syzbot


panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4)

Status: closed as invalid on 2020/01/26 09:58
Reported-by: syzbot+adeac1adb10d2a335617@syzkaller.appspotmail.com
First crash: 1763d, last: 1762d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1846d 1846d 0/3 closed as invalid on 2019/11/02 08:04
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8) 10 1611d 1682d 0/3 closed as invalid on 2020/08/04 06:37
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1749d 1749d 0/3 closed as invalid on 2020/02/09 09:06
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1725d 1725d 0/3 closed as invalid on 2020/03/03 08:16
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1817d 1817d 0/3 closed as invalid on 2019/12/02 08:42
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1868d 1868d 0/3 closed as invalid on 2019/10/26 08:48
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1756d 1756d 0/3 closed as invalid on 2020/02/01 08:31

Sample crash report:
	/usr/local/go/src/runtime/panic.go:774 +0x72 fp=0xc000151e48 sp=0xc000151e18 pc=0x42e9e2
runtime.findObject(0xc000daf100, 0xc002a62000, 0x36d8, 0x2c5831738, 0xc00002b270, 0x49)
	/usr/local/go/src/runtime/mbitmap.go:397 +0x3b4 fp=0xc000151e98 sp=0xc000151e48 pc=0x414514
runtime.scanobject(0xc002a62000, 0xc00002b270)
	/usr/local/go/src/runtime/mgcmark.go:1190 +0x235 fp=0xc000151f28 sp=0xc000151e98 pc=0x420115
runtime.gcDrainN(0xc00002b270, 0x10000, 0x0)
	/usr/local/go/src/runtime/mgcmark.go:1042 +0x12d fp=0xc000151f58 sp=0xc000151f28 pc=0x41fc5d
runtime.gcAssistAlloc1(0xc00014a600, 0x10000)
	/usr/local/go/src/runtime/mgcmark.go:512 +0xf2 fp=0xc000151fa8 sp=0xc000151f58 pc=0x41e7f2
runtime.gcAssistAlloc.func1()
	/usr/local/go/src/runtime/mgcmark.go:423 +0x33 fp=0xc000151fc8 sp=0xc000151fa8 pc=0x458813
runtime.systemstack(0x0)
	/usr/local/go/src/runtime/asm_amd64.s:370 +0x66 fp=0xc000151fd0 sp=0xc000151fc8 pc=0x45b596
runtime.mstart()
	/usr/local/go/src/runtime/proc.go:1146 fp=0xc000151fd8 sp=0xc000151fd0 pc=0x432f90

goroutine 23 [GC assist marking]:
runtime.systemstack_switch()
	/usr/local/go/src/runtime/asm_amd64.s:330 fp=0xc00014ced8 sp=0xc00014ced0 pc=0x45b520
runtime.gcAssistAlloc(0xc00014a600)
	/usr/local/go/src/runtime/mgcmark.go:422 +0x157 fp=0xc00014cf38 sp=0xc00014ced8 pc=0x41e587
runtime.mallocgc(0x20, 0x8a8320, 0x1, 0x0)
	/usr/local/go/src/runtime/malloc.go:926 +0x907 fp=0xc00014cfd8 sp=0xc00014cf38 pc=0x40c417
runtime.newobject(0x8a8320, 0xc002ce4dc0)
	/usr/local/go/src/runtime/malloc.go:1151 +0x38 fp=0xc00014d008 sp=0xc00014cfd8 pc=0x40c698
github.com/google/syzkaller/prog.foreachArgImpl(0x9a75c0, 0xc002ce4e00, 0xc002cdde70, 0xc002cdde00, 0x18, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:124 +0x3f fp=0xc00014d0f8 sp=0xc00014d008 pc=0x76bf7f
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7540, 0xc002cdde90, 0xc002cdde70, 0xc002cdde00, 0x10, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:136 +0x1c8 fp=0xc00014d1e8 sp=0xc00014d0f8 pc=0x76c108
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7540, 0xc002cdde60, 0xc002cddd80, 0xc002cdde00, 0x0, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:136 +0x1c8 fp=0xc00014d2d8 sp=0xc00014d1e8 pc=0x76c108
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7600, 0xc002cdfa00, 0xc002cddd80, 0xc002cdde00, 0x0, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:154 +0x40b fp=0xc00014d3c8 sp=0xc00014d2d8 pc=0x76c34b
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7540, 0xc002cdde30, 0xc002cddd80, 0xc002cdde00, 0x0, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:136 +0x1c8 fp=0xc00014d4b8 sp=0xc00014d3c8 pc=0x76c108
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7580, 0xc002cdde00, 0xc002cddd80, 0xc002cddd40, 0x20, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:151 +0x3a6 fp=0xc00014d5a8 sp=0xc00014d4b8 pc=0x76c2e6
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7540, 0xc002cddd70, 0x0, 0xc002cddd40, 0x0, 0x8a8300, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:136 +0x1c8 fp=0xc00014d698 sp=0xc00014d5a8 pc=0x76c108
github.com/google/syzkaller/prog.foreachArgImpl(0x9a7580, 0xc002cddd40, 0x0, 0x0, 0x0, 0x0, 0x91d2e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:151 +0x3a6 fp=0xc00014d788 sp=0xc00014d698 pc=0x76c2e6
github.com/google/syzkaller/prog.ForeachSubArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:110
github.com/google/syzkaller/prog.removeArg(0x9a7580, 0xc002cddd40)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:359 +0x57 fp=0xc00014d7d0 sp=0xc00014d788 pc=0x78b7e7
github.com/google/syzkaller/prog.(*Prog).removeCall(0xc002cd9880, 0x17)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x86 fp=0xc00014d840 sp=0xc00014d7d0 pc=0x78b886
github.com/google/syzkaller/prog.resourceCentric(0xca96e0, 0xc002b90550, 0xc002c47500, 0x1, 0x8a8620, 0xc00014daa0, 0x79069d)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:879 +0x34c fp=0xc00014d9a0 sp=0xc00014d840 pc=0x79370c
github.com/google/syzkaller/prog.(*ResourceType).generate(0xca96e0, 0xc002c47500, 0xc002b90550, 0x9a75c0, 0xc002c32b80, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:681 +0x920 fp=0xc00014db40 sp=0xc00014d9a0 pc=0x791310
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002c47500, 0xc002b90550, 0x9ae680, 0xca96e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:674 +0x506 fp=0xc00014dc18 sp=0xc00014db40 pc=0x790656
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:623
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002c47500, 0xc002b90550, 0xcb81a0, 0x5, 0x5, 0xc00014dd58, 0xbe6cd80c, 0x98d403d1a7b80c7b, 0xc00014dd90, 0x789e5e, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:611 +0x107 fp=0xc00014dcf8 sp=0xc00014dc18 pc=0x78fe37
github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc002c47500, 0xc002b90550, 0xce1ba0, 0x20, 0xc002b90550, 0xc001a8a840)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:555 +0xc6 fp=0xc00014dda0 sp=0xc00014dcf8 pc=0x78f336
github.com/google/syzkaller/prog.(*randGen).generateCall(0xc002c47500, 0xc002b90550, 0xc002c32840, 0x1, 0xc002c32840, 0xc002c32940, 0xc002b90550)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:547 +0xb2 fp=0xc00014dde0 sp=0xc00014dda0 pc=0x78f172
github.com/google/syzkaller/prog.(*mutator).insertCall(0xc00014dec0, 0x14)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:137 +0xf2 fp=0xc00014de48 sp=0xc00014dde0 pc=0x7841d2
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc002c32840, 0x9a1dc0, 0xc002778db0, 0x1e, 0xc00275ff00, 0xc002a62000, 0x1ebb, 0x2400)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:42 +0x29b fp=0xc00014df08 sp=0xc00014de48 pc=0x78366b
main.(*Proc).loop(0xc00275ff40)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:99 +0x434 fp=0xc00014dfd8 sp=0xc00014df08 pc=0x7ece44
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00014dfe0 sp=0xc00014dfd8 pc=0x45d471
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x114c

goroutine 1 [select]:
runtime.gopark(0x91dca0, 0x0, 0x1809, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc0004d7a10 sp=0xc0004d79f0 pc=0x430750
runtime.selectgo(0xc0004d7c08, 0xc0004d7bc0, 0x2, 0x214ded36e, 0xc000079b01)
	/usr/local/go/src/runtime/select.go:313 +0xc9b fp=0xc0004d7b38 sp=0xc0004d7a10 pc=0x44011b
main.(*Fuzzer).pollLoop(0xc0000d2f20)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:320 +0x127 fp=0xc0004d7c68 sp=0xc0004d7b38 pc=0x7ea7d7
main.main()
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:262 +0x12bd fp=0xc0004d7f60 sp=0xc0004d7c68 pc=0x7e9a7d
runtime.main()
	/usr/local/go/src/runtime/proc.go:203 +0x21e fp=0xc0004d7fe0 sp=0xc0004d7f60 pc=0x43037e
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc0004d7fe8 sp=0xc0004d7fe0 pc=0x45d471

goroutine 2 [force gc (idle)]:
runtime.gopark(0x91dc58, 0xd5b590, 0x1411, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00003cfb0 sp=0xc00003cf90 pc=0x430750
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:310
runtime.forcegchelper()
	/usr/local/go/src/runtime/proc.go:253 +0xb7 fp=0xc00003cfe0 sp=0xc00003cfb0 pc=0x430607
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003cfe8 sp=0xc00003cfe0 pc=0x45d471
created by runtime.init.5
	/usr/local/go/src/runtime/proc.go:242 +0x35

goroutine 3 [GC sweep wait]:
runtime.gopark(0x91dc58, 0xd5b720, 0x140c, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00003d7a8 sp=0xc00003d788 pc=0x430750
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:310
runtime.bgsweep(0xc000054000)
	/usr/local/go/src/runtime/mgcsweep.go:89 +0x131 fp=0xc00003d7d8 sp=0xc00003d7a8 pc=0x422121
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003d7e0 sp=0xc00003d7d8 pc=0x45d471
created by runtime.gcenable
	/usr/local/go/src/runtime/mgc.go:210 +0x5c

goroutine 4 [GC scavenge wait]:
runtime.gopark(0x91dc58, 0xd5bb80, 0x140d, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00003df40 sp=0xc00003df20 pc=0x430750
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:310
runtime.bgscavenge(0xc000054000)
	/usr/local/go/src/runtime/mgcscavenge.go:374 +0x3b3 fp=0xc00003dfd8 sp=0xc00003df40 pc=0x4219e3
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003dfe0 sp=0xc00003dfd8 pc=0x45d471
created by runtime.gcenable
	/usr/local/go/src/runtime/mgc.go:211 +0x7e

goroutine 5 [finalizer wait]:
runtime.gopark(0x91dc58, 0xd78b18, 0xc000021410, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00003c758 sp=0xc00003c738 pc=0x430750
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:310
runtime.runfinq()
	/usr/local/go/src/runtime/mfinal.go:175 +0xa3 fp=0xc00003c7e0 sp=0xc00003c758 pc=0x417f73
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003c7e8 sp=0xc00003c7e0 pc=0x45d471
created by runtime.createfing
	/usr/local/go/src/runtime/mfinal.go:156 +0x61

goroutine 19 [IO wait]:
runtime.gopark(0x91dc30, 0x2c5804ef0, 0xc000001b02, 0x5)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00014f8a8 sp=0xc00014f888 pc=0x430750
runtime.netpollblock(0x2c5804ec8, 0x72, 0xc000222000)
	/usr/local/go/src/runtime/netpoll.go:397 +0x9a fp=0xc00014f8e0 sp=0xc00014f8a8 pc=0x42b7ba
internal/poll.runtime_pollWait(0x2c5804ec8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55 fp=0xc00014f908 sp=0xc00014f8e0 pc=0x42ad85
internal/poll.(*pollDesc).wait(0xc0000c1518, 0x72, 0x1000, 0x1000, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 fp=0xc00014f938 sp=0xc00014f908 pc=0x4c0775
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0000c1500, 0xc000222000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf fp=0xc00014f9c8 sp=0xc00014f938 pc=0x4c16ef
net.(*netFD).Read(0xc0000c1500, 0xc000222000, 0x1000, 0x1000, 0x7c176a, 0xc00014fb40, 0x7c3bad)
	/usr/local/go/src/net/fd_unix.go:202 +0x4f fp=0xc00014fa28 sp=0xc00014f9c8 pc=0x5a543f
net.(*conn).Read(0xc00000f2f8, 0xc000222000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/usr/local/go/src/net/net.go:184 +0x68 fp=0xc00014fa88 sp=0xc00014fa28 pc=0x5b7e98
bufio.(*Reader).fill(0xc000057b00)
	/usr/local/go/src/bufio/bufio.go:100 +0x103 fp=0xc00014fad8 sp=0xc00014fa88 pc=0x555623
bufio.(*Reader).ReadByte(0xc000057b00, 0xc00014fc00, 0xc0000c1580, 0xc00000dce0)
	/usr/local/go/src/bufio/bufio.go:252 +0x39 fp=0xc00014faf8 sp=0xc00014fad8 pc=0x555ed9
compress/flate.(*decompressor).moreBits(0xc000125300, 0x91cc50, 0xc00014fb88)
	/usr/local/go/src/compress/flate/inflate.go:696 +0x37 fp=0xc00014fb38 sp=0xc00014faf8 pc=0x664ee7
compress/flate.(*decompressor).nextBlock(0xc000125300)
	/usr/local/go/src/compress/flate/inflate.go:303 +0x36 fp=0xc00014fb60 sp=0xc00014fb38 pc=0x6630e6
compress/flate.(*decompressor).Read(0xc000125300, 0xc00022e000, 0x1000, 0x1000, 0x892e40, 0xc0027b82d0, 0x199)
	/usr/local/go/src/compress/flate/inflate.go:347 +0x77 fp=0xc00014fb98 sp=0xc00014fb60 pc=0x663347
github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0000fab40, 0xc00022e000, 0x1000, 0x1000, 0x10, 0xc00014fb88, 0x200)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51 fp=0xc00014fbe0 sp=0xc00014fb98 pc=0x7e7461
bufio.(*Reader).Read(0xc000057b60, 0xc000020a60, 0x1, 0x9, 0x0, 0x0, 0xc00014fd70)
	/usr/local/go/src/bufio/bufio.go:226 +0x26a fp=0xc00014fc38 sp=0xc00014fbe0 pc=0x555cea
io.ReadAtLeast(0x99dd40, 0xc000057b60, 0xc000020a60, 0x1, 0x9, 0x1, 0x1, 0x0, 0x0)
	/usr/local/go/src/io/io.go:310 +0x87 fp=0xc00014fc98 sp=0xc00014fc38 pc=0x4a1e17
io.ReadFull(...)
	/usr/local/go/src/io/io.go:329
encoding/gob.decodeUintReader(0x99dd40, 0xc000057b60, 0xc000020a60, 0x9, 0x9, 0x4050d5, 0x43080c, 0xc00014fd48, 0x45a320)
	/usr/local/go/src/encoding/gob/decode.go:120 +0x6f fp=0xc00014fd08 sp=0xc00014fc98 pc=0x7c17ef
encoding/gob.(*Decoder).recvMessage(0xc0000c1580, 0x54)
	/usr/local/go/src/encoding/gob/decoder.go:81 +0x57 fp=0xc00014fd60 sp=0xc00014fd08 pc=0x7cbfb7
encoding/gob.(*Decoder).decodeTypeSequence(0xc0000c1580, 0xc000000100, 0xc00014fe10)
	/usr/local/go/src/encoding/gob/decoder.go:143 +0x10c fp=0xc00014fd80 sp=0xc00014fd60 pc=0x7cc50c
encoding/gob.(*Decoder).DecodeValue(0xc0000c1580, 0x82da20, 0xc0000fb020, 0x16, 0x0, 0x0)
	/usr/local/go/src/encoding/gob/decoder.go:211 +0x10b fp=0xc00014fdf8 sp=0xc00014fd80 pc=0x7cc84b
encoding/gob.(*Decoder).Decode(0xc0000c1580, 0x82da20, 0xc0000fb020, 0x30, 0x30)
	/usr/local/go/src/encoding/gob/decoder.go:188 +0x16d fp=0xc00014fe60 sp=0xc00014fdf8 pc=0x7cc69d
net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0000fac30, 0xc0000fb020, 0xc0027b82a0, 0x0)
	/usr/local/go/src/net/rpc/client.go:228 +0x45 fp=0xc00014fe98 sp=0xc00014fe60 pc=0x7e0895
net/rpc.(*Client).input(0xc000057c20)
	/usr/local/go/src/net/rpc/client.go:109 +0xa5 fp=0xc00014ffd8 sp=0xc00014fe98 pc=0x7dfb65
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00014ffe0 sp=0xc00014ffd8 pc=0x45d471
created by net/rpc.NewClientWithCodec
	/usr/local/go/src/net/rpc/client.go:206 +0x89

goroutine 7 [syscall]:
runtime.notetsleepg(0xd78f40, 0xffffffffffffffff, 0x0)
	/usr/local/go/src/runtime/lock_sema.go:286 +0x38 fp=0xc00003ef98 sp=0xc00003ef58 pc=0x40ac08
os/signal.signal_recv(0x0)
	/usr/local/go/src/runtime/sigqueue.go:147 +0x9c fp=0xc00003efc0 sp=0xc00003ef98 pc=0x444c1c
os/signal.loop()
	/usr/local/go/src/os/signal/signal_unix.go:23 +0x22 fp=0xc00003efe0 sp=0xc00003efc0 pc=0x75f002
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003efe8 sp=0xc00003efe0 pc=0x45d471
created by os/signal.init.0
	/usr/local/go/src/os/signal/signal_unix.go:29 +0x41

goroutine 9 [runnable]:
runtime.notetsleepg(0xd60300, 0x3b4b4274, 0x0)
	/usr/local/go/src/runtime/lock_sema.go:286 +0x38 fp=0xc00003f760 sp=0xc00003f720 pc=0x40ac08
runtime.timerproc(0xd602e0)
	/usr/local/go/src/runtime/time.go:311 +0x2f1 fp=0xc00003f7d8 sp=0xc00003f760 pc=0x44d2b1
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003f7e0 sp=0xc00003f7d8 pc=0x45d471
created by runtime.(*timersBucket).addtimerLocked
	/usr/local/go/src/runtime/time.go:169 +0x10e

goroutine 16 [chan receive]:
runtime.gopark(0x91dc58, 0xc00006a5f8, 0x170e, 0x3)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc000038ed8 sp=0xc000038eb8 pc=0x430750
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:310
runtime.chanrecv(0xc00006a5a0, 0x0, 0x1, 0x0)
	/usr/local/go/src/runtime/chan.go:524 +0x2e8 fp=0xc000038f68 sp=0xc000038ed8 pc=0x405768
runtime.chanrecv1(0xc00006a5a0, 0x0)
	/usr/local/go/src/runtime/chan.go:406 +0x2b fp=0xc000038f98 sp=0xc000038f68 pc=0x40542b
main.main.func1(0xc00006a5a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34 fp=0xc000038fd8 sp=0xc000038f98 pc=0x7f3104
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc000038fe0 sp=0xc000038fd8 pc=0x45d471
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x5b0

goroutine 15 [chan receive]:
runtime.gopark(0x91dc58, 0xc000057978, 0xc00003170e, 0x3)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc000038690 sp=0xc000038670 pc=0x430750
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:310
runtime.chanrecv(0xc000057920, 0x0, 0x75f001, 0xc000020a50)
	/usr/local/go/src/runtime/chan.go:524 +0x2e8 fp=0xc000038720 sp=0xc000038690 pc=0x405768
runtime.chanrecv1(0xc000057920, 0x0)
	/usr/local/go/src/runtime/chan.go:406 +0x2b fp=0xc000038750 sp=0xc000038720 pc=0x40542b
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc00006a5a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xb6 fp=0xc0000387d8 sp=0xc000038750 pc=0x7608a6
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc0000387e0 sp=0xc0000387d8 pc=0x45d471
created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f

goroutine 18 [select, locked to thread]:
runtime.gopark(0x91dca0, 0x0, 0x1809, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00003fde0 sp=0xc00003fdc0 pc=0x430750
runtime.selectgo(0xc00003ff80, 0xc00003ff40, 0x2, 0x0, 0xc000057601)
	/usr/local/go/src/runtime/select.go:313 +0xc9b fp=0xc00003ff08 sp=0xc00003fde0 pc=0x44011b
runtime.ensureSigM.func1()
	/usr/local/go/src/runtime/signal_unix.go:549 +0x1b7 fp=0xc00003ffe0 sp=0xc00003ff08 pc=0x45ae77
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003ffe8 sp=0xc00003ffe0 pc=0x45d471
created by runtime.ensureSigM
	/usr/local/go/src/runtime/signal_unix.go:532 +0xd5

goroutine 22 [GC worker (idle)]:
runtime.gopark(0x91daf8, 0xc00037a080, 0x1418, 0x0)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc000039760 sp=0xc000039740 pc=0x430750
runtime.gcBgMarkWorker(0xc00002a000)
	/usr/local/go/src/runtime/mgc.go:1846 +0xff fp=0xc0000397d8 sp=0xc000039760 pc=0x41b97f
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc0000397e0 sp=0xc0000397d8 pc=0x45d471
created by runtime.gcBgMarkStartWorkers
	/usr/local/go/src/runtime/mgc.go:1794 +0x77

goroutine 24 [IO wait]:
runtime.gopark(0x91dc30, 0x2c5804e20, 0xc000141b02, 0x5)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc0024537f8 sp=0xc0024537d8 pc=0x430750
runtime.netpollblock(0x2c5804df8, 0x72, 0xc0028b9240)
	/usr/local/go/src/runtime/netpoll.go:397 +0x9a fp=0xc002453830 sp=0xc0024537f8 pc=0x42b7ba
internal/poll.runtime_pollWait(0x2c5804df8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55 fp=0xc002453858 sp=0xc002453830 pc=0x42ad85
internal/poll.(*pollDesc).wait(0xc0027b8b58, 0x72, 0x1, 0xc, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 fp=0xc002453888 sp=0xc002453858 pc=0x4c0775
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0027b8b40, 0xc0028b9240, 0xc, 0xc, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf fp=0xc002453918 sp=0xc002453888 pc=0x4c16ef
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc0010594d8, 0xc0028b9240, 0xc, 0xc, 0xc0024539d8, 0x40c698, 0x10)
	/usr/local/go/src/os/file.go:116 +0x71 fp=0xc002453988 sp=0xc002453918 pc=0x4c8721
io.ReadAtLeast(0x99e4e0, 0xc0010594d8, 0xc0028b9240, 0xc, 0xc, 0xc, 0x0, 0x3ff4b8, 0x3ff4b8)
	/usr/local/go/src/io/io.go:310 +0x87 fp=0xc0024539e8 sp=0xc002453988 pc=0x4a1e17
io.ReadFull(...)
	/usr/local/go/src/io/io.go:329
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc000738af0, 0xc000022a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a75c0, 0x203000, 0x203000, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:748 +0x282 fp=0xc002453bb8 sp=0xc0024539e8 pc=0x7bbc62
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc000092360, 0xc000022a00, 0xc002b4eb80, 0xc002453ce8, 0x7b12e4, 0xc002453d40, 0x44500e, 0x413b6a, 0xc0027d79f8, 0xc002b4eb58)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x108 fp=0xc002453cb0 sp=0xc002453bb8 pc=0x7b82e8
main.(*Proc).executeRaw(0xc00275ff80, 0xc000022a00, 0xc002b4eb80, 0x1, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x20c fp=0xc002453dd8 sp=0xc002453cb0 pc=0x7ee78c
main.(*Proc).execute(0xc00275ff80, 0xc000022a00, 0xc002b4eb80, 0x0, 0x1, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x6a fp=0xc002453f08 sp=0xc002453dd8 pc=0x7ee0da
main.(*Proc).loop(0xc00275ff80)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x4de fp=0xc002453fd8 sp=0xc002453f08 pc=0x7eceee
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc002453fe0 sp=0xc002453fd8 pc=0x45d471
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x114c

goroutine 25 [IO wait]:
runtime.gopark(0x91dc30, 0x2c5804c80, 0xc000141b02, 0x5)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc002ff6dc0 sp=0xc002ff6da0 pc=0x430750
runtime.netpollblock(0x2c5804c58, 0x72, 0xc00302605d)
	/usr/local/go/src/runtime/netpoll.go:397 +0x9a fp=0xc002ff6df8 sp=0xc002ff6dc0 pc=0x42b7ba
internal/poll.runtime_pollWait(0x2c5804c58, 0x72, 0xffffffffffffffff)


OpenBSD/amd64 (ci-openbsd-main-1.c.syzkaller.internal) (tty00)

	/usr/local/go/src/runtime/netpoll.go:184 +0x55 fp=0xc002ff6e20 sp=0xc002ff6df8 pc=0x42ad85
internal/poll.(*pollDesc).wait(0xc0027b8a98, 0x72, 0x1ff01, 0x1ffa3, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 fp=0xc002ff6e50 sp=0xc002ff6e20 pc=0x4c0775
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0027b8a80, 0xc00302605d, 0x1ffa3, 0x1ffa3, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf fp=0xc002ff6ee0 sp=0xc002ff6e50 pc=0x4c16ef
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc0010594c8, 0xc00302605d, 0x1ffa3, 0x1ffa3, 0xc, 0x0, 0x0)
	/usr/local/go/src/os/file.go:116 +0x71 fp=0xc002ff6f50 sp=0xc002ff6ee0 pc=0x4c8721
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0010594c8, 0xc000738af0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:594 +0xaf fp=0xc002ff6fd0 sp=0xc002ff6f50 pc=0x7bc97f
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc002ff6fd8 sp=0xc002ff6fd0 pc=0x45d471
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:588 +0x89f

goroutine 154 [select]:
runtime.gopark(0x91dca0, 0x0, 0x1809, 0x1)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc002ff7608 sp=0xc002ff75e8 pc=0x430750
runtime.selectgo(0xc002ff7768, 0xc002ff7758, 0x2, 0x1, 0xc0027b8d00)
	/usr/local/go/src/runtime/select.go:313 +0xc9b fp=0xc002ff7730 sp=0xc002ff7608 pc=0x44011b
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc000738af0, 0xc000def680, 0xc000def620)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0xba fp=0xc002ff77c8 sp=0xc002ff7730 pc=0x7bcdaa
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc002ff77d0 sp=0xc002ff77c8 pc=0x45d471
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:731 +0x19c

goroutine 27 [IO wait]:
runtime.gopark(0x91dc30, 0x2c5804d50, 0xc000141b02, 0x5)
	/usr/local/go/src/runtime/proc.go:304 +0xe0 fp=0xc00003e5c0 sp=0xc00003e5a0 pc=0x430750
runtime.netpollblock(0x2c5804d28, 0x72, 0xc00304602a)
	/usr/local/go/src/runtime/netpoll.go:397 +0x9a fp=0xc00003e5f8 sp=0xc00003e5c0 pc=0x42b7ba
internal/poll.runtime_pollWait(0x2c5804d28, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55 fp=0xc00003e620 sp=0xc00003e5f8 pc=0x42ad85
internal/poll.(*pollDesc).wait(0xc0027b9ab8, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 fp=0xc00003e650 sp=0xc00003e620 pc=0x4c0775
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0027b9aa0, 0xc00304602a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf fp=0xc00003e6e0 sp=0xc00003e650 pc=0x4c16ef
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc001059878, 0xc00304602a, 0x1ffd6, 0x1ffd6, 0x2a, 0x0, 0x0)
	/usr/local/go/src/os/file.go:116 +0x71 fp=0xc00003e750 sp=0xc00003e6e0 pc=0x4c8721
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc001059878, 0xc000738bd0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:594 +0xaf fp=0xc00003e7d0 sp=0xc00003e750 pc=0x7bc97f
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00003e7d8 sp=0xc00003e7d0 pc=0x45d471
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:588 +0x89f
login: 

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/25 03:38 openbsd 8078e9e980e8 2e95ab33 .config console log report ci-openbsd-main
2020/01/24 13:53 openbsd 99ecd6d8896d 2e95ab33 .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.