Hello,
syzbot found the following issue on:
HEAD commit: 365f9c7a6b81 Merge branches 'for-next/core' and 'for-next/..
git tree: git://
git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
console output:
https://syzkaller.appspot.com/x/log.txt?x=13b6649e580000
kernel config:
https://syzkaller.appspot.com/x/.config?x=72c97575381cec47
dashboard link:
https://syzkaller.appspot.com/bug?extid=75ce2513b5cd405ae11f
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
userspace arch: arm64
syz repro:
https://syzkaller.appspot.com/x/repro.syz?x=15a14aea580000
Downloadable assets:
disk image:
https://storage.googleapis.com/syzbot-assets/eafe0adb7386/disk-365f9c7a.raw.xz
vmlinux:
https://storage.googleapis.com/syzbot-assets/29422d607579/vmlinux-365f9c7a.xz
kernel image:
https://storage.googleapis.com/syzbot-assets/98ca955a8b54/Image-365f9c7a.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by:
syzbot+75ce25...@syzkaller.appspotmail.com
** 19 printk messages dropped **
unexpected fault address 0x0
fatal error: fault
[signal SIGSEGV: segmentation violation code=0x80 addr=0x0 pc=0x3f5068]
goroutine 28 gp=0x7183fe8034a0 m=7 mp=0x7183ff96d008 [running]:
runtime.throw({0x122ad0d?, 0x92064?})
/usr/local/go/src/runtime/panic.go:1229 +0x38 fp=0x7184002db530 sp=0x7184002db500 pc=0x94358
runtime.sigpanic()
/usr/local/go/src/runtime/signal_unix.go:945 +0x21c fp=0x7184002db590 sp=0x7184002db530 pc=0x9665c
encoding/binary.AppendUvarint(...)
/usr/local/go/src/encoding/binary/varint.go:46
encoding/binary.AppendVarint(...)
/usr/local/go/src/encoding/binary/varint.go:96
github.com/google/syzkaller/prog.(*execContext).write(...)
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encodingexec.go:325
github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0x7183ffaff200)
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encodingexec.go:76 +0x128 fp=0x7184002db6b0 sp=0x7184002db5a0 pc=0x3f5068
github.com/google/syzkaller/pkg/rpcserver.(*Runner).sendRequest(0x7183fef12380, 0x7183ffe91980)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/runner.go:330 +0x1d8 fp=0x7184002db7b0 sp=0x7184002db6b0 pc=0xcf8498
github.com/google/syzkaller/pkg/rpcserver.(*Runner).ConnectionLoop(0x7183fef12380)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/runner.go:185 +0x2f4 fp=0x7184002db9b0 sp=0x7184002db7b0 pc=0xcf7954
github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop(0x7183fef4a5a0, {0x1d081b0?, 0x7184002b0c80?}, 0x7183fef12380)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:465 +0x13c fp=0x7184002dbb10 sp=0x7184002db9b0 pc=0xcf50ec
github.com/google/syzkaller/pkg/rpcserver.(*server).handleRunnerConn(0x7183fef4a5a0, {0x1d081b0, 0x7184002b0c80}, 0x7183fef12380, 0x7184002b0cd0)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:388 +0x394 fp=0x7184002dbd20 sp=0x7184002dbb10 pc=0xcf4834
github.com/google/syzkaller/pkg/rpcserver.(*server).handleConn(0x7183fef4a5a0, {0x1d081b0, 0x7184002b0c80}, 0x7184002b0cd0)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:350 +0x37c fp=0x7184002dbe70 sp=0x7184002dbd20 pc=0xcf429c
github.com/google/syzkaller/pkg/rpcserver.(*server).Serve.func1.1({0x1d081b0?, 0x7184002b0c80?}, 0x1?)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:270 +0x38 fp=0x7184002dbee0 sp=0x7184002dbe70 pc=0xcf3e68
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:79 +0x16c fp=0x7184002dbf60 sp=0x7184002dbee0 pc=0x42637c
golang.org/x/sync/errgroup.(*Group).Go.func1()
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:93 +0x4c fp=0x7184002dbfd0 sp=0x7184002dbf60 pc=0x3ccbbc
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184002dbfd0 sp=0x7184002dbfd0 pc=0x9bbc4
created by
golang.org/x/sync/errgroup.(*Group).Go in goroutine 25
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:78 +0x90
goroutine 1 gp=0x7183fdc0a1e0 m=nil [select]:
runtime.gopark(0x7183fdcc1bb0?, 0x2?, 0x3?, 0x0?, 0x7183fdcc1b2c?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7184002d99a0 sp=0x7184002d9980 pc=0x9446c
runtime.selectgo(0x7184002d9bb0, 0x7183fdcc1b28, 0xffffdfe9de46?, 0x0, 0x7183fdcc1c20?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0x83c fp=0x7184002d9ae0 sp=0x7184002d99a0 pc=0x73d0c
github.com/google/syzkaller/pkg/rpcserver.(*local).RunInstance(0x7183ffd64090, {0x1d081b0, 0x7184002b0b40}, 0x0)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:172 +0x3f8 fp=0x7184002d9cc0 sp=0x7184002d9ae0 pc=0xcf2d88
github.com/google/syzkaller/pkg/rpcserver.RunLocal({0x1d081b0?, 0x7184002b0a50?}, 0x1ccb458?)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:60 +0x148 fp=0x7184002d9d90 sp=0x7184002d9cc0 pc=0xcf2208
main.main()
/syzkaller/gopath/src/
github.com/google/syzkaller/tools/syz-execprog/execprog.go:188 +0x774 fp=0x7184002d9f30 sp=0x7184002d9d90 pc=0xcfff54
runtime.main()
/usr/local/go/src/runtime/proc.go:290 +0x2b4 fp=0x7184002d9fd0 sp=0x7184002d9f30 pc=0x60284
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184002d9fd0 sp=0x7184002d9fd0 pc=0x9bbc4
goroutine 2 gp=0x7183fdc0a780 m=nil [force gc (idle)]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7cf90 sp=0x7183fdc7cf70 pc=0x9446c
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.forcegchelper()
/usr/local/go/src/runtime/proc.go:375 +0xb4 fp=0x7183fdc7cfd0 sp=0x7183fdc7cf90 pc=0x605a4
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7cfd0 sp=0x7183fdc7cfd0 pc=0x9bbc4
created by runtime.init.7 in goroutine 1
/usr/local/go/src/runtime/proc.go:363 +0x24
goroutine 17 gp=0x7183fdd04000 m=nil [GC sweep wait]:
runtime.gopark(0x1?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc78770 sp=0x7183fdc78750 pc=0x9446c
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.bgsweep(0x7183fdd00000)
/usr/local/go/src/runtime/mgcsweep.go:324 +0x178 fp=0x7183fdc787b0 sp=0x7183fdc78770 pc=0x496e8
runtime.gcenable.gowrap1()
/usr/local/go/src/runtime/mgc.go:214 +0x20 fp=0x7183fdc787d0 sp=0x7183fdc787b0 pc=0x3ab50
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc787d0 sp=0x7183fdc787d0 pc=0x9bbc4
created by runtime.gcenable in goroutine 1
/usr/local/go/src/runtime/mgc.go:214 +0x6c
goroutine 18 gp=0x7183fdd041e0 m=nil [GC scavenge wait]:
runtime.gopark(0x10000?, 0x1ccb3e8?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc78f60 sp=0x7183fdc78f40 pc=0x9446c
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.(*scavengerState).park(0x2de8080)
/usr/local/go/src/runtime/mgcscavenge.go:425 +0x5c fp=0x7183fdc78f90 sp=0x7183fdc78f60 pc=0x4721c
runtime.bgscavenge(0x7183fdd00000)
/usr/local/go/src/runtime/mgcscavenge.go:658 +0xac fp=0x7183fdc78fb0 sp=0x7183fdc78f90 pc=0x4779c
runtime.gcenable.gowrap2()
/usr/local/go/src/runtime/mgc.go:215 +0x20 fp=0x7183fdc78fd0 sp=0x7183fdc78fb0 pc=0x3ab10
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc78fd0 sp=0x7183fdc78fd0 pc=0x9bbc4
created by runtime.gcenable in goroutine 1
/usr/local/go/src/runtime/mgc.go:215 +0xac
goroutine 19 gp=0x7183fdd043c0 m=nil [GOMAXPROCS updater (idle)]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc79770 sp=0x7183fdc79750 pc=0x9446c
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.updateMaxProcsGoroutine()
/usr/local/go/src/runtime/proc.go:7095 +0xf4 fp=0x7183fdc797d0 sp=0x7183fdc79770 pc=0x6ef64
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc797d0 sp=0x7183fdc797d0 pc=0x9bbc4
created by runtime.defaultGOMAXPROCSUpdateEnable in goroutine 1
/usr/local/go/src/runtime/proc.go:7083 +0x48
goroutine 20 gp=0x7183fdd045a0 m=nil [finalizer wait]:
runtime.gopark(0x8?, 0xa005c?, 0xd8?, 0xc5?, 0x60844?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7c580 sp=0x7183fdc7c560 pc=0x9446c
runtime.runFinalizers()
/usr/local/go/src/runtime/mfinal.go:210 +0x100 fp=0x7183fdc7c7d0 sp=0x7183fdc7c580 pc=0x39b70
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7c7d0 sp=0x7183fdc7c7d0 pc=0x9bbc4
created by runtime.createfing in goroutine 1
/usr/local/go/src/runtime/mfinal.go:172 +0x78
goroutine 3 gp=0x7183fdfd4d20 m=nil [select]:
runtime.gopark(0x7183fdd16f68?, 0x3?, 0x30?, 0x8c?, 0x7183fdd16f62?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdd16de0 sp=0x7183fdd16dc0 pc=0x9446c
runtime.selectgo(0x7183fdd16f68, 0x7183fdd16f5c, 0x7183fdcfc600?, 0x0, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0x83c fp=0x7183fdd16f20 sp=0x7183fdd16de0 pc=0x73d0c
go.opencensus.io/stats/view.(*worker).start(0x7183fdcfc600)
/syzkaller/gopath/pkg/mod/go.openc...@v0.24.0/stats/view/worker.go:292 +0x88 fp=0x7183fdd16fb0 sp=0x7183fdd16f20 pc=0xb46e78
go.opencensus.io/stats/view.init.0.gowrap1()
/syzkaller/gopath/pkg/mod/go.openc...@v0.24.0/stats/view/worker.go:34 +0x20 fp=0x7183fdd16fd0 sp=0x7183fdd16fb0 pc=0xb463f0
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdd16fd0 sp=0x7183fdd16fd0 pc=0x9bbc4
created by
go.opencensus.io/stats/view.init.0 in goroutine 1
/syzkaller/gopath/pkg/mod/go.openc...@v0.24.0/stats/view/worker.go:34 +0x94
goroutine 4 gp=0x7183fdfd4f00 m=nil [cleanup wait]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7df50 sp=0x7183fdc7df30 pc=0x9446c
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.(*cleanupQueue).dequeue(0x2de86e0)
/usr/local/go/src/runtime/mcleanup.go:522 +0x160 fp=0x7183fdc7df90 sp=0x7183fdc7df50 pc=0x35f20
runtime.runCleanups()
/usr/local/go/src/runtime/mcleanup.go:718 +0x40 fp=0x7183fdc7dfd0 sp=0x7183fdc7df90 pc=0x36670
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7dfd0 sp=0x7183fdc7dfd0 pc=0x9bbc4
created by runtime.(*cleanupQueue).createGs in goroutine 1
/usr/local/go/src/runtime/mcleanup.go:672 +0x108
goroutine 5 gp=0x7183fe0b0960 m=nil [GC worker (idle)]:
runtime.gopark(0x8a93d0e1b?, 0x3?, 0xd8?, 0xf8?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7e720 sp=0x7183fdc7e700 pc=0x9446c
runtime.gcBgMarkWorker(0x7183fdcce2a0)
/usr/local/go/src/runtime/mgc.go:1791 +0xe0 fp=0x7183fdc7e7b0 sp=0x7183fdc7e720 pc=0x3d5b0
runtime.gcBgMarkStartWorkers.gowrap1()
/usr/local/go/src/runtime/mgc.go:1695 +0x20 fp=0x7183fdc7e7d0 sp=0x7183fdc7e7b0 pc=0x3d4b0
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7e7d0 sp=0x7183fdc7e7d0 pc=0x9bbc4
created by runtime.gcBgMarkStartWorkers in goroutine 1
/usr/local/go/src/runtime/mgc.go:1695 +0x134
goroutine 21 gp=0x7183fdf17860 m=nil [GC worker (idle)]:
runtime.gopark(0x8a94d99ed?, 0x7183fdc7d75c?, 0x0?, 0xc6?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7d720 sp=0x7183fdc7d700 pc=0x9446c
runtime.gcBgMarkWorker(0x7183fdcce2a0)
/usr/local/go/src/runtime/mgc.go:1791 +0xe0 fp=0x7183fdc7d7b0 sp=0x7183fdc7d720 pc=0x3d5b0
runtime.gcBgMarkStartWorkers.gowrap1()
/usr/local/go/src/runtime/mgc.go:1695 +0x20 fp=0x7183fdc7d7d0 sp=0x7183fdc7d7b0 pc=0x3d4b0
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7d7d0 sp=0x7183fdc7d7d0 pc=0x9bbc4
created by runtime.gcBgMarkStartWorkers in goroutine 1
/usr/local/go/src/runtime/mgc.go:1695 +0x134
goroutine 7 gp=0x7183fe17eb40 m=nil [chan receive]:
runtime.gopark(0x7183fe06a160?, 0x7183fe06a0e0?, 0x0?, 0x3e?, 0x7183ffd64048?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7184002c3ed0 sp=0x7184002c3eb0 pc=0x9446c
runtime.chanrecv(0x7183fe06a0e0, 0x7184002c3fb0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x470 fp=0x7184002c3f50 sp=0x7184002c3ed0 pc=0x28a90
runtime.chanrecv2(0x7183fdcbdc70?, 0x7183fdf7c008?)
/usr/local/go/src/runtime/chan.go:514 +0x14 fp=0x7184002c3f80 sp=0x7184002c3f50 pc=0x28604
github.com/google/syzkaller/pkg/stat.newSet.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/stat/set.go:97 +0x5c fp=0x7184002c3fd0 sp=0x7184002c3f80 pc=0x3cb38c
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184002c3fd0 sp=0x7184002c3fd0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/stat.newSet in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/stat/set.go:96 +0xc4
goroutine 8 gp=0x7183fe1d1a40 m=nil [select]:
runtime.gopark(0x7183fe1ddf58?, 0x3?, 0xf8?, 0xdd?, 0x7183fe1ddf3a?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdd15db0 sp=0x7183fdd15d90 pc=0x9446c
runtime.selectgo(0x7183fdd15f58, 0x7183fe1ddf34, 0x0?, 0x0, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0x83c fp=0x7183fdd15ef0 sp=0x7183fdd15db0 pc=0x73d0c
cloud.google.com/go/spanner.(*endpointLatencyRegistry).runCleanup(0x7183fde1e850)
/syzkaller/gopath/pkg/mod/
cloud.google.com/go/spa...@v1.91.0/endpoint_latency_registry.go:251 +0xbc fp=0x7183fdd15fb0 sp=0x7183fdd15ef0 pc=0xb4915c
cloud.google.com/go/spanner.newEndpointLatencyRegistry.gowrap1()
/syzkaller/gopath/pkg/mod/
cloud.google.com/go/spa...@v1.91.0/endpoint_latency_registry.go:83 +0x20 fp=0x7183fdd15fd0 sp=0x7183fdd15fb0 pc=0xb48f50
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdd15fd0 sp=0x7183fdd15fd0 pc=0x9bbc4
created by
cloud.google.com/go/spanner.newEndpointLatencyRegistry in goroutine 1
/syzkaller/gopath/pkg/mod/
cloud.google.com/go/spa...@v1.91.0/endpoint_latency_registry.go:83 +0x144
goroutine 10 gp=0x7183fee6a780 m=nil [chan receive]:
runtime.gopark(0x7184001afec8?, 0x3d3300?, 0x1?, 0x3a?, 0x7183ff964690?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7184001afea0 sp=0x7184001afe80 pc=0x9446c
runtime.chanrecv(0x7183fe438a10, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x470 fp=0x7184001aff20 sp=0x7184001afea0 pc=0x28a90
runtime.chanrecv1(0x7183fe438a10?, 0x7184001affa8?)
/usr/local/go/src/runtime/chan.go:509 +0x14 fp=0x7184001aff50 sp=0x7184001aff20 pc=0x285e4
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/osutil/osutil_unix.go:78 +0x70 fp=0x7184001affd0 sp=0x7184001aff50 pc=0x3d6de0
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184001affd0 sp=0x7184001affd0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/osutil.HandleInterrupts in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/osutil/osutil_unix.go:75 +0x5c
goroutine 11 gp=0x7183fee6a960 m=nil [select]:
runtime.gopark(0x7183fdc7f7a8?, 0x2?, 0x0?, 0x0?, 0x7183fdc7f794?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7f610 sp=0x7183fdc7f5f0 pc=0x9446c
runtime.selectgo(0x7183fdc7f7a8, 0x7183fdc7f790, 0x0?, 0x0, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0x83c fp=0x7183fdc7f750 sp=0x7183fdc7f610 pc=0x73d0c
github.com/google/syzkaller/pkg/rpcserver.cancelOnInterrupts.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:101 +0x64 fp=0x7183fdc7f7d0 sp=0x7183fdc7f750 pc=0xcf2734
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7f7d0 sp=0x7183fdc7f7d0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/rpcserver.cancelOnInterrupts in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:100 +0xa4
goroutine 12 gp=0x7183fee6ab40 m=nil [sync.WaitGroup.Wait]:
runtime.gopark(0x2df7040?, 0xffffaa013a30?, 0x20?, 0x8d?, 0xffff6314f9d0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7fe50 sp=0x7183fdc7fe30 pc=0x9446c
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.semacquire1(0x7183ffb22010, 0x0, 0x1, 0x0, 0x19)
/usr/local/go/src/runtime/sema.go:192 +0x244 fp=0x7183fdc7fea0 sp=0x7183fdc7fe50 pc=0x748a4
sync.runtime_SemacquireWaitGroup(0x7183fee6ab40?, 0x50?)
/usr/local/go/src/runtime/sema.go:114 +0x38 fp=0x7183fdc7fee0 sp=0x7183fdc7fea0 pc=0x95c68
sync.(*WaitGroup).Wait(0x7183ffb22008)
/usr/local/go/src/sync/waitgroup.go:206 +0xa8 fp=0x7183fdc7ff10 sp=0x7183fdc7fee0 pc=0xa6c88
golang.org/x/sync/errgroup.(*Group).Wait(0x7183ffb22000)
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:56 +0x28 fp=0x7183fdc7ff30 sp=0x7183fdc7ff10 pc=0x3cca78
github.com/google/syzkaller/pkg/rpcserver.(*server).Serve(0x7183fef4a5a0, {0x1d081b0?, 0x7184002b0b90?})
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:289 +0x128 fp=0x7183fdc7ff80 sp=0x7183fdc7ff30 pc=0xcf3ca8
github.com/google/syzkaller/pkg/rpcserver.RunLocal.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:57 +0x34 fp=0x7183fdc7ffd0 sp=0x7183fdc7ff80 pc=0xcf2354
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7ffd0 sp=0x7183fdc7ffd0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/rpcserver.RunLocal in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:56 +0x134
goroutine 23 gp=0x7183fe8023c0 m=nil [select, locked to thread]:
runtime.gopark(0x7184001abfa0?, 0x2?, 0x98?, 0xbe?, 0x7184001abf8c?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7184001abe00 sp=0x7184001abde0 pc=0x9446c
runtime.selectgo(0x7184001abfa0, 0x7184001abf88, 0x0?, 0x0, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0x83c fp=0x7184001abf40 sp=0x7184001abe00 pc=0x73d0c
runtime.ensureSigM.func1()
/usr/local/go/src/runtime/signal_unix.go:1091 +0x17c fp=0x7184001abfd0 sp=0x7184001abf40 pc=0x8e91c
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184001abfd0 sp=0x7184001abfd0 pc=0x9bbc4
created by runtime.ensureSigM in goroutine 10
/usr/local/go/src/runtime/signal_unix.go:1074 +0xcc
goroutine 24 gp=0x7183fe802960 m=4 mp=0x7183fe0a6808 [syscall]:
runtime.notetsleepg(0x2e12d20, 0xffffffffffffffff)
/usr/local/go/src/runtime/lock_futex.go:123 +0x34 fp=0x7184001ac790 sp=0x7184001ac760 pc=0x2e934
os/signal.signal_recv()
/usr/local/go/src/runtime/sigqueue.go:152 +0x114 fp=0x7184001ac7b0 sp=0x7184001ac790 pc=0x968b4
os/signal.loop()
/usr/local/go/src/os/signal/signal_unix.go:23 +0x1c fp=0x7184001ac7d0 sp=0x7184001ac7b0 pc=0x3d37fc
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184001ac7d0 sp=0x7184001ac7d0 pc=0x9bbc4
created by os/signal.Notify.func1.1 in goroutine 10
/usr/local/go/src/os/signal/signal.go:152 +0x28
goroutine 25 gp=0x7183fe802f00 m=nil [IO wait]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdd14bb0 sp=0x7183fdd14b90 pc=0x9446c
runtime.netpollblock(0x7000000000?, 0x6?, 0x0?)
/usr/local/go/src/runtime/netpoll.go:575 +0x150 fp=0x7183fdd14bf0 sp=0x7183fdd14bb0 pc=0x59390
internal/poll.runtime_pollWait(0xffffa9e4e000, 0x72)
/usr/local/go/src/runtime/netpoll.go:351 +0xa0 fp=0x7183fdd14c20 sp=0x7183fdd14bf0 pc=0x93640
internal/poll.(*pollDesc).wait(0x7184017fe280?, 0x10ec3c?, 0x0)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:84 +0x28 fp=0x7183fdd14c50 sp=0x7183fdd14c20 pc=0x108c78
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:89
internal/poll.(*FD).Accept(0x7184017fe280)
/usr/local/go/src/internal/poll/fd_unix.go:613 +0x214 fp=0x7183fdd14d00 sp=0x7183fdd14c50 pc=0x10ce24
net.(*netFD).accept(0x7184017fe280)
/usr/local/go/src/net/fd_unix.go:150 +0x28 fp=0x7183fdd14dc0 sp=0x7183fdd14d00 pc=0x15af88
net.(*TCPListener).accept(0x7183ff55cd80)
/usr/local/go/src/net/tcpsock_posix.go:159 +0x24 fp=0x7183fdd14e10 sp=0x7183fdd14dc0 pc=0x16f4f4
net.(*TCPListener).Accept(0x7183ff55cd80)
/usr/local/go/src/net/tcpsock.go:387 +0x2c fp=0x7183fdd14e50 sp=0x7183fdd14e10 pc=0x16e8ac
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve(0x7183ffd64108, {0x1d081b0?, 0x7183fe76f270?}, 0x7183ff95fb30)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:57 +0xd8 fp=0x7183fdd14f10 sp=0x7183fdd14e50 pc=0x426018
github.com/google/syzkaller/pkg/rpcserver.(*server).Serve.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:269 +0x80 fp=0x7183fdd14f60 sp=0x7183fdd14f10 pc=0xcf3e10
golang.org/x/sync/errgroup.(*Group).Go.func1()
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:93 +0x4c fp=0x7183fdd14fd0 sp=0x7183fdd14f60 pc=0x3ccbbc
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdd14fd0 sp=0x7183fdd14fd0 pc=0x9bbc4
created by
golang.org/x/sync/errgroup.(*Group).Go in goroutine 12
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:78 +0x90
goroutine 27 gp=0x7183fe8032c0 m=nil [chan receive]:
runtime.gopark(0x7184001adf18?, 0xd86f0?, 0x20?, 0xb8?, 0x7184000286e0?)
** 89 printk messages dropped **
** 148 printk messages dropped **
** 124 printk messages dropped **
** 104 printk messages dropped **
** 12 printk messages dropped **
** 3 printk messages dropped **
** 157 printk messages dropped **
** 103 printk messages dropped **
** 158 printk messages dropped **
** 117 printk messages dropped **
** 131 printk messages dropped **
** 158 printk messages dropped **
** 138 printk messages dropped **
** 224 printk messages dropped **
** 23 printk messages dropped **
** 23 printk messages dropped **
** 136 printk messages dropped **
** 150 printk messages dropped **
** 165 printk messages dropped **
** 330 printk messages dropped **
** 32 printk messages dropped **
** 37 printk messages dropped **
** 153 printk messages dropped **
** 148 printk messages dropped **
** 177 printk messages dropped **
** 155 printk messages dropped **
** 155 printk messages dropped **
** 163 printk messages dropped **
** 136 printk messages dropped **
** 52 printk messages dropped **
** 54 printk messages dropped **
** 118 printk messages dropped **
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7184001adef0 sp=0x7184001aded0 pc=0x9446c
runtime.chanrecv(0x7183ff89c700, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x470 fp=0x7184001adf70 sp=0x7184001adef0 pc=0x28a90
runtime.chanrecv1(0x7183fe42c8c0?, 0x1d29620?)
/usr/local/go/src/runtime/chan.go:509 +0x14 fp=0x7184001adfa0 sp=0x7184001adf70 pc=0x285e4
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:53 +0x34 fp=0x7184001adfd0 sp=0x7184001adfa0 pc=0x426464
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184001adfd0 sp=0x7184001adfd0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve in goroutine 25
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:51 +0xc8
goroutine 13 gp=0x7183fee6ad20 m=nil [select]:
runtime.gopark(0x7183fdc79f30?, 0x2?, 0x0?, 0x0?, 0x7183fdc79ebc?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc79d30 sp=0x7183fdc79d10 pc=0x9446c
runtime.selectgo(0x7183fdc79f30, 0x7183fdc79eb8, 0x0?, 0x1, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0x83c fp=0x7183fdc79e70 sp=0x7183fdc79d30 pc=0x73d0c
os/exec.(*Cmd).watchCtx(0x7183ffc8b1e0, 0x7183ffa14bd0)
/usr/local/go/src/os/exec/exec.go:797 +0x74 fp=0x7183fdc79fb0 sp=0x7183fdc79e70 pc=0x3d04b4
os/exec.(*Cmd).Start.gowrap2()
/usr/local/go/src/os/exec/exec.go:783 +0x20 fp=0x7183fdc79fd0 sp=0x7183fdc79fb0 pc=0x3d0200
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc79fd0 sp=0x7183fdc79fd0 pc=0x9bbc4
created by os/exec.(*Cmd).Start in goroutine 1
/usr/local/go/src/os/exec/exec.go:783 +0x69c
goroutine 14 gp=0x7183fee6af00 m=nil [chan receive]:
runtime.gopark(0x7183fdc7a718?, 0xd86f0?, 0x20?, 0xb8?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7183fdc7a6f0 sp=0x7183fdc7a6d0 pc=0x9446c
runtime.chanrecv(0x7183ff89c770, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x470 fp=0x7183fdc7a770 sp=0x7183fdc7a6f0 pc=0x28a90
runtime.chanrecv1(0x7184002b0c80?, 0x0?)
/usr/local/go/src/runtime/chan.go:509 +0x14 fp=0x7183fdc7a7a0 sp=0x7183fdc7a770 pc=0x285e4
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2.1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:76 +0x34 fp=0x7183fdc7a7d0 sp=0x7183fdc7a7a0 pc=0x426404
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7183fdc7a7d0 sp=0x7183fdc7a7d0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2 in goroutine 28
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:75 +0x150
goroutine 29 gp=0x7183fe803680 m=nil [chan receive]:
runtime.gopark(0x7184001ae718?, 0xd86f0?, 0x20?, 0xb8?, 0x7262e7d255e335c?)
/usr/local/go/src/runtime/proc.go:462 +0xbc fp=0x7184001ae6f0 sp=0x7184001ae6d0 pc=0x9446c
runtime.chanrecv(0x7183ff89c070, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x470 fp=0x7184001ae770 sp=0x7184001ae6f0 pc=0x28a90
runtime.chanrecv1(0x7184002b0aa0?, 0x1?)
/usr/local/go/src/runtime/chan.go:509 +0x14 fp=0x7184001ae7a0 sp=0x7184001ae770 pc=0x285e4
** 20 printk messages dropped **
** 30 printk messages dropped **
** 46 printk messages dropped **
github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:444 +0x34 fp=0x7184001ae7d0 sp=0x7184001ae7a0 pc=0xcf5334
runtime.goexit({})
/usr/local/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x7184001ae7d0 sp=0x7184001ae7d0 pc=0x9bbc4
created by
github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop in goroutine 28
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:443 +0xa8
** 141 printk messages dropped **
** 31 printk messages dropped **
** 95 printk messages dropped **
** 132 printk messages dropped **
** 151 printk messages dropped **
** 152 printk messages dropped **
** 143 printk messages dropped **
** 57 printk messages dropped **
** 93 printk messages dropped **
** 82 printk messages dropped **
** 63 printk messages dropped **
** 157 printk messages dropped **
** 163 printk messages dropped **
** 131 printk messages dropped **
** 149 printk messages dropped **
** 141 printk messages dropped **
** 126 printk messages dropped **
** 167 printk messages dropped **
** 122 printk messages dropped **
** 156 printk messages dropped **
** 169 printk messages dropped **
** 335 printk messages dropped **
** 154 printk messages dropped **
** 24 printk messages dropped **
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
---
This report is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup