Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. 2024/07/19 09:29:57 ignoring optional flag "sandboxArg"="0" 2024/07/19 09:29:57 parsed 1 programs 2024/07/19 09:29:57 executed programs: 0 [ 47.623912][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 47.623928][ T28] audit: type=1400 audit(1721381397.500:94): avc: denied { unlink } for pid=351 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.651322][ T351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.824160][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.831132][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.838554][ T365] device bridge_slave_0 entered promiscuous mode [ 47.845537][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.852506][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.860202][ T365] device bridge_slave_1 entered promiscuous mode [ 47.922124][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.929261][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.936840][ T367] device bridge_slave_0 entered promiscuous mode [ 47.953599][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.960464][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.967921][ T367] device bridge_slave_1 entered promiscuous mode [ 47.986993][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.993897][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.001215][ T369] device bridge_slave_0 entered promiscuous mode [ 48.021464][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.028350][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.035846][ T369] device bridge_slave_1 entered promiscuous mode [ 48.049721][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.056649][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.063943][ T366] device bridge_slave_0 entered promiscuous mode [ 48.079549][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.086617][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.094021][ T366] device bridge_slave_1 entered promiscuous mode [ 48.129715][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.136718][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.144058][ T368] device bridge_slave_0 entered promiscuous mode [ 48.161339][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.168407][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.175758][ T368] device bridge_slave_1 entered promiscuous mode [ 48.358385][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.365348][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.372434][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.379335][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.406521][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.413412][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.420495][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.427403][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.458601][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.465619][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.472767][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.479579][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.497345][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.504828][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.511820][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.519080][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.526088][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.534419][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.541445][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.554368][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.562577][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.569457][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.576811][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.585089][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.591919][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.621787][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.629170][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.636719][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.658423][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.667291][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.675686][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.682523][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.689911][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.697880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.706410][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.714434][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.721332][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.753744][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.761944][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.769750][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.777622][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.786086][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.794029][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.803771][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.838438][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.847907][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.856278][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.863964][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.871516][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.879853][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.886861][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.894060][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.902111][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.908976][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.916260][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.924347][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.931187][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.938481][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.946546][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.953567][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.960704][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.968750][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.976713][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.985137][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.991972][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.999676][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.008917][ T367] device veth0_vlan entered promiscuous mode [ 49.020536][ T365] device veth0_vlan entered promiscuous mode [ 49.033730][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.041620][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.049603][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.058157][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.065995][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.074152][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.082462][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.089317][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.096579][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.104604][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.112656][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.120133][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.135002][ T367] device veth1_macvtap entered promiscuous mode [ 49.145210][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.153646][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.161908][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.169716][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.178427][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.192934][ T365] device veth1_macvtap entered promiscuous mode [ 49.203943][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.212014][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.220293][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.239652][ T366] device veth0_vlan entered promiscuous mode [ 49.250799][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.259207][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.267556][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.275652][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.283593][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.291560][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.299733][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.308054][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.316752][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.324594][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.332431][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.340602][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.348127][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.355647][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.363106][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.375097][ T368] device veth0_vlan entered promiscuous mode [ 49.392502][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.400667][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.408931][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.417470][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.425611][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.434004][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.442092][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.457584][ T369] device veth0_vlan entered promiscuous mode [ 49.464976][ T366] device veth1_macvtap entered promiscuous mode [ 49.478269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.486944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.495414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.503921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.511662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.519951][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.527369][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.543571][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.551818][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.560478][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.564864][ T28] audit: type=1400 audit(1721381399.430:95): avc: denied { bpf } for pid=387 comm="syz-executor.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.580215][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.592546][ T28] audit: type=1400 audit(1721381399.460:96): avc: denied { map_create } for pid=387 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.618097][ T368] device veth1_macvtap entered promiscuous mode [ 49.624509][ T28] audit: type=1400 audit(1721381399.490:97): avc: denied { open } for pid=387 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.643924][ T28] audit: type=1400 audit(1721381399.490:98): avc: denied { perfmon } for pid=387 comm="syz-executor.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.667284][ T28] audit: type=1400 audit(1721381399.490:99): avc: denied { kernel } for pid=387 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.671444][ T369] device veth1_macvtap entered promiscuous mode [ 49.693225][ T28] audit: type=1400 audit(1721381399.490:100): avc: denied { prog_load } for pid=387 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.713499][ T28] audit: type=1400 audit(1721381399.490:101): avc: denied { map_read map_write } for pid=387 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.734151][ T28] audit: type=1400 audit(1721381399.490:102): avc: denied { prog_run } for pid=387 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.756271][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.764457][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.772633][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.780683][ T28] audit: type=1400 audit(1721381399.610:103): avc: denied { mounton } for pid=367 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.781223][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.812351][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.820717][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.868608][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.879402][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.888426][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.896621][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready unexpected fault address 0x0 fatal error: fault [signal SIGBUS: bus error code=0x80 addr=0x0 pc=0x5561eb] goroutine 10 [running]: runtime.throw({0xb04b18?, 0xc0014e4570?}) /usr/local/go/src/runtime/panic.go:1077 +0x5c fp=0xc0015a8e90 sp=0xc0015a8e60 pc=0x439ffc runtime.sigpanic() /usr/local/go/src/runtime/signal_unix.go:858 +0x116 fp=0xc0015a8ef0 sp=0xc0015a8e90 pc=0x450b96 github.com/google/syzkaller/prog.(*execContext).serializeCall.(*execContext).writeCopyin.func1({0xd9e9c0, 0xc0014dcf30}, 0xc00177f3b0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:167 +0x12b fp=0xc0015a8f40 sp=0xc0015a8ef0 pc=0x5561eb github.com/google/syzkaller/prog.foreachArgImpl({0xd9e9c0?, 0xc0014dcf30?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x224 fp=0xc0015a9110 sp=0xc0015a8f40 pc=0x544a64 github.com/google/syzkaller/prog.foreachArgImpl({0xd9eac0?, 0xc0014d7ea0?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce fp=0xc0015a92e0 sp=0xc0015a9110 pc=0x544d0e github.com/google/syzkaller/prog.foreachArgImpl({0xd9eac0?, 0xc0014d7ee0?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce fp=0xc0015a94b0 sp=0xc0015a92e0 pc=0x544d0e github.com/google/syzkaller/prog.foreachArgImpl({0xd9ea00?, 0xc0014e4570?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:200 +0x3d8 fp=0xc0015a9680 sp=0xc0015a94b0 pc=0x544c18 github.com/google/syzkaller/prog.foreachArgImpl({0xd9eac0?, 0xc0014d7f20?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce fp=0xc0015a9850 sp=0xc0015a9680 pc=0x544d0e github.com/google/syzkaller/prog.foreachArgImpl({0xd9ea00?, 0xc0014e4600?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:200 +0x3d8 fp=0xc0015a9a20 sp=0xc0015a9850 pc=0x544c18 github.com/google/syzkaller/prog.ForeachArg(0xc0014ff5e0, 0xd9e9c0?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:150 +0xde fp=0xc0015a9a78 sp=0xc0015a9a20 pc=0x5447de github.com/google/syzkaller/prog.(*execContext).writeCopyin(...) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:153 github.com/google/syzkaller/prog.(*execContext).serializeCall(0xc0015a9b68, 0xc0014ff5e0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:88 +0x54 fp=0xc0015a9b08 sp=0xc0015a9a78 pc=0x555b54 github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0xc00150d000, {0x7f318ef5f000, 0x400000, 0x400000}) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:76 +0x159 fp=0xc0015a9d10 sp=0xc0015a9b08 pc=0x5559d9 github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0002415f0, 0xc0000befa8?, 0xc00150d000) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:257 +0x4b fp=0xc0015a9db0 sp=0xc0015a9d10 pc=0x978bab main.(*Context).execute(0xc001515400, 0x4?, 0x0?, 0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:181 +0x145 fp=0xc0015a9f28 sp=0xc0015a9db0 pc=0x97f545 main.(*Context).run(0xc001515400, 0x0?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:166 +0xbb fp=0xc0015a9fa0 sp=0xc0015a9f28 pc=0x97f2db main.main.func3() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:127 +0x51 fp=0xc0015a9fe0 sp=0xc0015a9fa0 pc=0x97f0f1 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc0015a9fe8 sp=0xc0015a9fe0 pc=0x46d341 created by main.main in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:125 +0x5bf goroutine 1 [semacquire]: runtime.gopark(0xc000091380?, 0xc0011bfda8?, 0xe0?, 0x13?, 0xc0014dfde0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc00189fd38 sp=0xc00189fd18 pc=0x43ce2e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:404 runtime.semacquire1(0xc001517148, 0xb0?, 0x1, 0x0, 0xa0?) /usr/local/go/src/runtime/sema.go:160 +0x218 fp=0xc00189fda0 sp=0xc00189fd38 pc=0x44e178 sync.runtime_Semacquire(0x53082f?) /usr/local/go/src/runtime/sema.go:62 +0x25 fp=0xc00189fdd8 sp=0xc00189fda0 pc=0x4693a5 sync.(*WaitGroup).Wait(0xc001494780?) /usr/local/go/src/sync/waitgroup.go:116 +0x48 fp=0xc00189fe00 sp=0xc00189fdd8 pc=0x4797e8 main.main() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:131 +0x646 fp=0xc00189ff40 sp=0xc00189fe00 pc=0x97ef66 runtime.main() /usr/local/go/src/runtime/proc.go:267 +0x2bb fp=0xc00189ffe0 sp=0xc00189ff40 pc=0x43c9db runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc00189ffe8 sp=0xc00189ffe0 pc=0x46d341 goroutine 2 [force gc (idle)]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000054fa8 sp=0xc000054f88 pc=0x43ce2e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:404 runtime.forcegchelper() /usr/local/go/src/runtime/proc.go:322 +0xb3 fp=0xc000054fe0 sp=0xc000054fa8 pc=0x43ccb3 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc000054fe8 sp=0xc000054fe0 pc=0x46d341 created by runtime.init.6 in goroutine 1 /usr/local/go/src/runtime/proc.go:310 +0x1a goroutine 17 [GC sweep wait]: runtime.gopark(0x1?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000050778 sp=0xc000050758 pc=0x43ce2e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:404 runtime.bgsweep(0x0?) /usr/local/go/src/runtime/mgcsweep.go:321 +0xdf fp=0xc0000507c8 sp=0xc000050778 pc=0x427e1f runtime.gcenable.func1() /usr/local/go/src/runtime/mgc.go:200 +0x25 fp=0xc0000507e0 sp=0xc0000507c8 pc=0x41cfa5 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc0000507e8 sp=0xc0000507e0 pc=0x46d341 created by runtime.gcenable in goroutine 1 /usr/local/go/src/runtime/mgc.go:200 +0x66 goroutine 18 [GC scavenge wait]: runtime.gopark(0xc000088000?, 0xd521c0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000050f70 sp=0xc000050f50 pc=0x43ce2e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:404 runtime.(*scavengerState).park(0x231a8c0) /usr/local/go/src/runtime/mgcscavenge.go:425 +0x49 fp=0xc000050fa0 sp=0xc000050f70 pc=0x4256a9 runtime.bgscavenge(0x0?) /usr/local/go/src/runtime/mgcscavenge.go:658 +0x59 fp=0xc000050fc8 sp=0xc000050fa0 pc=0x425c59 runtime.gcenable.func2() /usr/local/go/src/runtime/mgc.go:201 +0x25 fp=0xc000050fe0 sp=0xc000050fc8 pc=0x41cf45 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc000050fe8 sp=0xc000050fe0 pc=0x46d341 created by runtime.gcenable in goroutine 1 /usr/local/go/src/runtime/mgc.go:201 +0xa5 goroutine 19 [finalizer wait]: runtime.gopark(0x0?, 0xcbaec8?, 0xc0?, 0x40?, 0x2000000020?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000054628 sp=0xc000054608 pc=0x43ce2e runtime.runfinq() /usr/local/go/src/runtime/mfinal.go:193 +0x107 fp=0xc0000547e0 sp=0xc000054628 pc=0x41c027 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc0000547e8 sp=0xc0000547e0 pc=0x46d341 created by runtime.createfing in goroutine 1 /usr/local/go/src/runtime/mfinal.go:163 +0x3d goroutine 20 [select]: runtime.gopark(0xc000051788?, 0x3?, 0xd8?, 0xb?, 0xc000051772?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000051618 sp=0xc0000515f8 pc=0x43ce2e runtime.selectgo(0xc000051788, 0xc00005176c, 0xc0000f7980?, 0x0, 0x0?, 0x1) /usr/local/go/src/runtime/select.go:327 +0x725 fp=0xc000051738 sp=0xc000051618 pc=0x44d145 go.opencensus.io/stats/view.(*worker).start(0xc0000f7980) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:292 +0x9f fp=0xc0000517c8 sp=0xc000051738 pc=0x94487f go.opencensus.io/stats/view.init.0.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x25 fp=0xc0000517e0 sp=0xc0000517c8 pc=0x943ba5 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc0000517e8 sp=0xc0000517e0 pc=0x46d341 created by go.opencensus.io/stats/view.init.0 in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x8d goroutine 21 [GC worker (idle)]: runtime.gopark(0xbeaede74d?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000051f50 sp=0xc000051f30 pc=0x43ce2e runtime.gcBgMarkWorker() /usr/local/go/src/runtime/mgc.go:1293 +0xe5 fp=0xc000051fe0 sp=0xc000051f50 pc=0x41eb25 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc000051fe8 sp=0xc000051fe0 pc=0x46d341 created by runtime.gcBgMarkStartWorkers in goroutine 1 /usr/local/go/src/runtime/mgc.go:1217 +0x1c goroutine 3 [GC worker (idle)]: runtime.gopark(0xbeaf92b7d?, 0x3?, 0xb3?, 0x75?, 0x0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc000055750 sp=0xc000055730 pc=0x43ce2e runtime.gcBgMarkWorker() /usr/local/go/src/runtime/mgc.go:1293 +0xe5 fp=0xc0000557e0 sp=0xc000055750 pc=0x41eb25 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc0000557e8 sp=0xc0000557e0 pc=0x46d341 created by runtime.gcBgMarkStartWorkers in goroutine 1 /usr/local/go/src/runtime/mgc.go:1217 +0x1c goroutine 6 [IO wait]: runtime.gopark(0xc0014ffdb8?, 0xb?, 0x0?, 0x0?, 0x21?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc0015b59b8 sp=0xc0015b5998 pc=0x43ce2e runtime.netpollblock(0x4c06f8?, 0x407de6?, 0x0?) /usr/local/go/src/runtime/netpoll.go:564 +panic during panic SIGBUS: bus error PC=0x46eb15 m=10 sigcode=128 goroutine 0 [idle]: runtime.write1() /usr/local/go/src/runtime/sys_linux_amd64.s:99 +0x15 fp=0xc00157f630 sp=0xc00157f628 pc=0x46eb15 runtime.write(0xb02753?, 0x2?, 0x2?) /usr/local/go/src/runtime/time_nofake.go:31 +0x31 fp=0xc00157f660 sp=0xc00157f630 pc=0x45bbb1 runtime.writeErr(...) /usr/local/go/src/runtime/write_err.go:12 runtime.gwrite({0xb02753, 0x2, 0x0?}) /usr/local/go/src/runtime/print.go:97 +0xef fp=0xc00157f698 sp=0xc00157f660 pc=0x43bc6f runtime.printstring({0xb02753?, 0xc00157f7a0?}) /usr/local/go/src/runtime/print.go:246 +0x54 fp=0xc00157f6e8 sp=0xc00157f698 pc=0x43c394 runtime.traceback2(0xc00157fc58, 0x0, 0x0, 0x30) /usr/local/go/src/runtime/traceback.go:1022 +0x5ac fp=0xc00157f950 sp=0xc00157f6e8 pc=0x45feac runtime.traceback1.func1(0xa0?) /usr/local/go/src/runtime/traceback.go:923 +0x65 fp=0xc00157fb20 sp=0xc00157f950 pc=0x45f7e5 runtime.traceback1(0xc0000076c0?, 0x1c80006a900?, 0x5447de?, 0xc0000076c0, 0x0?) /usr/local/go/src/runtime/traceback.go:946 +0x212 fp=0xc00157fe30 sp=0xc00157fb20 pc=0x45f652 runtime.traceback(...) /usr/local/go/src/runtime/traceback.go:823 runtime.tracebackothers.func1(0xc0000076c0) /usr/local/go/src/runtime/traceback.go:1254 +0xe5 fp=0xc00157fe70 sp=0xc00157fe30 pc=0x460f65 runtime.forEachGRace(0xc00157fed8) /usr/local/go/src/runtime/proc.go:621 +0x49 fp=0xc00157fea0 sp=0xc00157fe70 pc=0x43d849 runtime.tracebackothers(0xc00008c680?) /usr/local/go/src/runtime/traceback.go:1240 +0xdb fp=0xc00157ff08 sp=0xc00157fea0 pc=0x460e5b runtime.dopanic_m(0xc00008c680, 0x43a06f?, 0xb04b18?) /usr/local/go/src/runtime/panic.go:1316 +0x2a6 fp=0xc00157ff88 sp=0xc00157ff08 pc=0x43a986 runtime.fatalthrow.func1() /usr/local/go/src/runtime/panic.go:1170 +0x6b fp=0xc00157ffc8 sp=0xc00157ff88 pc=0x43a3ab traceback: unexpected SPWRITE function runtime.systemstack runtime.systemstack() /usr/local/go/src/runtime/asm_amd64.s:509 +0x4a fp=0xc00157ffd8 sp=0xc00157ffc8 pc=0x46b54a goroutine 10 [running]: runtime.systemstack_switch() /usr/local/go/src/runtime/asm_amd64.s:474 +0x8 fp=0xc0015a8e20 sp=0xc0015a8e10 pc=0x46b4e8 runtime.fatalthrow(0x15a8e68?) /usr/local/go/src/runtime/panic.go:1163 +0x65 fp=0xc0015a8e60 sp=0xc0015a8e20 pc=0x43a305 runtime.throw({0xb04b18?, 0xc0014e4570?}) /usr/local/go/src/runtime/panic.go:1077 +0x5c fp=0xc0015a8e90 sp=0xc0015a8e60 pc=0x439ffc runtime.sigpanic() /usr/local/go/src/runtime/signal_unix.go:858 +0x116 fp=0xc0015a8ef0 sp=0xc0015a8e90 pc=0x450b96 github.com/google/syzkaller/prog.(*execContext).serializeCall.(*execContext).writeCopyin.func1({0xd9e9c0, 0xc0014dcf30}, 0xc00177f3b0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:167 +0x12b fp=0xc0015a8f40 sp=0xc0015a8ef0 pc=0x5561eb github.com/google/syzkaller/prog.foreachArgImpl({0xd9e9c0?, 0xc0014dcf30?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x224 fp=0xc0015a9110 sp=0xc0015a8f40 pc=0x544a64 github.com/google/syzkaller/prog.foreachArgImpl({0xd9eac0?, 0xc0014d7ea0?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce fp=0xc0015a92e0 sp=0xc0015a9110 pc=0x544d0e github.com/google/syzkaller/prog.foreachArgImpl({0xd9eac0?, 0xc0014d7ee0?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce fp=0xc0015a94b0 sp=0xc0015a92e0 pc=0x544d0e github.com/google/syzkaller/prog.foreachArgImpl({0xd9ea00?, 0xc0014e4570?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:200 +0x3d8 fp=0xc0015a9680 sp=0xc0015a94b0 pc=0x544c18 github.com/google/syzkaller/prog.foreachArgImpl({0xd9eac0?, 0xc0014d7f20?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce fp=0xc0015a9850 sp=0xc0015a9680 pc=0x544d0e github.com/google/syzkaller/prog.foreachArgImpl({0xd9ea00?, 0xc0014e4600?}, 0xc00177f3b0, 0xc0015a9ae8) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:200 +0x3d8 fp=0xc0015a9a20 sp=0xc0015a9850 pc=0x544c18 github.com/google/syzkaller/prog.ForeachArg(0xc0014ff5e0, 0xd9e9c0?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:150 +0xde fp=0xc0015a9a78 sp=0xc0015a9a20 pc=0x5447de github.com/google/syzkaller/prog.(*execContext).writeCopyin(...) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:153 github.com/google/syzkaller/prog.(*execContext).serializeCall(0xc0015a9b68, 0xc0014ff5e0) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:88 +0x54 fp=0xc0015a9b08 sp=0xc0015a9a78 pc=0x555b54 github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0xc00150d000, {0x7f318ef5f000, 0x400000, 0x400000}) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:76 +0x159 fp=0xc0015a9d10 sp=0xc0015a9b08 pc=0x5559d9 github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0002415f0, 0xc0000befa8?, 0xc00150d000) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:257 +0x4b fp=0xc0015a9db0 sp=0xc0015a9d10 pc=0x978bab main.(*Context).execute(0xc001515400, 0x4?, 0x0?, 0x0?, 0x0?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:181 +0x145 fp=0xc0015a9f28 sp=0xc0015a9db0 pc=0x97f545 main.(*Context).run(0xc001515400, 0x0?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:166 +0xbb fp=0xc0015a9fa0 sp=0xc0015a9f28 pc=0x97f2db main.main.func3() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:127 +0x51 fp=0xc0015a9fe0 sp=0xc0015a9fa0 pc=0x97f0f1 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1650 +0x1 fp=0xc0015a9fe8 sp=0xc0015a9fe0 pc=0x46d341 created by main.main in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:125 +0x5bf goroutine 1 [semacquire]: runtime.gopark(0xc000091380?, 0xc0011bfda8?, 0xe0?, 0x13?, 0xc0014dfde0?) /usr/local/go/src/runtime/proc.go:398 +0xce fp=0xc00189fd38 sp=0xc00189fd18 pc=0x43ce2e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:404 runtime.semacquire1(0xc001517148, 0xb0?, 0x1, 0x0, 0xa0?) /usr/local/go/src/runtime/sema.go:160 +0x218 fp=0xc00189fda0 sp=0xc00189fd38 pc=0x44e178 sync.runtime_Semacquire(0x53082f?) /usr/local/go/src/runtime/sema.go:62 Connection to 10.128.1.104 closed by remote host. [ 51.984274][ T10] device bridge_slave_1 left promiscuous mode [ 51.990379][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.998689][ T10] device bridge_slave_0 left promiscuous mode [ 52.004715][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.012342][ T10] device veth1_macvtap left promiscuous mode [ 52.018237][ T10] device veth0_vlan left promiscuous mode [ 52.794596][ T10] device bridge_slave_1 left promiscuous mode [ 52.800677][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.808276][ T10] device bridge_slave_0 left promiscuous mode [ 52.814262][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.822183][ T10] device bridge_slave_1 left promiscuous mode [ 52.828294][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.835729][ T10] device bridge_slave_0 left promiscuous mode [ 52.842033][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.850005][ T10] device bridge_slave_1 left promiscuous mode [ 52.856159][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.863685][ T10] device bridge_slave_0 left promiscuous mode [ 52.869735][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.877940][ T10] device bridge_slave_1 left promiscuous mode [ 52.884091][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.891401][ T10] device bridge_slave_0 left promiscuous mode [ 52.897557][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.906087][ T10] device veth1_macvtap left promiscuous mode [ 52.911925][ T10] device veth0_vlan left promiscuous mode [ 52.918155][ T10] device veth1_macvtap left promiscuous mode [ 52.924186][ T10] device veth0_vlan left promiscuous mode [ 52.930171][ T10] device veth1_macvtap left promiscuous mode [ 52.936340][ T10] device veth0_vlan left promiscuous mode [ 52.942352][ T10] device veth1_macvtap left promiscuous mode [ 52.948447][ T10] device veth0_vlan left promiscuous mode