syzbot

 sign-in | mailing list | source | docs
🐞 Open [141] 🐞 Fixed [269] 🐞 Invalid [579] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3)

Status: closed as invalid on 2019/12/02 08:42
Reported-by: syzbot+b122a5bfb50da17eb079@syzkaller.appspotmail.com
First crash: 1622d, last: 1622d
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1651d 1651d 0/3 closed as invalid on 2019/11/02 08:04
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1416d 1487d 0/3 closed as invalid on 2020/08/04 06:37
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1553d 1553d 0/3 closed as invalid on 2020/02/09 09:06
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1529d 1529d 0/3 closed as invalid on 2020/03/03 08:16
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1567d 1567d 0/3 closed as invalid on 2020/01/26 09:58
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1673d 1673d 0/3 closed as invalid on 2019/10/26 08:48
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1561d 1561d 0/3 closed as invalid on 2020/02/01 08:31

Sample crash report:
	/usr/local/go/src/runtime/panic.go:774 +0x72 fp=0xc002d5d3d8 sp=0xc002d5d3a8 pc=0x42e9e2
runtime.sigpanic()
	/usr/local/go/src/runtime/signal_unix.go:378 +0x47c fp=0xc002d5d408 sp=0xc002d5d3d8 pc=0x443f6c
runtime.deductSweepCredit(0x2000, 0x0)
	/usr/local/go/src/runtime/mgcsweep.go:420 +0x13 fp=0xc002d5d410 sp=0xc002d5d408 pc=0x423003
runtime.(*mcentral).cacheSpan(0xd58f98, 0xc)
	/usr/local/go/src/runtime/mcentral.go:43 +0x60 fp=0xc002d5d470 sp=0xc002d5d410 pc=0x417130
runtime.(*mcache).refill(0x2e0462008, 0x2a)
	/usr/local/go/src/runtime/mcache.go:138 +0x85 fp=0xc002d5d490 sp=0xc002d5d470 pc=0x416e75
runtime.(*mcache).nextFree(0x2e0462008, 0xc002d5d82a, 0xc000040380, 0x430750, 0x91cba8)
	/usr/local/go/src/runtime/malloc.go:854 +0x87 fp=0xc002d5d4c8 sp=0xc002d5d490 pc=0x40b967
runtime.mallocgc(0x180, 0x8afdc0, 0xc002d5d501, 0x40537e)
	/usr/local/go/src/runtime/malloc.go:1022 +0x793 fp=0xc002d5d568 sp=0xc002d5d4c8 pc=0x40c2a3
runtime.makeslice(0x8afdc0, 0x5, 0x5, 0xc0007b0101)
	/usr/local/go/src/runtime/slice.go:49 +0x6c fp=0xc002d5d598 sp=0xc002d5d568 pc=0x444ddc
github.com/google/syzkaller/pkg/ipc.(*Env).parseOutput(0xc000092240, 0xc002e01cc0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:327 +0xa6 fp=0xc002d5d798 sp=0xc002d5d598 pc=0x7b79b6
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc000092240, 0xc00369a820, 0xc002e01cc0, 0xc0037512c0, 0x6, 0x203000, 0xc9b520, 0x40c698, 0xc002d5d8f0, 0x7899d3)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:287 +0x237 fp=0xc002d5d890 sp=0xc002d5d798 pc=0x7b7217
main.(*Proc).executeRaw(0xc003b103c0, 0xc00369a820, 0xc002e01cc0, 0x4, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x20c fp=0xc002d5d9b8 sp=0xc002d5d890 pc=0x7ed57c
main.(*Proc).execute(0xc003b103c0, 0xc00369a820, 0xc002e01cc0, 0x0, 0x4, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x6a fp=0xc002d5dae8 sp=0xc002d5d9b8 pc=0x7ececa
main.(*Proc).triageInput.func1(0xc002e01cc0, 0x4, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:152 +0x90 fp=0xc002d5db50 sp=0xc002d5dae8 pc=0x7f21c0
github.com/google/syzkaller/prog.Minimize.func1(0xc002e01cc0, 0x4, 0xc002d5dbd8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:20 +0xa0 fp=0xc002d5db98 sp=0xc002d5db50 pc=0x7a0160
github.com/google/syzkaller/prog.removeCalls(0xc0044bb080, 0x5, 0xffffffffffffff00, 0xc002d41370, 0x4103e2, 0x8ad660)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:73 +0xac fp=0xc002d5dbe8 sp=0xc002d5db98 pc=0x7816cc
github.com/google/syzkaller/prog.Minimize(0xc0044bb080, 0x5, 0x0, 0xc003730560, 0x2f806eee0, 0x8a)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:31 +0x116 fp=0xc002d5dcf8 sp=0xc002d5dbe8 pc=0x781086
main.(*Proc).triageInput(0xc003b103c0, 0xc0043057a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:149 +0x9dc fp=0xc002d5df08 sp=0xc002d5dcf8 pc=0x7ec6dc
main.(*Proc).loop(0xc003b103c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x19c fp=0xc002d5dfd8 sp=0xc002d5df08 pc=0x7eb99c
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc002d5dfe0 sp=0xc002d5dfd8 pc=0x45d471
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x114c

goroutine 1 [select]:
main.(*Fuzzer).pollLoop(0xc0000a51e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:320 +0x127
main.main()
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:262 +0x12bd

goroutine 19 [IO wait]:
internal/poll.runtime_pollWait(0x220aa5ec8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc0000c1518, 0x72, 0x1000, 0x1000, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0000c1500, 0xc000220000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
net.(*netFD).Read(0xc0000c1500, 0xc000220000, 0x1000, 0x1000, 0xc00014da60, 0xc00014db40, 0x7c299d)
	/usr/local/go/src/net/fd_unix.go:202 +0x4f
net.(*conn).Read(0xc00000e948, 0xc000220000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/usr/local/go/src/net/net.go:184 +0x68
bufio.(*Reader).fill(0xc000057b00)
	/usr/local/go/src/bufio/bufio.go:100 +0x103
bufio.(*Reader).ReadByte(0xc000057b00, 0xc00014dc00, 0xc0000c1580, 0xc00000dbc0)
	/usr/local/go/src/bufio/bufio.go:252 +0x39
compress/flate.(*decompressor).moreBits(0xc000125300, 0x91bba8, 0xc00014db88)
	/usr/local/go/src/compress/flate/inflate.go:696 +0x37
compress/flate.(*decompressor).nextBlock(0xc000125300)
	/usr/local/go/src/compress/flate/inflate.go:303 +0x36
compress/flate.(*decompressor).Read(0xc000125300, 0xc00022c000, 0x1000, 0x1000, 0x892020, 0xc003929350, 0x199)
	/usr/local/go/src/compress/flate/inflate.go:347 +0x77
github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0000fab40, 0xc00022c000, 0x1000, 0x1000, 0x10, 0xc00014db88, 0x7c27fd)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51
bufio.(*Reader).Read(0xc000057b60, 0xc000020a60, 0x1, 0x9, 0x0, 0x0, 0xc00014dd70)
	/usr/local/go/src/bufio/bufio.go:226 +0x26a
io.ReadAtLeast(0x99cb40, 0xc000057b60, 0xc000020a60, 0x1, 0x9, 0x1, 0x1, 0x0, 0x0)
	/usr/local/go/src/io/io.go:310 +0x87
io.ReadFull(...)
	/usr/local/go/src/io/io.go:329
encoding/gob.decodeUintReader(0x99cb40, 0xc000057b60, 0xc000020a60, 0x9, 0x9, 0x4050d5, 0x43080c, 0xc00014dd48, 0x45a320)
	/usr/local/go/src/encoding/gob/decode.go:120 +0x6f
encoding/gob.(*Decoder).recvMessage(0xc0000c1580, 0x404fbc)
	/usr/local/go/src/encoding/gob/decoder.go:81 +0x57
encoding/gob.(*Decoder).decodeTypeSequence(0xc0000c1580, 0xc000000100, 0xc00014de10)
	/usr/local/go/src/encoding/gob/decoder.go:143 +0x10c
encoding/gob.(*Decoder).DecodeValue(0xc0000c1580, 0x82cac0, 0xc0000fb020, 0x16, 0x0, 0x0)
	/usr/local/go/src/encoding/gob/decoder.go:211 +0x10b
encoding/gob.(*Decoder).Decode(0xc0000c1580, 0x82cac0, 0xc0000fb020, 0x0, 0x0)
	/usr/local/go/src/encoding/gob/decoder.go:188 +0x16d
net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0000fac30, 0xc0000fb020, 0xc003929320, 0x0)
	/usr/local/go/src/net/rpc/client.go:228 +0x45
net/rpc.(*Client).input(0xc000057c20)
	/usr/local/go/src/net/rpc/client.go:109 +0xa5
created by net/rpc.NewClientWithCodec
	/usr/local/go/src/net/rpc/client.go:206 +0x89

goroutine 7 [syscall]:
os/signal.signal_recv(0x0)
	/usr/local/go/src/runtime/sigqueue.go:147 +0x9c
os/signal.loop()
	/usr/local/go/src/os/signal/signal_unix.go:23 +0x22
created by os/signal.init.0
	/usr/local/go/src/os/signal/signal_unix.go:29 +0x41

goroutine 15 [chan receive]:
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc00006a5a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xb6
created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f

goroutine 16 [chan receive]:
main.main.func1(0xc00006a5a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x5b0

goroutine 24 [IO wait]:
internal/poll.runtime_pollWait(0x220aa5df8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc0038fbe78, 0x72, 0x1, 0xc, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0038fbe60, 0xc003996120, 0xc, 0xc, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc001f124c8, 0xc003996120, 0xc, 0xc, 0xc002d5b9d8, 0x40c698, 0x10)
	/usr/local/go/src/os/file.go:116 +0x71
io.ReadAtLeast(0x99d2e0, 0xc001f124c8, 0xc003996120, 0xc, 0xc, 0xc, 0x0, 0x1fe458, 0x1fe458)
	/usr/local/go/src/io/io.go:310 +0x87
io.ReadFull(...)
	/usr/local/go/src/io/io.go:329
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc0011b7180, 0xc0000229c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x8, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:748 +0x282
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0000922d0, 0xc0000229c0, 0xc002e1e640, 0x0, 0xc000040380, 0x2e0462008, 0x0, 0xc002274340, 0xc002274440, 0xc002274540)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x108
main.(*Proc).executeRaw(0xc003b10400, 0xc0000229c0, 0xc002e1e640, 0x1, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x20c
main.(*Proc).execute(0xc003b10400, 0xc0000229c0, 0xc002e1e640, 0x0, 0x1, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x6a
main.(*Proc).loop(0xc003b10400)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x4de
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x114c

goroutine 25 [IO wait]:
internal/poll.runtime_pollWait(0x220aa5c58, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc0038fa0d8, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0038fa0c0, 0xc003d8a02a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc001f124b0, 0xc003d8a02a, 0x1ffd6, 0x1ffd6, 0x11, 0x0, 0x0)
	/usr/local/go/src/os/file.go:116 +0x71
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc001f124b0, 0xc0011b7180)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:594 +0xaf
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:588 +0x89f

goroutine 199 [select]:
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc0011b7180, 0xc0007b03c0, 0xc0007b0360)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0xba
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:731 +0x19c

goroutine 27 [IO wait]:
internal/poll.runtime_pollWait(0x220aa5d28, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc001e5d038, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc001e5d020, 0xc001c6a02a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc001f124f0, 0xc001c6a02a, 0x1ffd6, 0x1ffd6, 0x11, 0x0, 0x0)
	/usr/local/go/src/os/file.go:116 +0x71
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc001f124f0, 0xc0011b71f0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:594 +0xaf
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:588 +0x89f

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/01 01:20 openbsd f4ae6ec74ba8 a76bf83f .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.