Hello,
syzbot found the following issue on:
HEAD commit: a1153c0deb44 Linux 6.6.147
git tree: linux-6.6.y
console output:
https://syzkaller.appspot.com/x/log.txt?x=17048649580000
kernel config:
https://syzkaller.appspot.com/x/.config?x=f0bc3d90c30838b5
dashboard link:
https://syzkaller.appspot.com/bug?extid=9f7e70f5d19dcc51bbd3
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro:
https://syzkaller.appspot.com/x/repro.syz?x=16cbcdb9580000
C reproducer:
https://syzkaller.appspot.com/x/repro.c?x=1157cc9e580000
Downloadable assets:
disk image:
https://storage.googleapis.com/syzbot-assets/9f646bfa1b52/disk-a1153c0d.raw.xz
vmlinux:
https://storage.googleapis.com/syzbot-assets/a2aec2e8f0fd/vmlinux-a1153c0d.xz
kernel image:
https://storage.googleapis.com/syzbot-assets/a7abe1f87405/bzImage-a1153c0d.xz
mounted in repro:
https://storage.googleapis.com/syzbot-assets/252c75ac63dd/mount_0.gz
fsck result: failed (log:
https://syzkaller.appspot.com/x/fsck.log?x=13048649580000)
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by:
syzbot+9f7e70...@syzkaller.appspotmail.com
runtime: s.allocCount= 25 s.nelems= 0
fatal error: s.allocCount != s.nelems && freeIndex == s.nelems
goroutine 30 gp=0x22245f774780 m=4 mp=0x22245b65f808 [running]:
runtime.throw({0x182f72d?, 0x22245cd44a20?})
/usr/local/go/src/runtime/panic.go:1229 +0x48 fp=0x22245ce190c8 sp=0x22245ce19098 pc=0x48a928
runtime.(*mcache).nextFree(0x7f3ee75d0108, 0x59)
/usr/local/go/src/runtime/malloc.go:1056 +0x1c5 fp=0x22245ce19100 sp=0x22245ce190c8 pc=0x424a65
runtime.mallocgcSmallNoscan(0x51edb4?, 0x22245ce194d8?, 0x3?)
/usr/local/go/src/runtime/malloc.go:1449 +0x185 fp=0x22245ce19158 sp=0x22245ce19100 pc=0x424f05
runtime.mallocgc(0x1000, 0x0, 0x0)
/usr/local/go/src/runtime/malloc.go:1195 +0xcc fp=0x22245ce19188 sp=0x22245ce19158 pc=0x48840c
runtime.growslice(0x0, 0x51f165?, 0x51fdd9?, 0x80?, 0x0?)
/usr/local/go/src/runtime/slice.go:265 +0x573 fp=0x22245ce191f8 sp=0x22245ce19188 pc=0x48d593
bytes.growSlice({0x222463866800, 0x800, 0x10000000000?}, 0x7f3ea05e79f0?)
/usr/local/go/src/bytes/buffer.go:267 +0x95 fp=0x22245ce19290 sp=0x22245ce191f8 pc=0x4a8b35
bytes.(*Buffer).grow(0x22245f760c30, 0x400)
/usr/local/go/src/bytes/buffer.go:169 +0x14f fp=0x22245ce192c8 sp=0x22245ce19290 pc=0x4a856f
bytes.(*Buffer).Write(0x22245f760c30, {0x22246384fb40, 0x400, 0x22245ce19340?})
/usr/local/go/src/bytes/buffer.go:197 +0x59 fp=0x22245ce192f8 sp=0x22245ce192c8 pc=0x4a8759
encoding/base64.(*encoder).Write(0x22246384fb08, {0x22245f676c00?, 0x22245ce19470?, 0x5270a5?})
/usr/local/go/src/encoding/base64/base64.go:253 +0x153 fp=0x22245ce19378 sp=0x22245ce192f8 pc=0x5e9913
github.com/google/syzkaller/pkg/image.EncodeB64({0x22245f676c00, 0x1141, 0x1300})
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/image/compression.go:80 +0xa5 fp=0x22245ce193d8 sp=0x22245ce19378 pc=0x8410a5
github.com/google/syzkaller/prog.serializeCompressedData(0x22245f760ba0, {0x22245f676c00, 0x1141, 0x1300})
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:920 +0x4f fp=0x22245ce19408 sp=0x22245ce193d8 pc=0x861e0f
github.com/google/syzkaller/prog.(*DataArg).serialize(0x0?, 0x22245f760c00)
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:175 +0x113 fp=0x22245ce19498 sp=0x22245ce19408 pc=0x85bbb3
github.com/google/syzkaller/prog.(*serializer).arg(0x227fa00?, {0x22b6620?, 0x22245cd44810?})
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:140 +0x29 fp=0x22245ce194e0 sp=0x22245ce19498 pc=0x85b5c9
github.com/google/syzkaller/prog.(*PointerArg).serialize(0x22245cd44840, 0x22245f760c00)
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:161 +0x365 fp=0x22245ce19570 sp=0x22245ce194e0 pc=0x85ba25
github.com/google/syzkaller/prog.(*serializer).arg(0x227fa00?, {0x22b6660?, 0x22245cd44840?})
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:140 +0x29 fp=0x22245ce195b8 sp=0x22245ce19570 pc=0x85b5c9
github.com/google/syzkaller/prog.(*serializer).call(0x22245f760c00, 0x22245d8bb5e0)
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:101 +0x216 fp=0x22245ce19688 sp=0x22245ce195b8 pc=0x85b136
github.com/google/syzkaller/prog.(*Prog).Serialize(0x22245d249b00, {0x0, 0x0, 0x3?})
/syzkaller/gopath/src/
github.com/google/syzkaller/prog/encoding.go:56 +0x105 fp=0x22245ce196d8 sp=0x22245ce19688 pc=0x85ae25
github.com/google/syzkaller/pkg/rpcserver.(*Runner).handleExecutingMessage(0x22245b464540, 0x22245f77ce88)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/runner.go:409 +0x29c fp=0x22245ce197b8 sp=0x22245ce196d8 pc=0x128949c
github.com/google/syzkaller/pkg/rpcserver.(*Runner).ConnectionLoop(0x22245b464540)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/runner.go:208 +0x47a fp=0x22245ce199b0 sp=0x22245ce197b8 pc=0x12881ba
github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop(0x22245b4dc900, {0x22aa7d0?, 0x22245d8bb9a0?}, 0x22245b464540)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:465 +0x196 fp=0x22245ce19b08 sp=0x22245ce199b0 pc=0x1285216
github.com/google/syzkaller/pkg/rpcserver.(*server).handleRunnerConn(0x22245b4dc900, {0x22aa7d0, 0x22245d8bb9a0}, 0x22245b464540, 0x22245d8bb9f0)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:388 +0x595 fp=0x22245ce19d50 sp=0x22245ce19b08 pc=0x1284775
github.com/google/syzkaller/pkg/rpcserver.(*server).handleConn(0x22245b4dc900, {0x22aa7d0, 0x22245d8bb9a0}, 0x22245d8bb9f0)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:350 +0x3d8 fp=0x22245ce19e88 sp=0x22245ce19d50 pc=0x1283f38
github.com/google/syzkaller/pkg/rpcserver.(*server).Serve.func1.1({0x22aa7d0?, 0x22245d8bb9a0?}, 0x10?)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:270 +0x31 fp=0x22245ce19ef8 sp=0x22245ce19e88 pc=0x1283a71
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:79 +0x18f fp=0x22245ce19f78 sp=0x22245ce19ef8 pc=0x89cecf
golang.org/x/sync/errgroup.(*Group).Go.func1()
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:93 +0x50 fp=0x22245ce19fe0 sp=0x22245ce19f78 pc=0x834fd0
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245ce19fe8 sp=0x22245ce19fe0 pc=0x4922e1
created by
golang.org/x/sync/errgroup.(*Group).Go in goroutine 27
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:78 +0x95
goroutine 1 gp=0x22245b2061e0 m=nil [select]:
runtime.gopark(0x22245b9fbbc8?, 0x2?, 0x3f?, 0x3?, 0x22245b9fbb44?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245cd819d0 sp=0x22245cd819b0 pc=0x48aa4e
runtime.selectgo(0x22245cd81bc8, 0x22245b9fbb40, 0x7ffe63159e4a?, 0x0, 0x22245b9fbc38?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0xaa5 fp=0x22245cd81b00 sp=0x22245cd819d0 pc=0x4687a5
github.com/google/syzkaller/pkg/rpcserver.(*local).RunInstance(0x22245f708fc0, {0x22aa7d0, 0x22245d8bb860}, 0x0)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:172 +0x58e fp=0x22245cd81ce0 sp=0x22245cd81b00 pc=0x12825ce
github.com/google/syzkaller/pkg/rpcserver.RunLocal({0x22aa7d0?, 0x22245d8bb770?}, 0x226d968?)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:60 +0x1b0 fp=0x22245cd81db0 sp=0x22245cd81ce0 pc=0x1281790
main.main()
/syzkaller/gopath/src/
github.com/google/syzkaller/tools/syz-execprog/execprog.go:188 +0x907 fp=0x22245cd81f48 sp=0x22245cd81db0 pc=0x1292427
runtime.main()
/usr/local/go/src/runtime/proc.go:290 +0x2d5 fp=0x22245cd81fe0 sp=0x22245cd81f48 pc=0x4551f5
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245cd81fe8 sp=0x22245cd81fe0 pc=0x4922e1
goroutine 2 gp=0x22245b206780 m=nil [force gc (idle)]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b272fa8 sp=0x22245b272f88 pc=0x48aa4e
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.forcegchelper()
/usr/local/go/src/runtime/proc.go:375 +0xb3 fp=0x22245b272fe0 sp=0x22245b272fa8 pc=0x455513
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b272fe8 sp=0x22245b272fe0 pc=0x4922e1
created by runtime.init.7 in goroutine 1
/usr/local/go/src/runtime/proc.go:363 +0x1a
goroutine 17 gp=0x22245b304000 m=nil [GC sweep wait]:
runtime.gopark(0x1?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b26e788 sp=0x22245b26e768 pc=0x48aa4e
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.bgsweep(0x22245b300000)
/usr/local/go/src/runtime/mgcsweep.go:324 +0x151 fp=0x22245b26e7c8 sp=0x22245b26e788 pc=0x43dcf1
runtime.gcenable.gowrap1()
/usr/local/go/src/runtime/mgc.go:214 +0x17 fp=0x22245b26e7e0 sp=0x22245b26e7c8 pc=0x42f097
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b26e7e8 sp=0x22245b26e7e0 pc=0x4922e1
created by runtime.gcenable in goroutine 1
/usr/local/go/src/runtime/mgc.go:214 +0x66
goroutine 18 gp=0x22245b3041e0 m=nil [GC scavenge wait]:
runtime.gopark(0x10000?, 0x226d8f8?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b26ef78 sp=0x22245b26ef58 pc=0x48aa4e
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.(*scavengerState).park(0x33dc580)
/usr/local/go/src/runtime/mgcscavenge.go:425 +0x49 fp=0x22245b26efa8 sp=0x22245b26ef78 pc=0x43b769
runtime.bgscavenge(0x22245b300000)
/usr/local/go/src/runtime/mgcscavenge.go:658 +0x59 fp=0x22245b26efc8 sp=0x22245b26efa8 pc=0x43bcf9
runtime.gcenable.gowrap2()
/usr/local/go/src/runtime/mgc.go:215 +0x17 fp=0x22245b26efe0 sp=0x22245b26efc8 pc=0x42f057
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b26efe8 sp=0x22245b26efe0 pc=0x4922e1
created by runtime.gcenable in goroutine 1
/usr/local/go/src/runtime/mgc.go:215 +0xa5
goroutine 19 gp=0x22245b3043c0 m=nil [GOMAXPROCS updater (idle)]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b26f788 sp=0x22245b26f768 pc=0x48aa4e
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.updateMaxProcsGoroutine()
/usr/local/go/src/runtime/proc.go:7095 +0xe7 fp=0x22245b26f7e0 sp=0x22245b26f788 pc=0x463ae7
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b26f7e8 sp=0x22245b26f7e0 pc=0x4922e1
created by runtime.defaultGOMAXPROCSUpdateEnable in goroutine 1
/usr/local/go/src/runtime/proc.go:7083 +0x37
goroutine 20 gp=0x22245b3045a0 m=nil [finalizer wait]:
runtime.gopark(0x464b35?, 0x3401e80?, 0x13?, 0x0?, 0x22245b272670?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b272620 sp=0x22245b272600 pc=0x48aa4e
runtime.runFinalizers()
/usr/local/go/src/runtime/mfinal.go:210 +0x107 fp=0x22245b2727e0 sp=0x22245b272620 pc=0x42e007
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2727e8 sp=0x22245b2727e0 pc=0x4922e1
created by runtime.createfing in goroutine 1
/usr/local/go/src/runtime/mfinal.go:172 +0x3d
goroutine 3 gp=0x22245b5f4000 m=nil [select]:
runtime.gopark(0x22245b273778?, 0x3?, 0xe5?, 0x83?, 0x22245b273772?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b273608 sp=0x22245b2735e8 pc=0x48aa4e
runtime.selectgo(0x22245b273778, 0x22245b27376c, 0x22245b2fca80?, 0x0, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0xaa5 fp=0x22245b273738 sp=0x22245b273608 pc=0x4687a5
go.opencensus.io/stats/view.(*worker).start(0x22245b2fca80)
/syzkaller/gopath/pkg/mod/go.openc...@v0.24.0/stats/view/worker.go:292 +0xa5 fp=0x22245b2737c8 sp=0x22245b273738 pc=0x1095a25
go.opencensus.io/stats/view.init.0.gowrap1()
/syzkaller/gopath/pkg/mod/go.openc...@v0.24.0/stats/view/worker.go:34 +0x17 fp=0x22245b2737e0 sp=0x22245b2737c8 pc=0x1094db7
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2737e8 sp=0x22245b2737e0 pc=0x4922e1
created by
go.opencensus.io/stats/view.init.0 in goroutine 1
/syzkaller/gopath/pkg/mod/go.openc...@v0.24.0/stats/view/worker.go:34 +0x8d
goroutine 4 gp=0x22245b5f41e0 m=nil [cleanup wait]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b273f68 sp=0x22245b273f48 pc=0x48aa4e
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.(*cleanupQueue).dequeue(0x33dc9c0)
/usr/local/go/src/runtime/mcleanup.go:522 +0xd4 fp=0x22245b273fa0 sp=0x22245b273f68 pc=0x42a674
runtime.runCleanups()
/usr/local/go/src/runtime/mcleanup.go:718 +0x45 fp=0x22245b273fe0 sp=0x22245b273fa0 pc=0x42ace5
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b273fe8 sp=0x22245b273fe0 pc=0x4922e1
created by runtime.(*cleanupQueue).createGs in goroutine 1
/usr/local/go/src/runtime/mcleanup.go:672 +0xa5
goroutine 5 gp=0x22245b6e5a40 m=nil [GC worker (idle)]:
runtime.gopark(0x140b08fe0b?, 0x2?, 0x9?, 0x87?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b274740 sp=0x22245b274720 pc=0x48aa4e
runtime.gcBgMarkWorker(0x22245b5e22a0)
/usr/local/go/src/runtime/mgc.go:1791 +0xeb fp=0x22245b2747c8 sp=0x22245b274740 pc=0x431b6b
runtime.gcBgMarkStartWorkers.gowrap1()
/usr/local/go/src/runtime/mgc.go:1695 +0x17 fp=0x22245b2747e0 sp=0x22245b2747c8 pc=0x431a57
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2747e8 sp=0x22245b2747e0 pc=0x4922e1
created by runtime.gcBgMarkStartWorkers in goroutine 1
/usr/local/go/src/runtime/mgc.go:1695 +0x105
goroutine 21 gp=0x22245b304780 m=nil [GC worker (idle)]:
runtime.gopark(0x140b0a3df7?, 0x2?, 0xf2?, 0x9d?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b26ff40 sp=0x22245b26ff20 pc=0x48aa4e
runtime.gcBgMarkWorker(0x22245b5e22a0)
/usr/local/go/src/runtime/mgc.go:1791 +0xeb fp=0x22245b26ffc8 sp=0x22245b26ff40 pc=0x431b6b
runtime.gcBgMarkStartWorkers.gowrap1()
/usr/local/go/src/runtime/mgc.go:1695 +0x17 fp=0x22245b26ffe0 sp=0x22245b26ffc8 pc=0x431a57
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b26ffe8 sp=0x22245b26ffe0 pc=0x4922e1
created by runtime.gcBgMarkStartWorkers in goroutine 1
/usr/local/go/src/runtime/mgc.go:1695 +0x105
goroutine 23 gp=0x22245b2b6b40 m=nil [chan receive]:
runtime.gopark(0x22245b5fe1d0?, 0x22245b5fe150?, 0x10?, 0x31?, 0x834aa0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b2cdef8 sp=0x22245b2cded8 pc=0x48aa4e
runtime.chanrecv(0x22245b5fe150, 0x22245b2cdfb8, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x4ae fp=0x22245b2cdf70 sp=0x22245b2cdef8 pc=0x41ca2e
runtime.chanrecv2(0x22245b4e37c0?, 0x22245b450518?)
/usr/local/go/src/runtime/chan.go:514 +0x12 fp=0x22245b2cdf98 sp=0x22245b2cdf70 pc=0x41c572
github.com/google/syzkaller/pkg/stat.newSet.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/stat/set.go:97 +0x66 fp=0x22245b2cdfe0 sp=0x22245b2cdf98 pc=0x833626
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2cdfe8 sp=0x22245b2cdfe0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/stat.newSet in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/stat/set.go:96 +0xd6
goroutine 24 gp=0x22245b728b40 m=nil [select]:
runtime.gopark(0x22245b2cd768?, 0x3?, 0x70?, 0x0?, 0x22245b2cd74a?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b752de0 sp=0x22245b752dc0 pc=0x48aa4e
runtime.selectgo(0x22245b752f68, 0x22245b2cd744, 0x336bfa0?, 0x0, 0x336c040?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0xaa5 fp=0x22245b752f10 sp=0x22245b752de0 pc=0x4687a5
cloud.google.com/go/spanner.(*endpointLatencyRegistry).runCleanup(0x22245b3fae70)
/syzkaller/gopath/pkg/mod/
cloud.google.com/go/spa...@v1.91.0/endpoint_latency_registry.go:251 +0xf0 fp=0x22245b752fc8 sp=0x22245b752f10 pc=0x10981b0
cloud.google.com/go/spanner.newEndpointLatencyRegistry.gowrap1()
/syzkaller/gopath/pkg/mod/
cloud.google.com/go/spa...@v1.91.0/endpoint_latency_registry.go:83 +0x17 fp=0x22245b752fe0 sp=0x22245b752fc8 pc=0x1097f37
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b752fe8 sp=0x22245b752fe0 pc=0x4922e1
created by
cloud.google.com/go/spanner.newEndpointLatencyRegistry in goroutine 1
/syzkaller/gopath/pkg/mod/
cloud.google.com/go/spa...@v1.91.0/endpoint_latency_registry.go:83 +0x14a
goroutine 8 gp=0x22245b729680 m=nil [chan receive]:
runtime.gopark(0x83c51a?, 0x152fe00?, 0x1?, 0x60?, 0x22245b2cd758?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b2cd6c8 sp=0x22245b2cd6a8 pc=0x48aa4e
runtime.chanrecv(0x22245b930000, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x4ae fp=0x22245b2cd740 sp=0x22245b2cd6c8 pc=0x41ca2e
runtime.chanrecv1(0x22245b930000?, 0x22245b2cd7b0?)
/usr/local/go/src/runtime/chan.go:509 +0x12 fp=0x22245b2cd768 sp=0x22245b2cd740 pc=0x41c552
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/osutil/osutil_unix.go:78 +0x78 fp=0x22245b2cd7e0 sp=0x22245b2cd768 pc=0x840718
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2cd7e8 sp=0x22245b2cd7e0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/osutil.HandleInterrupts in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/osutil/osutil_unix.go:75 +0x4f
goroutine 9 gp=0x22245b729c20 m=nil [select]:
runtime.gopark(0x22245b274fb0?, 0x2?, 0x0?, 0x0?, 0x22245b274f9c?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b274e38 sp=0x22245b274e18 pc=0x48aa4e
runtime.selectgo(0x22245b274fb0, 0x22245b274f98, 0x0?, 0x0, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0xaa5 fp=0x22245b274f68 sp=0x22245b274e38 pc=0x4687a5
github.com/google/syzkaller/pkg/rpcserver.cancelOnInterrupts.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:101 +0x69 fp=0x22245b274fe0 sp=0x22245b274f68 pc=0x1281da9
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b274fe8 sp=0x22245b274fe0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/rpcserver.cancelOnInterrupts in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:100 +0xb8
goroutine 10 gp=0x22245b7f7860 m=nil [sync.WaitGroup.Wait]:
runtime.gopark(0x22245b751ed0?, 0x425294?, 0x50?, 0x1?, 0x3401e06?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b751e70 sp=0x22245b751e50 pc=0x48aa4e
runtime.goparkunlock(...)
/usr/local/go/src/runtime/proc.go:468
runtime.semacquire1(0x22245d25a010, 0x0, 0x1, 0x0, 0x19)
/usr/local/go/src/runtime/sema.go:192 +0x232 fp=0x22245b751ed8 sp=0x22245b751e70 pc=0x469632
sync.runtime_SemacquireWaitGroup(0x22245d01c018?, 0x60?)
/usr/local/go/src/runtime/sema.go:114 +0x2e fp=0x22245b751f10 sp=0x22245b751ed8 pc=0x48c22e
sync.(*WaitGroup).Wait(0x22245d25a008)
/usr/local/go/src/sync/waitgroup.go:206 +0x85 fp=0x22245b751f38 sp=0x22245b751f10 pc=0x49d6e5
golang.org/x/sync/errgroup.(*Group).Wait(0x22245d25a000)
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:56 +0x1e fp=0x22245b751f58 sp=0x22245b751f38 pc=0x834e7e
github.com/google/syzkaller/pkg/rpcserver.(*server).Serve(0x22245b4dc900, {0x22aa7d0?, 0x22245d8bb8b0?})
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:289 +0x137 fp=0x22245b751f98 sp=0x22245b751f58 pc=0x1283877
github.com/google/syzkaller/pkg/rpcserver.RunLocal.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:57 +0x35 fp=0x22245b751fe0 sp=0x22245b751f98 pc=0x1281935
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b751fe8 sp=0x22245b751fe0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/rpcserver.RunLocal in goroutine 1
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/local.go:56 +0x19a
goroutine 25 gp=0x22245b2b70e0 m=nil [select, locked to thread]:
runtime.gopark(0x22245b2c97a8?, 0x2?, 0x0?, 0x0?, 0x22245b2c9794?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b2c9628 sp=0x22245b2c9608 pc=0x48aa4e
runtime.selectgo(0x22245b2c97a8, 0x22245b2c9790, 0x0?, 0x0, 0x22a6728?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0xaa5 fp=0x22245b2c9758 sp=0x22245b2c9628 pc=0x4687a5
runtime.ensureSigM.func1()
/usr/local/go/src/runtime/signal_unix.go:1091 +0x188 fp=0x22245b2c97e0 sp=0x22245b2c9758 pc=0x485088
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2c97e8 sp=0x22245b2c97e0 pc=0x4922e1
created by runtime.ensureSigM in goroutine 8
/usr/local/go/src/runtime/signal_unix.go:1074 +0xc5
goroutine 26 gp=0x22245f774000 m=5 mp=0x22245b726008 [syscall]:
runtime.notetsleepg(0x3400d40, 0xffffffffffffffff)
/usr/local/go/src/runtime/lock_futex.go:123 +0x29 fp=0x22245b2c9fa0 sp=0x22245b2c9f78 pc=0x422f69
os/signal.signal_recv()
/usr/local/go/src/runtime/sigqueue.go:152 +0x98 fp=0x22245b2c9fc0 sp=0x22245b2c9fa0 pc=0x48ce58
os/signal.loop()
/usr/local/go/src/os/signal/signal_unix.go:23 +0x13 fp=0x22245b2c9fe0 sp=0x22245b2c9fc0 pc=0x83c873
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2c9fe8 sp=0x22245b2c9fe0 pc=0x4922e1
created by os/signal.Notify.func1.1 in goroutine 8
/usr/local/go/src/os/signal/signal.go:152 +0x1f
goroutine 27 gp=0x22245f7741e0 m=nil [IO wait]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b753c18 sp=0x22245b753bf8 pc=0x48aa4e
runtime.netpollblock(0x22245b753c68?, 0x41a946?, 0x0?)
/usr/local/go/src/runtime/netpoll.go:575 +0xf7 fp=0x22245b753c50 sp=0x22245b753c18 pc=0x44ddb7
internal/poll.runtime_pollWait(0x7f3ea0b0b000, 0x72)
/usr/local/go/src/runtime/netpoll.go:351 +0x85 fp=0x22245b753c70 sp=0x22245b753c50 pc=0x489c25
internal/poll.(*pollDesc).wait(0x22245efa4200?, 0x900000036?, 0x0)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:84 +0x27 fp=0x22245b753c98 sp=0x22245b753c70 pc=0x508c47
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:89
internal/poll.(*FD).Accept(0x22245efa4200)
/usr/local/go/src/internal/poll/fd_unix.go:613 +0x28c fp=0x22245b753d40 sp=0x22245b753c98 pc=0x50dccc
net.(*netFD).accept(0x22245efa4200)
/usr/local/go/src/net/fd_unix.go:150 +0x29 fp=0x22245b753df8 sp=0x22245b753d40 pc=0x562c69
net.(*TCPListener).accept(0x22245d228780)
/usr/local/go/src/net/tcpsock_posix.go:159 +0x1b fp=0x22245b753e48 sp=0x22245b753df8 pc=0x578dfb
net.(*TCPListener).Accept(0x22245d228780)
/usr/local/go/src/net/tcpsock.go:387 +0x30 fp=0x22245b753e78 sp=0x22245b753e48 pc=0x578090
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve(0x22245f709038, {0x22aa7d0?, 0x22245c53d770?}, 0x22245f778010)
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:57 +0xfe fp=0x22245b753f30 sp=0x22245b753e78 pc=0x89cabe
github.com/google/syzkaller/pkg/rpcserver.(*server).Serve.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:269 +0x79 fp=0x22245b753f78 sp=0x22245b753f30 pc=0x1283a19
golang.org/x/sync/errgroup.(*Group).Go.func1()
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:93 +0x50 fp=0x22245b753fe0 sp=0x22245b753f78 pc=0x834fd0
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b753fe8 sp=0x22245b753fe0 pc=0x4922e1
created by
golang.org/x/sync/errgroup.(*Group).Go in goroutine 10
/syzkaller/gopath/pkg/mod/
golang.org/x/sy...@v0.21.0/errgroup/errgroup.go:78 +0x95
goroutine 29 gp=0x22245f7745a0 m=nil [chan receive]:
runtime.gopark(0x22a6728?, 0x146bec0?, 0x28?, 0x67?, 0x22245b2cafa8?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b2caf18 sp=0x22245b2caef8 pc=0x48aa4e
runtime.chanrecv(0x22245f632d90, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x4ae fp=0x22245b2caf90 sp=0x22245b2caf18 pc=0x41ca2e
runtime.chanrecv1(0x22245c53d7c0?, 0x3351380?)
/usr/local/go/src/runtime/chan.go:509 +0x12 fp=0x22245b2cafb8 sp=0x22245b2caf90 pc=0x41c552
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:53 +0x2c fp=0x22245b2cafe0 sp=0x22245b2cafb8 pc=0x89cfac
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2cafe8 sp=0x22245b2cafe0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve in goroutine 27
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:51 +0xe8
goroutine 11 gp=0x22245b7f7a40 m=nil [select]:
runtime.gopark(0x22245b275f38?, 0x2?, 0x0?, 0x0?, 0x22245b275ec4?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b275d58 sp=0x22245b275d38 pc=0x48aa4e
runtime.selectgo(0x22245b275f38, 0x22245b275ec0, 0x0?, 0x1, 0x0?, 0x1)
/usr/local/go/src/runtime/select.go:351 +0xaa5 fp=0x22245b275e88 sp=0x22245b275d58 pc=0x4687a5
os/exec.(*Cmd).watchCtx(0x22245ccc1860, 0x22245d7ac5b0)
/usr/local/go/src/os/exec/exec.go:797 +0xb1 fp=0x22245b275fc0 sp=0x22245b275e88 pc=0x8390b1
os/exec.(*Cmd).Start.gowrap2()
/usr/local/go/src/os/exec/exec.go:783 +0x1b fp=0x22245b275fe0 sp=0x22245b275fc0 pc=0x838d7b
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b275fe8 sp=0x22245b275fe0 pc=0x4922e1
created by os/exec.(*Cmd).Start in goroutine 1
/usr/local/go/src/os/exec/exec.go:783 +0x8f5
goroutine 12 gp=0x22245b7f7c20 m=nil [chan receive]:
runtime.gopark(0x0?, 0x146bec0?, 0x0?, 0x0?, 0x22245b2707a8?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b270718 sp=0x22245b2706f8 pc=0x48aa4e
runtime.chanrecv(0x22245f632e00, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x4ae fp=0x22245b270790 sp=0x22245b270718 pc=0x41ca2e
runtime.chanrecv1(0x22245d8bb9a0?, 0x0?)
/usr/local/go/src/runtime/chan.go:509 +0x12 fp=0x22245b2707b8 sp=0x22245b270790 pc=0x41c552
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2.1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:76 +0x2c fp=0x22245b2707e0 sp=0x22245b2707b8 pc=0x89cf4c
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2707e8 sp=0x22245b2707e0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2 in goroutine 30
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/flatrpc/conn.go:75 +0x173
goroutine 31 gp=0x22245f774960 m=nil [chan receive]:
runtime.gopark(0x22245cdb4018?, 0x13fa000?, 0x45?, 0xe8?, 0x22245b2cb7a8?)
/usr/local/go/src/runtime/proc.go:462 +0xce fp=0x22245b2cb718 sp=0x22245b2cb6f8 pc=0x48aa4e
runtime.chanrecv(0x22245f632ee0, 0x0, 0x1)
/usr/local/go/src/runtime/chan.go:667 +0x4ae fp=0x22245b2cb790 sp=0x22245b2cb718 pc=0x41ca2e
runtime.chanrecv1(0x22245cdb4000?, 0x3356380?)
/usr/local/go/src/runtime/chan.go:509 +0x12 fp=0x22245b2cb7b8 sp=0x22245b2cb790 pc=0x41c552
github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop.func1()
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:444 +0x2c fp=0x22245b2cb7e0 sp=0x22245b2cb7b8 pc=0x12854ec
runtime.goexit({})
/usr/local/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0x22245b2cb7e8 sp=0x22245b2cb7e0 pc=0x4922e1
created by
github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop in goroutine 30
/syzkaller/gopath/src/
github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:443 +0xdd
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
---
This report is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup