Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. 2025/06/21 12:20:18 ignoring optional flag "sandboxArg"="0" 2025/06/21 12:20:19 parsed 1 programs [ 50.276413][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 50.276426][ T24] audit: type=1400 audit(1750508420.580:107): avc: denied { unlink } for pid=413 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.310429][ T413] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.000206][ T24] audit: type=1401 audit(1750508421.300:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 51.035576][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.081732][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.089340][ T437] device bridge_slave_0 entered promiscuous mode [ 51.142077][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.149139][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.158267][ T437] device bridge_slave_1 entered promiscuous mode [ 51.289736][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.296840][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.304169][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.311372][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.359409][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.375698][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.385517][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.405384][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.420882][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.444844][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.457361][ T437] device veth0_vlan entered promiscuous mode [ 51.464368][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.473161][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.481008][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.494806][ T437] device veth1_macvtap entered promiscuous mode [ 51.502848][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.515324][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.536188][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/06/21 12:20:21 executed programs: 0 [ 51.652132][ T24] audit: type=1400 audit(1750508421.960:109): avc: denied { write } for pid=404 comm="syz-execprog" path="pipe:[15229]" dev="pipefs" ino=15229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.809524][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.816911][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.824603][ T475] device bridge_slave_0 entered promiscuous mode [ 51.832176][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.839650][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.847747][ T475] device bridge_slave_1 entered promiscuous mode [ 51.919445][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.926721][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.934277][ T476] device bridge_slave_0 entered promiscuous mode [ 51.949673][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.956964][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.964527][ T479] device bridge_slave_0 entered promiscuous mode [ 51.971883][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.979289][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.986995][ T479] device bridge_slave_1 entered promiscuous mode [ 51.996206][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.003518][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.011196][ T476] device bridge_slave_1 entered promiscuous mode [ 52.059516][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.066752][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.074560][ T481] device bridge_slave_0 entered promiscuous mode [ 52.101986][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.109063][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.117134][ T481] device bridge_slave_1 entered promiscuous mode [ 52.139622][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.147231][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.155355][ T482] device bridge_slave_0 entered promiscuous mode [ 52.164837][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.172660][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.180325][ T482] device bridge_slave_1 entered promiscuous mode [ 52.304602][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.311831][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.319179][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.326473][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.343700][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.350787][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.358060][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.365243][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.380640][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.388171][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.396342][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.403849][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.412603][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.420117][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.451032][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.459438][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.468112][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.475586][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.483995][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.492696][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.501292][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.508319][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.515713][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.523738][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.533684][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.541367][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.578546][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.587271][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.594556][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.602823][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.611077][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.618288][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.642211][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.651221][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.659559][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.668025][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.676138][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.683950][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.691743][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.700233][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.707387][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.714787][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.723312][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.730432][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.738032][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.746727][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.753891][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.761652][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.779675][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.788002][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.796073][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.809700][ T475] device veth0_vlan entered promiscuous mode [ 52.825581][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.834560][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.843149][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.851573][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.858702][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.884172][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.896079][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.914794][ T482] device veth0_vlan entered promiscuous mode [ 52.923116][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.931611][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.939185][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.961983][ T475] device veth1_macvtap entered promiscuous mode [ 52.976391][ T476] device veth0_vlan entered promiscuous mode [ 52.983462][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.992008][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.000067][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.007966][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.015540][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.023973][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.032416][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.041316][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.049456][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.057052][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.064766][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.073549][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.082158][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.089180][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.096753][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.105170][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.113812][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.121972][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.130003][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.138215][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.146240][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.156576][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.165290][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.177403][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.185743][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.194408][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.203818][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.216480][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.224995][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.233479][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.241891][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.258470][ T476] device veth1_macvtap entered promiscuous mode [ 53.267201][ T481] device veth0_vlan entered promiscuous mode [ 53.284387][ T482] device veth1_macvtap entered promiscuous mode [ 53.296729][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.306937][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.315400][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.316259][ T512] ====================================================== [ 53.316259][ T512] WARNING: the mand mount option is being deprecated and [ 53.316259][ T512] will be removed in v5.15! [ 53.316259][ T512] ====================================================== [ 53.325446][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.358573][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.366582][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.374905][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.383398][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.391468][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.398931][ T512] EXT4-fs (loop0): Ignoring removed nobh option [ 53.399105][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.405405][ T512] EXT4-fs (loop0): Ignoring removed bh option [ 53.418925][ T512] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.425429][ T481] device veth1_macvtap entered promiscuous mode [ 53.444632][ T512] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 53.468774][ T24] audit: type=1400 audit(1750508423.770:110): avc: denied { mount } for pid=511 comm="syz.0.16" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.490959][ T24] audit: type=1400 audit(1750508423.770:111): avc: denied { read append } for pid=511 comm="syz.0.16" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.514574][ T24] audit: type=1400 audit(1750508423.770:112): avc: denied { open } for pid=511 comm="syz.0.16" path="/0/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.538072][ T24] audit: type=1400 audit(1750508423.770:113): avc: denied { write } for pid=511 comm="syz.0.16" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.540537][ T475] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 53.560262][ T24] audit: type=1400 audit(1750508423.770:114): avc: denied { add_name } for pid=511 comm="syz.0.16" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.576656][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.618774][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 158332011154560, count = 16 [ 53.627454][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.641129][ T24] audit: type=1400 audit(1750508423.770:115): avc: denied { create } for pid=511 comm="syz.0.16" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 53.649427][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.690740][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 158332011154037, count = 528 [ 53.714096][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.722559][ T24] audit: type=1400 audit(1750508423.770:116): avc: denied { remove_name } for pid=511 comm="syz.0.16" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.722893][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 158332011154032, count = 16 [ 53.776551][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.790114][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 255090980863328, count = 16 [ 53.799066][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.813285][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 255090980842856, count = 20483 [ 53.822054][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.837010][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 255090980842848, count = 16 [ 53.844695][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.858921][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 142425410521600, count = 16 [ 53.867518][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.882109][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 142425410503176, count = 18440 [ 53.905975][ T475] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 153141354039441, count = 905 [ 53.930207][ T479] device veth0_vlan entered promiscuous mode [ 53.943006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.953282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.967806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.980531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.989281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.998708][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.007535][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.016025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.028433][ T517] EXT4-fs (loop1): Ignoring removed nobh option [ 54.050014][ T479] device veth1_macvtap entered promiscuous mode [ 54.072509][ T517] EXT4-fs (loop1): Ignoring removed bh option [ 54.087459][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.109200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.118222][ T517] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.131602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.140115][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.155946][ T520] EXT4-fs (loop6): Ignoring removed nobh option [ 54.162645][ T523] EXT4-fs (loop4): Ignoring removed nobh option [ 54.169004][ T523] EXT4-fs (loop4): Ignoring removed bh option [ 54.175771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.184436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.193079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.208405][ T520] EXT4-fs (loop6): Ignoring removed bh option [ 54.215290][ T520] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.227615][ T523] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.241688][ T517] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 54.269867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.279018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.288491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.295118][ T523] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 54.298551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.330547][ T520] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 54.374073][ T476] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 54.396335][ T481] EXT4-fs error (device loop6): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 54.413944][ T482] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 54.430787][ T481] ================================================================== [ 54.438921][ T481] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x3a64/0x4910 [ 54.446916][ T481] Read of size 4 at addr ffff88811accbc18 by task syz-executor/481 [ 54.454898][ T481] [ 54.457262][ T481] CPU: 0 PID: 481 Comm: syz-executor Not tainted 5.10.238-syzkaller-1007479-gd76d4cd0623a #0 [ 54.467420][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.478123][ T481] Call Trace: [ 54.481565][ T481] __dump_stack+0x21/0x24 [ 54.486000][ T481] dump_stack_lvl+0x169/0x1d8 [ 54.490749][ T481] ? show_regs_print_info+0x18/0x18 [ 54.495988][ T481] ? thaw_kernel_threads+0x220/0x220 [ 54.501448][ T481] print_address_description+0x7f/0x2c0 [ 54.507141][ T481] ? ext4_ext_remove_space+0x3a64/0x4910 [ 54.512794][ T481] kasan_report+0xe2/0x130 [ 54.517238][ T481] ? __read_extent_tree_block+0x1e8/0x790 [ 54.523121][ T481] ? ext4_ext_remove_space+0x3a64/0x4910 [ 54.528777][ T481] __asan_report_load4_noabort+0x14/0x20 [ 54.534644][ T481] ext4_ext_remove_space+0x3a64/0x4910 [ 54.540123][ T481] ? __kasan_slab_free+0x11/0x20 [ 54.545081][ T481] ? slab_free_freelist_hook+0xc5/0x190 [ 54.550859][ T481] ? __es_remove_extent+0xdc5/0x16f0 [ 54.556169][ T481] ? _raw_write_lock+0x8e/0xe0 [ 54.560954][ T481] ? ext4_da_release_space+0x19f/0x410 [ 54.566452][ T481] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 54.572475][ T481] ext4_ext_truncate+0x169/0x1f0 [ 54.577580][ T481] ext4_truncate+0xaa1/0x11e0 [ 54.582289][ T481] ? __ext4_mark_inode_dirty+0x610/0x610 [ 54.587959][ T481] ext4_evict_inode+0xeeb/0x16e0 [ 54.592919][ T481] ? _raw_spin_unlock+0x4d/0x70 [ 54.597879][ T481] ? ext4_inode_is_fast_symlink+0x340/0x340 [ 54.603892][ T481] ? inode_io_list_del_locked+0x1b3/0x210 [ 54.609720][ T481] ? _raw_spin_unlock+0x4d/0x70 [ 54.614587][ T481] ? ext4_inode_is_fast_symlink+0x340/0x340 [ 54.620495][ T481] evict+0x478/0x910 [ 54.624409][ T481] ? mode_strip_sgid+0x160/0x160 [ 54.629670][ T481] ? _raw_spin_lock+0x8e/0xe0 [ 54.634370][ T481] ? _raw_spin_trylock_bh+0x130/0x130 [ 54.639863][ T481] ? iput+0x291/0x7c0 [ 54.644074][ T481] ? __kasan_check_write+0x14/0x20 [ 54.649306][ T481] iput+0x638/0x7c0 [ 54.653130][ T481] do_unlinkat+0x33f/0x670 [ 54.657686][ T481] ? __check_object_size+0x2f4/0x3c0 [ 54.663073][ T481] ? fsnotify_link_count+0x90/0x90 [ 54.668308][ T481] ? getname_flags+0x206/0x500 [ 54.673239][ T481] __x64_sys_unlink+0x49/0x50 [ 54.678145][ T481] do_syscall_64+0x31/0x40 [ 54.682674][ T481] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.688796][ T481] RIP: 0033:0x7f91450c0f17 [ 54.693432][ T481] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.713333][ T481] RSP: 002b:00007ffecdc52b38 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 54.721950][ T481] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91450c0f17 [ 54.730135][ T481] RDX: 00007ffecdc52b60 RSI: 00007ffecdc52bf0 RDI: 00007ffecdc52bf0 [ 54.738219][ T481] RBP: 00007ffecdc52bf0 R08: 0000000000000000 R09: 0000000000000000 [ 54.746212][ T481] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffecdc53ce0 [ 54.754210][ T481] R13: 00007f914514389d R14: 000000000000d31a R15: 00007ffecdc54db0 [ 54.762382][ T481] [ 54.764724][ T481] Allocated by task 94: [ 54.768897][ T481] __kasan_slab_alloc+0xbd/0xf0 [ 54.773761][ T481] slab_post_alloc_hook+0x5d/0x2f0 [ 54.778895][ T481] kmem_cache_alloc+0x165/0x2e0 [ 54.783768][ T481] getname_flags+0xb9/0x500 [ 54.788436][ T481] __x64_sys_unlink+0x3c/0x50 [ 54.793240][ T481] do_syscall_64+0x31/0x40 [ 54.797779][ T481] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.803678][ T481] [ 54.806105][ T481] Freed by task 94: [ 54.809925][ T481] kasan_set_track+0x4a/0x70 [ 54.814527][ T481] kasan_set_free_info+0x23/0x40 [ 54.819661][ T481] ____kasan_slab_free+0x125/0x160 [ 54.824963][ T481] __kasan_slab_free+0x11/0x20 [ 54.829831][ T481] slab_free_freelist_hook+0xc5/0x190 [ 54.835478][ T481] kmem_cache_free+0x100/0x2d0 [ 54.840440][ T481] do_unlinkat+0x5e4/0x670 [ 54.844876][ T481] __x64_sys_unlink+0x49/0x50 [ 54.849664][ T481] do_syscall_64+0x31/0x40 [ 54.854098][ T481] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.860006][ T481] [ 54.862353][ T481] The buggy address belongs to the object at ffff88811accb300 [ 54.862353][ T481] which belongs to the cache names_cache of size 4096 [ 54.876836][ T481] The buggy address is located 2328 bytes inside of [ 54.876836][ T481] 4096-byte region [ffff88811accb300, ffff88811accc300) [ 54.890655][ T481] The buggy address belongs to the page: [ 54.896857][ T481] page:ffffea00046b3200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11acc8 [ 54.907236][ T481] head:ffffea00046b3200 order:3 compound_mapcount:0 compound_pincount:0 [ 54.915736][ T481] flags: 0x4000000000010200(slab|head) [ 54.921221][ T481] raw: 4000000000010200 0000000000000000 0000000100000001 ffff88810018bc80 [ 54.929836][ T481] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 54.938571][ T481] page dumped because: kasan: bad access detected [ 54.945307][ T481] page_owner tracks the page as allocated [ 54.951462][ T481] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 168, ts 7450851468, free_ts 0 [ 54.969706][ T481] prep_new_page+0x179/0x180 [ 54.974320][ T481] get_page_from_freelist+0x2235/0x23d0 [ 54.979889][ T481] __alloc_pages_nodemask+0x268/0x5f0 [ 54.985459][ T481] new_slab+0x84/0x3f0 [ 54.989641][ T481] ___slab_alloc+0x2a6/0x450 [ 54.994256][ T481] __slab_alloc+0x63/0xa0 [ 54.998602][ T481] kmem_cache_alloc+0x1af/0x2e0 [ 55.003466][ T481] getname_flags+0xb9/0x500 [ 55.008071][ T481] user_path_at_empty+0x2f/0x50 [ 55.013152][ T481] do_faccessat+0x3cf/0x9e0 [ 55.017680][ T481] __x64_sys_access+0x61/0x70 [ 55.022367][ T481] do_syscall_64+0x31/0x40 [ 55.027124][ T481] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.033383][ T481] page_owner free stack trace missing [ 55.038849][ T481] [ 55.041235][ T481] Memory state around the buggy address: [ 55.047189][ T481] ffff88811accbb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.055263][ T481] ffff88811accbb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.063342][ T481] >ffff88811accbc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.071443][ T481] ^ SIGILL: illegal instruction PC=0xf42149 m=6 sigcode=2 instruction bytes: 0xff 0xff 0x49 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0xcc 0xcc 0xcc 0xcc 0x0 goroutine 24 gp=0xc002dccfc0 m=6 mp=0xc002d8f508 [running]: github.com/google/syzkaller/prog.(*DataArg).Type(0x21f0b60?) :1 +0xe9 fp=0xc003187520 sp=0xc0031874e8 pc=0xf42149 github.com/google/syzkaller/prog.(*PointerArg).serialize(0xc0030c2360, 0xc002dca480) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encoding.go:139 +0x12b fp=0xc0031875b0 sp=0xc003187520 pc=0xf0a32b github.com/google/syzkaller/prog.(*serializer).arg(0x21ce420?, {0x21f0ae0?, 0xc0030c2360?}) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encoding.go:125 +0x29 fp=0xc0031875f8 sp=0xc0031875b0 pc=0xf0a109 github.com/google/syzkaller/prog.(*serializer).call(0xc002dca480, 0xc00241b810) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encoding.go:86 +0x216 fp=0xc0031876c8 sp=0xc0031875f8 pc=0xf09bf6 github.com/google/syzkaller/prog.(*Prog).serialize(0xc001380500, 0x0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encoding.go:46 +0xd8 fp=0xc003187718 sp=0xc0031876c8 pc=0xf09958 github.com/google/syzkaller/prog.(*Prog).Serialize(...) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encoding.go:30 github.com/google/syzkaller/pkg/rpcserver.(*Runner).handleExecutingMessage(0xc0025db440, 0xc002dbf3c8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/runner.go:376 +0x217 fp=0xc0031877e8 sp=0xc003187718 pc=0x1210a37 github.com/google/syzkaller/pkg/rpcserver.(*Runner).ConnectionLoop(0xc0025db440) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/runner.go:203 +0x49a fp=0xc0031879d0 sp=0xc0031877e8 pc=0x120f9fa github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop(0xc002fbaea0, {0x21eda20?, 0xc00241bd60?}, 0xc0025db440) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:437 +0x196 fp=0xc003187b08 sp=0xc0031879d0 pc=0x120cd16 github.com/google/syzkaller/pkg/rpcserver.(*server).handleRunnerConn(0xc002fbaea0, {0x21eda20, 0xc00241bd60}, 0xc0025db440, 0xc00241bdb0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:360 +0x56a fp=0xc003187d50 sp=0xc003187b08 pc=0x120c2ca github.com/google/syzkaller/pkg/rpcserver.(*server).handleConn(0xc002fbaea0, {0x21eda20, 0xc00241bd60}, 0xc00241bdb0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:322 +0x2ab fp=0xc003187e88 sp=0xc003187d50 pc=0x120ba0b github.com/google/syzkaller/pkg/rpcserver.(*server).Serve.func1.1({0x21eda20?, 0xc00241bd60?}, 0x10?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:242 +0x31 fp=0xc003187ef8 sp=0xc003187e88 pc=0x120b671 github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:78 +0x198 fp=0xc003187f78 sp=0xc003187ef8 pc=0xf549f8 golang.org/x/sync/errgroup.(*Group).Go.func1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:79 +0x50 fp=0xc003187fe0 sp=0xc003187f78 pc=0xf53850 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc003187fe8 sp=0xc003187fe0 pc=0x47a2a1 created by golang.org/x/sync/errgroup.(*Group).Go in goroutine 14 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:76 +0x96 goroutine 1 gp=0xc0000061c0 m=nil [semacquire]: runtime.gopark(0xc002fd54d0?, 0x2ed8a80?, 0x80?, 0x10?, 0x46cefd?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc0030f8c38 sp=0xc0030f8c18 pc=0x47226e runtime.goparkunlock(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:430 runtime.semacquire1(0xc0013a6950, 0x0, 0x1, 0x0, 0x12) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/sema.go:178 +0x225 fp=0xc0030f8ca0 sp=0xc0030f8c38 pc=0x4508a5 sync.runtime_Semacquire(0xc00381a648?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/sema.go:71 +0x25 fp=0xc0030f8cd8 sp=0xc0030f8ca0 pc=0x473625 sync.(*WaitGroup).Wait(0x146d3a0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/sync/waitgroup.go:118 +0x48 fp=0xc0030f8d00 sp=0xc0030f8cd8 pc=0x488b08 golang.org/x/sync/errgroup.(*Group).Wait(0xc0013a6940) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:56 +0x25 fp=0xc0030f8d20 sp=0xc0030f8d00 pc=0xf536e5 github.com/google/syzkaller/pkg/rpcserver.RunLocal({0x21eda20?, 0xc00241bb30?}, 0x21c0f50?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:54 +0x192 fp=0xc0030f8da8 sp=0xc0030f8d20 pc=0x1209592 main.main() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:186 +0x90f fp=0xc0030f8f50 sp=0xc0030f8da8 pc=0x12163cf runtime.main() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:272 +0x28b fp=0xc0030f8fe0 sp=0xc0030f8f50 pc=0x43d72b runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0030f8fe8 sp=0xc0030f8fe0 pc=0x47a2a1 goroutine 2 gp=0xc000006700 m=nil [force gc (idle)]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000078fa8 sp=0xc000078f88 pc=0x47226e runtime.goparkunlock(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:430 runtime.forcegchelper() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:337 +0xb3 fp=0xc000078fe0 sp=0xc000078fa8 pc=0x43da73 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000078fe8 sp=0xc000078fe0 pc=0x47a2a1 created by runtime.init.7 in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:325 +0x1a goroutine 17 gp=0xc0000a8000 m=nil [GC sweep wait]: runtime.gopark(0x1?, 0x0?, 0x0?, 0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000074780 sp=0xc000074760 pc=0x47226e runtime.goparkunlock(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:430 runtime.bgsweep(0xc0000a4000) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgcsweep.go:317 +0xdf fp=0xc0000747c8 sp=0xc000074780 pc=0x426b9f runtime.gcenable.gowrap1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:204 +0x25 fp=0xc0000747e0 sp=0xc0000747c8 pc=0x41b265 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0000747e8 sp=0xc0000747e0 pc=0x47a2a1 created by runtime.gcenable in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:204 +0x66 goroutine 18 gp=0xc0000a81c0 m=nil [GC scavenge wait]: runtime.gopark(0xa268e3?, 0x3fb87830?, 0x0?, 0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000074f78 sp=0xc000074f58 pc=0x47226e runtime.goparkunlock(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:430 runtime.(*scavengerState).park(0x3029480) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgcscavenge.go:425 +0x49 fp=0xc000074fa8 sp=0xc000074f78 pc=0x424589 runtime.bgscavenge(0xc0000a4000) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgcscavenge.go:658 +0x59 fp=0xc000074fc8 sp=0xc000074fa8 pc=0x424b19 runtime.gcenable.gowrap2() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:205 +0x25 fp=0xc000074fe0 sp=0xc000074fc8 pc=0x41b205 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000074fe8 sp=0xc000074fe0 pc=0x47a2a1 created by runtime.gcenable in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:205 +0xa5 goroutine 3 gp=0xc000006fc0 m=nil [finalizer wait]: runtime.gopark(0x490013?, 0xc000078660?, 0xfe?, 0x6?, 0x7ff0232b2cc8?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000078620 sp=0xc000078600 pc=0x47226e runtime.runfinq() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mfinal.go:193 +0x107 fp=0xc0000787e0 sp=0xc000078620 pc=0x41a2e7 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0000787e8 sp=0xc0000787e0 pc=0x47a2a1 created by runtime.createfing in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mfinal.go:163 +0x3d goroutine 19 gp=0xc0000a88c0 m=nil [GC worker (idle)]: runtime.gopark(0xc04ce7fb6?, 0x3?, 0x1d?, 0x5a?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000075738 sp=0xc000075718 pc=0x47226e runtime.gcBgMarkWorker(0xc000438000) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1412 +0xe9 fp=0xc0000757c8 sp=0xc000075738 pc=0x41d5a9 runtime.gcBgMarkStartWorkers.gowrap1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1328 +0x25 fp=0xc0000757e0 sp=0xc0000757c8 pc=0x41d485 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0000757e8 sp=0xc0000757e0 pc=0x47a2a1 created by runtime.gcBgMarkStartWorkers in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1328 +0x105 goroutine 4 gp=0xc000007180 m=nil [GC worker (idle)]: runtime.gopark(0xc04cca99f?, 0x3?, 0xca?, 0x1d?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000079738 sp=0xc000079718 pc=0x47226e runtime.gcBgMarkWorker(0xc000438000) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1412 +0xe9 fp=0xc0000797c8 sp=0xc000079738 pc=0x41d5a9 runtime.gcBgMarkStartWorkers.gowrap1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1328 +0x25 fp=0xc0000797e0 sp=0xc0000797c8 pc=0x41d485 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0000797e8 sp=0xc0000797e0 pc=0x47a2a1 created by runtime.gcBgMarkStartWorkers in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1328 +0x105 goroutine 5 gp=0xc000007a40 m=nil [select]: runtime.gopark(0xc00007af78?, 0x3?, 0x90?, 0x0?, 0xc00007af72?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc00044de10 sp=0xc00044ddf0 pc=0x47226e runtime.selectgo(0xc00044df78, 0xc00007af6c, 0xc0000d8a80?, 0x0, 0x0?, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/select.go:335 +0x7a5 fp=0xc00044df38 sp=0xc00044de10 pc=0x44f805 go.opencensus.io/stats/view.(*worker).start(0xc0000d8a80) /syzkaller/jobs-2/linux/gopath/pkg/mod/go.opencensus.io@v0.24.0/stats/view/worker.go:292 +0x9f fp=0xc00044dfc8 sp=0xc00044df38 pc=0x103241f go.opencensus.io/stats/view.init.0.gowrap1() /syzkaller/jobs-2/linux/gopath/pkg/mod/go.opencensus.io@v0.24.0/stats/view/worker.go:34 +0x25 fp=0xc00044dfe0 sp=0xc00044dfc8 pc=0x1031785 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00044dfe8 sp=0xc00044dfe0 pc=0x47a2a1 created by go.opencensus.io/stats/view.init.0 in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/go.opencensus.io@v0.24.0/stats/view/worker.go:34 +0x8d goroutine 6 gp=0xc000007c00 m=nil [chan receive]: runtime.gopark(0xc00007b760?, 0x640305?, 0x40?, 0x6b?, 0x22118c0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc00007b718 sp=0xc00007b6f8 pc=0x47226e runtime.chanrecv(0xc0001001c0, 0x0, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:639 +0x41c fp=0xc00007b790 sp=0xc00007b718 pc=0x409f1c runtime.chanrecv1(0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:489 +0x12 fp=0xc00007b7b8 sp=0xc00007b790 pc=0x409ad2 runtime.unique_runtime_registerUniqueMapCleanup.func1(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1781 runtime.unique_runtime_registerUniqueMapCleanup.gowrap1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1784 +0x2f fp=0xc00007b7e0 sp=0xc00007b7b8 pc=0x41e28f runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00007b7e8 sp=0xc00007b7e0 pc=0x47a2a1 created by unique.runtime_registerUniqueMapCleanup in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/mgc.go:1779 +0x96 goroutine 8 gp=0xc0000a9500 m=nil [chan receive]: runtime.gopark(0xc0001210e0?, 0xc0030df080?, 0xb8?, 0xa5?, 0xef2040?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc00007a6f8 sp=0xc00007a6d8 pc=0x47226e runtime.chanrecv(0xc000232850, 0xc00007a7b8, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:639 +0x41c fp=0xc00007a770 sp=0xc00007a6f8 pc=0x409f1c runtime.chanrecv2(0xc000278370?, 0xc00029e008?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:494 +0x12 fp=0xc00007a798 sp=0xc00007a770 pc=0x409af2 github.com/google/syzkaller/pkg/stat.newSet.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/stat/set.go:95 +0x66 fp=0xc00007a7e0 sp=0xc00007a798 pc=0xef0b46 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00007a7e8 sp=0xc00007a7e0 pc=0x47a2a1 created by github.com/google/syzkaller/pkg/stat.newSet in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/stat/set.go:94 +0xd6 goroutine 10 gp=0xc0030e0000 m=nil [chan receive]: runtime.gopark(0xecc1c5?, 0x13faa80?, 0x1?, 0xa2?, 0xc00044ef58?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc00044eec8 sp=0xc00044eea8 pc=0x47226e runtime.chanrecv(0xc00080c4d0, 0x0, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:639 +0x41c fp=0xc00044ef40 sp=0xc00044eec8 pc=0x409f1c runtime.chanrecv1(0xc00080c4d0?, 0xc000079fb0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:489 +0x12 fp=0xc00044ef68 sp=0xc00044ef40 pc=0x409ad2 github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:77 +0x78 fp=0xc00044efe0 sp=0xc00044ef68 pc=0xecdff8 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00044efe8 sp=0xc00044efe0 pc=0x47a2a1 created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0x4f goroutine 11 gp=0xc0030e01c0 m=nil [select]: runtime.gopark(0xc00007bfb0?, 0x2?, 0x0?, 0x0?, 0xc00007bf9c?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc00007be40 sp=0xc00007be20 pc=0x47226e runtime.selectgo(0xc00007bfb0, 0xc00007bf98, 0x0?, 0x0, 0x0?, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/select.go:335 +0x7a5 fp=0xc00007bf68 sp=0xc00007be40 pc=0x44f805 github.com/google/syzkaller/pkg/rpcserver.cancelOnInterrupts.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:90 +0x67 fp=0xc00007bfe0 sp=0xc00007bf68 pc=0x1209ae7 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00007bfe8 sp=0xc00007bfe0 pc=0x47a2a1 created by github.com/google/syzkaller/pkg/rpcserver.cancelOnInterrupts in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:89 +0xb8 goroutine 12 gp=0xc0030e0380 m=nil [select]: runtime.gopark(0xc0030fbe40?, 0x2?, 0x0?, 0x0?, 0xc0030fbdd4?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc0030fbc68 sp=0xc0030fbc48 pc=0x47226e runtime.selectgo(0xc0030fbe40, 0xc0030fbdd0, 0x7ffd5b1dfe7a?, 0x0, 0xc0030fbea0?, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/select.go:335 +0x7a5 fp=0xc0030fbd90 sp=0xc0030fbc68 pc=0x44f805 github.com/google/syzkaller/pkg/rpcserver.(*local).RunInstance(0xc003083980, {0x21eda20, 0xc00241bc20}, 0x0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:160 +0x5cc fp=0xc0030fbf48 sp=0xc0030fbd90 pc=0x120a2ec github.com/google/syzkaller/pkg/rpcserver.RunLocal.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:49 +0x25 fp=0xc0030fbf78 sp=0xc0030fbf48 pc=0x1209685 golang.org/x/sync/errgroup.(*Group).Go.func1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:79 +0x50 fp=0xc0030fbfe0 sp=0xc0030fbf78 pc=0xf53850 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0030fbfe8 sp=0xc0030fbfe0 pc=0x47a2a1 created by golang.org/x/sync/errgroup.(*Group).Go in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:76 +0x96 goroutine 21 gp=0xc002dcc000 m=nil [select, locked to thread]: runtime.gopark(0xc002dd27a8?, 0x2?, 0xa8?, 0x26?, 0xc002dd2794?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc002dd2630 sp=0xc002dd2610 pc=0x47226e runtime.selectgo(0xc002dd27a8, 0xc002dd2790, 0x0?, 0x0, 0x839f9022?, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/select.go:335 +0x7a5 fp=0xc002dd2758 sp=0xc002dd2630 pc=0x44f805 runtime.ensureSigM.func1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/signal_unix.go:1077 +0x19f fp=0xc002dd27e0 sp=0xc002dd2758 pc=0x469b1f runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc002dd27e8 sp=0xc002dd27e0 pc=0x47a2a1 created by runtime.ensureSigM in goroutine 10 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/signal_unix.go:1060 +0xc8 goroutine 13 gp=0xc0030e0540 m=nil [semacquire]: runtime.gopark(0xc002fd5560?, 0x2ed8af0?, 0x40?, 0xc5?, 0x46cefd?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000076628 sp=0xc000076608 pc=0x47226e runtime.goparkunlock(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:430 runtime.semacquire1(0xc0013a6990, 0x0, 0x1, 0x0, 0x12) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/sema.go:178 +0x225 fp=0xc000076690 sp=0xc000076628 pc=0x4508a5 sync.runtime_Semacquire(0xc00381a678?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/sema.go:71 +0x25 fp=0xc0000766c8 sp=0xc000076690 pc=0x473625 sync.(*WaitGroup).Wait(0x146d580?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/sync/waitgroup.go:118 +0x48 fp=0xc0000766f0 sp=0xc0000766c8 pc=0x488b08 golang.org/x/sync/errgroup.(*Group).Wait(0xc0013a6980) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:56 +0x25 fp=0xc000076710 sp=0xc0000766f0 pc=0xf536e5 github.com/google/syzkaller/pkg/rpcserver.(*server).Serve(0xc002fbaea0, {0x21eda20?, 0xc00241bc20?}) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:261 +0x137 fp=0xc000076750 sp=0xc000076710 pc=0x120b497 github.com/google/syzkaller/pkg/rpcserver.RunLocal.func2() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:52 +0x28 fp=0xc000076778 sp=0xc000076750 pc=0x1209648 golang.org/x/sync/errgroup.(*Group).Go.func1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:79 +0x50 fp=0xc0000767e0 sp=0xc000076778 pc=0xf53850 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0000767e8 sp=0xc0000767e0 pc=0x47a2a1 created by golang.org/x/sync/errgroup.(*Group).Go in goroutine 1 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:76 +0x96 goroutine 14 gp=0xc0030e0700 m=nil [IO wait]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc00044fc18 sp=0xc00044fbf8 pc=0x47226e runtime.netpollblock(0xc00044fc68?, 0x408246?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/netpoll.go:575 +0xf7 fp=0xc00044fc50 sp=0xc00044fc18 pc=0x436177 internal/poll.runtime_pollWait(0x7fefdc81c680, 0x72) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/netpoll.go:351 +0x85 fp=0xc00044fc70 sp=0xc00044fc50 pc=0x471565 internal/poll.(*pollDesc).wait(0xc001fbfb00?, 0x900000036?, 0x0) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/internal/poll/fd_poll_runtime.go:84 +0x27 fp=0xc00044fc98 sp=0xc00044fc70 pc=0x4f9167 internal/poll.(*pollDesc).waitRead(...) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/internal/poll/fd_poll_runtime.go:89 internal/poll.(*FD).Accept(0xc001fbfb00) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/internal/poll/fd_unix.go:620 +0x295 fp=0xc00044fd40 sp=0xc00044fc98 pc=0x4fe535 net.(*netFD).accept(0xc001fbfb00) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/net/fd_unix.go:172 +0x29 fp=0xc00044fdf8 sp=0xc00044fd40 pc=0x65a309 net.(*TCPListener).accept(0xc0013a6900) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/net/tcpsock_posix.go:159 +0x1e fp=0xc00044fe48 sp=0xc00044fdf8 pc=0x670bbe net.(*TCPListener).Accept(0xc0013a6900) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/net/tcpsock.go:372 +0x30 fp=0xc00044fe78 sp=0xc00044fe48 pc=0x66fd90 github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve(0xc00381a618, {0x21eda20?, 0xc00241bc70?}, 0xc002dc3070) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:56 +0xfe fp=0xc00044ff30 sp=0xc00044fe78 pc=0xf5461e github.com/google/syzkaller/pkg/rpcserver.(*server).Serve.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:241 +0x79 fp=0xc00044ff78 sp=0xc00044ff30 pc=0x120b619 golang.org/x/sync/errgroup.(*Group).Go.func1() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:79 +0x50 fp=0xc00044ffe0 sp=0xc00044ff78 pc=0xf53850 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00044ffe8 sp=0xc00044ffe0 pc=0x47a2a1 created by golang.org/x/sync/errgroup.(*Group).Go in goroutine 13 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/x/sync@v0.13.0/errgroup/errgroup.go:76 +0x96 goroutine 22 gp=0xc002dcc540 m=4 mp=0xc000081c08 [syscall]: runtime.notetsleepg(0x304d660, 0xffffffffffffffff) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/lock_futex.go:246 +0x29 fp=0xc000079fa0 sp=0xc000079f78 pc=0x40f8c9 os/signal.signal_recv() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/sigqueue.go:152 +0x29 fp=0xc000079fc0 sp=0xc000079fa0 pc=0x474169 os/signal.loop() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/os/signal/signal_unix.go:23 +0x13 fp=0xc000079fe0 sp=0xc000079fc0 pc=0xecc5b3 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000079fe8 sp=0xc000079fe0 pc=0x47a2a1 created by os/signal.Notify.func1.1 in goroutine 10 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/os/signal/signal.go:151 +0x1f goroutine 23 gp=0xc002dcce00 m=nil [chan receive]: runtime.gopark(0x134f300?, 0x4dbd3f0f76cf7e7e?, 0xa8?, 0x2f?, 0x4ba619?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc002dd2f18 sp=0xc002dd2ef8 pc=0x47226e runtime.chanrecv(0xc002d6fd50, 0x0, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:639 +0x41c fp=0xc002dd2f90 sp=0xc002dd2f18 pc=0x409f1c runtime.chanrecv1(0xc0018e6eb0?, 0x634fc71b6156c3f5?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:489 +0x12 fp=0xc002dd2fb8 sp=0xc002dd2f90 pc=0x409ad2 github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:52 +0x2c fp=0xc002dd2fe0 sp=0xc002dd2fb8 pc=0xf54aec runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc002dd2fe8 sp=0xc002dd2fe0 pc=0x47a2a1 created by github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve in goroutine 14 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:50 +0xe8 goroutine 16 gp=0xc0030e0a80 m=nil [select]: runtime.gopark(0xc000075f38?, 0x2?, 0x0?, 0x0?, 0xc000075ec4?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000075d60 sp=0xc000075d40 pc=0x47226e runtime.selectgo(0xc000075f38, 0xc000075ec0, 0x0?, 0x1, 0x0?, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/select.go:335 +0x7a5 fp=0xc000075e88 sp=0xc000075d60 pc=0x44f805 os/exec.(*Cmd).watchCtx(0xc0025b5680, 0xc002ed8c40) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/os/exec/exec.go:773 +0xb5 fp=0xc000075fc0 sp=0xc000075e88 pc=0x98ef95 os/exec.(*Cmd).Start.gowrap2() /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/os/exec/exec.go:759 +0x25 fp=0xc000075fe0 sp=0xc000075fc0 pc=0x98ec45 runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000075fe8 sp=0xc000075fe0 pc=0x47a2a1 created by os/exec.(*Cmd).Start in goroutine 12 /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/os/exec/exec.go:759 +0x953 goroutine 33 gp=0xc0030e0c40 m=nil [chan receive]: runtime.gopark(0x134f300?, 0x0?, 0xa8?, 0x7f?, 0x4ba619?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc000077f18 sp=0xc000077ef8 pc=0x47226e runtime.chanrecv(0xc002d6fdc0, 0x0, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:639 +0x41c fp=0xc000077f90 sp=0xc000077f18 pc=0x409f1c runtime.chanrecv1(0xc00241bd60?, 0x0?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:489 +0x12 fp=0xc000077fb8 sp=0xc000077f90 pc=0x409ad2 github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2.1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:75 +0x2c fp=0xc000077fe0 sp=0xc000077fb8 pc=0xf54a8c runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000077fe8 sp=0xc000077fe0 pc=0x47a2a1 created by github.com/google/syzkaller/pkg/flatrpc.(*Serv).Serve.func2 in goroutine 24 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:74 +0x17c goroutine 34 gp=0xc002dcd180 m=nil [chan receive]: runtime.gopark(0x134f300?, 0xe9c707f1?, 0xa8?, 0x37?, 0x4ba619?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/proc.go:424 +0xce fp=0xc002dd3718 sp=0xc002dd36f8 pc=0x47226e runtime.chanrecv(0xc002d6e070, 0x0, 0x1) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:639 +0x41c fp=0xc002dd3790 sp=0xc002dd3718 pc=0x409f1c runtime.chanrecv1(0xc00241ab90?, 0xcb78cedc22d6192?) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/chan.go:489 +0x12 fp=0xc002dd37b8 sp=0xc002dd3790 pc=0x409ad2 github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:416 +0x2c fp=0xc002dd37e0 sp=0xc002dd37b8 pc=0x120cfcc runtime.goexit({}) /syzkaller/jobs-2/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.7.linux-amd64/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc002dd37e8 sp=0xc002dd37e0 pc=0x47a2a1 created by github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop in goroutine 24 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:415 +0xdd rax 0xc0030c2330 rbx 0xc0030c4630 rcx 0xf42060 rdx 0xc002dca480 rdi 0xc0023de3d5 rsi 0xc00318c000 rbp 0xc003187510 rsp 0xc0031874e8 r8 0x40 r9 0x15 r10 0xc002673110 r11 0x0 r12 0x3 r13 0xc0031874e8 r14 0xc002dccfc0 r15 0x1 rip 0xf42149 rflags 0x10202 cs 0x33 fs 0x0 gs 0x0 [ 55.076596][ T481] ffff88811accbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.085501][ T481] ffff88811accbd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.093692][ T481] ================================================================== [ 55.101855][ T481] Disabling lock debugging due to kernel taint [ 55.152358][ T532] EXT4-fs (loop5): Ignoring removed nobh option [ 55.160721][ T532] EXT4-fs (loop5): Ignoring removed bh option [ 55.166933][ T532] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.221743][ T532] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 55.292475][ T479] EXT4-fs error (device loop5): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 55.304778][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 55.304793][ T24] audit: type=1400 audit(1750508425.600:149): avc: denied { read } for pid=539 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.365736][ T24] audit: type=1400 audit(1750508425.620:150): avc: denied { open } for pid=538 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.751825][ T9] device bridge_slave_1 left promiscuous mode [ 55.758109][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.766187][ T9] device bridge_slave_0 left promiscuous mode [ 55.772833][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.782592][ T9] device veth1_macvtap left promiscuous mode [ 55.788721][ T9] device veth0_vlan left promiscuous mode [ 57.471708][ T9] device bridge_slave_1 left promiscuous mode [ 57.478462][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.485944][ T9] device bridge_slave_0 left promiscuous mode [ 57.492165][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.500400][ T9] device bridge_slave_1 left promiscuous mode [ 57.506931][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.515082][ T9] device bridge_slave_0 left promiscuous mode [ 57.521361][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.529120][ T9] device bridge_slave_1 left promiscuous mode [ 57.535506][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.543131][ T9] device bridge_slave_0 left promiscuous mode [ 57.549672][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.557689][ T9] device bridge_slave_1 left promiscuous mode [ 57.564076][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.571851][ T9] device bridge_slave_0 left promiscuous mode [ 57.578167][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.586358][ T9] device bridge_slave_1 left promiscuous mode [ 57.592892][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.601625][ T9] device bridge_slave_0 left promiscuous mode [ 57.607755][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.616745][ T9] device veth1_macvtap left promiscuous mode [ 57.623319][ T9] device veth0_vlan left promiscuous mode [ 57.630455][ T9] device veth1_macvtap left promiscuous mode [ 57.636820][ T9] device veth0_vlan left promiscuous mode [ 57.642755][ T9] device veth1_macvtap left promiscuous mode [ 57.648755][ T9] device veth0_vlan left promiscuous mode [ 57.654828][ T9] device veth1_macvtap left promiscuous mode [ 57.660884][ T9] device veth0_vlan left promiscuous mode [ 57.666710][ T9] device veth1_macvtap left promiscuous mode [ 57.673045][ T9] device veth0_vlan left promiscuous mode