_clone(0xffffffffffffff9c, &(0x7f00000003c0)='/net/icmp/clone\x00', 0x10, 0x3, 0x0) tcgetattr(r1, &(0x7f0000000300)) openat$proc_self_args(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/args\x00', 0x10, 0x3, 0x0) openat$net_ipifc_1_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/net/ipifc/1/ctl\x00', 0x11, 0x3, 0x0) read(r2, &(0x7f00000001c0)=""/213, 0xd5) nmount(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x4) fwstat(r0, &(0x7f00000000c0)=""/162, 0xa2, 0x0) 23:33:59 executing program 1: mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) openat$net_udp_0_listen(0xffffffffffffff9c, &(0x7f0000001340)='/net/udp/0/listen\x00', 0x12, 0x3, 0x0) 23:33:59 executing program 4: mmap(&(0x7f00007f9000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffff9c, 0x0) openat$net_tcp_0_status(0xffffffffffffff9c, &(0x7f0000000000)='/net/tcp/0/status\x00', 0x12, 0x1, 0x0) 23:33:59 executing program 6: r0 = openat$prof_mpstat_raw(0xffffffffffffff9c, &(0x7f0000000080)='/prof/mpstat-raw\x00', 0xfeab, 0x3, 0x0) openat$net_iproute(0xffffffffffffff9c, &(0x7f0000000040)='/net/iproute\x00', 0xd, 0x3, 0x0) close(r0) nbuf 223, STAT_FIX_LEN_9P 49 BIT16SZ 2, GBIT16(buf) 0 This is bad! 23:33:59 executing program 3: r0 = openat$net_ipselftab(0xffffffffffffff9c, &(0x7f0000000100)='/net/ipselftab\x00', 0x4a3, 0x1, 0x0) r1 = openat$dev_bintime(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bintime\x00', 0x9, 0x3, 0x0) fd2path(r1, &(0x7f0000000080)=""/94, 0x5e) fd2path(r0, &(0x7f0000000140)=""/68, 0x44) 23:33:59 executing program 2: r0 = openat$net_ether0_2_type(0xffffffffffffff9c, &(0x7f0000000100)='/net/ether0/2/type\x00', 0x52fee3c87e44bda9, 0x1, 0x0) openat$net_udp_stats(0xffffffffffffff9c, &(0x7f0000000000)='/net/udp/stats\x00', 0xf, 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x1032, r0, 0x0) 23:33:59 executing program 7: mmap(&(0x7f000007a000/0x3000)=nil, 0x3000, 0x4, 0x8032, 0xffffffffffffffff, 0x4) openat$prof_kpctl(0xffffffffffffff9c, &(0x7f0000000000)='/prof/kpctl\x00', 0xc, 0x3, 0x0) openat$dev_swap(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swap\x00', 0xa, 0x3, 0x0) 23:33:59 executing program 1: r0 = proc_create(&(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000240)=')', 0x1, 0x0) r1 = openat$proc_self_strace_traceset(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/strace_traceset\x00', 0x1b, 0x3, 0x0) openat$net_ipifc_1_remote(0xffffffffffffff9c, &(0x7f00000002c0)='/net/ipifc/1/remote\x00', 0x14, 0x1, 0x0) fchdir(r0, r1) notify(0x0, 0xb, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)="3ecaa3a60e14fecd1547ef2c6ecc7d8cc4b720885d2d274b1aee3c176ecd60563484b13665e3557d81f8f711fe6b41444c30f8737e743b2bb33c97332dbeea15ef110e76bbef4be1b90e381cd143bf796059e207fbeeef851d2982e00f0c31f0b330d4ffc30cf75af1e28e539e77c2", 0x8}) notify(0x0, 0x32, &(0x7f0000000100)={0x5, 0x1ff, 0x1, &(0x7f0000000000)="dd37c2eb2d73c14922e1f6cb26fac639375cb3c7e31b80acb710d06297ee6181a15306e3a8ee66ecc43ec8bb75a2e2950c4588762da0b0bbad435f65f898fccb1d1342abd134f5ffefc2f3f8af1fb1f6418ea44f2434191cc3006ad8ea94139016e71d167c4717ea9c53b4e645a27b5f87b102aa9b53143b1e4b0391459ced29d6dc4bfe1cbec044cde7ec4806393e27740ac2ea3e1fda4f2be1dee0ab19772e3d1ef7e13fa75b14b89758f2dafc0f0b494c454f9e2cf79e09cc97d2cfa4bd60064fc6bfdb3e5130c8ae4ac5985cd006cf0fd04eebf534270ef9ac", 0x2b87}) nbuf 162, STAT_FIX_LEN_9P 49 BIT16SZ 2, GBIT16(buf) 0 This is bad! 23:33:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x160, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x8, 0x0) lstat(&(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000040)) nbuf 223, STAT_FIX_LEN_9P 49 BIT16SZ 2, GBIT16(buf) 0 kernel panic at /syzkaller/managers/main/kernel/kern/include/kref.h:61, from core 2: This is bad! assertion failed: kref Stack Backtrace on Core 2: #01 [<0xffffffffc200a3b7>] in backtrace #02 [<0xffffffffc2009b7c>] in _panic #03 [<0xffffffffc2049424>] in kref_get #04 [<0xffffffffc204945e>] in enum_proc.10203 #05 [<0xffffffffc2009151>] in hash_for_each #06 [<0xffffffffc204e8e7>] in proc_get_set #07 [<0xffffffffc2045c61>] in profiler_emit_current_system_status #08 [<0xffffffffc2045d83>] in profiler_setup #09 [<0xffffffffc207ad5a>] in kprof_open #10 [<0xffffffffc20338e0>] in __namec_from #11 [<0xffffffffc20340af>] in namec #12 [<0xffffffffc2041566>] in sysopenat #13 [<0xffffffffc205859f>] in sys_openat #14 [<0xffffffffc2059149>] in syscall #15 [<0xffffffffc2059304>] in run_local_syscall #16 [<0xffffffffc2059839>] in prep_syscalls #17 [<0xffffffffc20aaf1a>] in sysenter_callwrapper Entering Nanwan's Dungeon on Core 2 (Ints on): Type 'help' for a list of commands.