unexpected fault address 0x0 fatal error: fault [signal SIGBUS: bus error code=0x80 addr=0x0 pc=0x586aaa] goroutine 153 gp=0xc0013e8c40 m=8 mp=0xc0001b3008 [running]: runtime.throw({0xbafdac?, 0xc00036b470?}) /usr/local/go/src/runtime/panic.go:1023 +0x5c fp=0xc0016a76b0 sp=0xc0016a7680 pc=0x43db7c runtime.sigpanic() /usr/local/go/src/runtime/signal_unix.go:878 +0x116 fp=0xc0016a7710 sp=0xc0016a76b0 pc=0x456296 github.com/google/syzkaller/prog.ArgCommon.Type(...) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/prog.go:74 github.com/google/syzkaller/prog.(*ResultArg).Type(0x0?) :1 +0x8a fp=0xc0016a7748 sp=0xc0016a7710 pc=0x586aaa github.com/google/syzkaller/prog.calcChecksumsCall.func1({0xed1d00, 0xc00007cea0}, 0x55d5ee?) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/checksum.go:34 +0x37 fp=0xc0016a77b8 sp=0xc0016a7748 pc=0x550637 github.com/google/syzkaller/prog.foreachArgImpl({0xed1d00, 0xc00007cea0}, 0xc000cb65a0, 0xc0016a7c88) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x24b fp=0xc0016a7980 sp=0xc0016a77b8 pc=0x54b30b github.com/google/syzkaller/prog.ForeachArg(0xc00137e140, 0xc0016a7c88) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/analysis.go:145 +0x4f fp=0xc0016a79c8 sp=0xc0016a7980 pc=0x54afef github.com/google/syzkaller/prog.calcChecksumsCall(0xc00137e140) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/checksum.go:33 +0xa5 fp=0xc0016a7cb0 sp=0xc0016a79c8 pc=0x54fc25 github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0xc001357e80) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:77 +0x18c fp=0xc0016a7d90 sp=0xc0016a7cb0 pc=0x55cc2c main.(*Context).execute(0xc000337200, 0x4, 0xc0000d6e80, 0xc001357e80, 0x439) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:204 +0xf7 fp=0xc0016a7f20 sp=0xc0016a7d90 pc=0x9f59d7 main.(*Context).run(0xc000337200, 0x4) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:190 +0x1e5 fp=0xc0016a7fa0 sp=0xc0016a7f20 pc=0x9f5805 main.main.func3() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:144 +0x51 fp=0xc0016a7fe0 sp=0xc0016a7fa0 pc=0x9f54f1 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0016a7fe8 sp=0xc0016a7fe0 pc=0x474141 created by main.main in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:142 +0x66f goroutine 1 gp=0xc0000061c0 m=nil [semacquire]: runtime.gopark(0x25d6e60?, 0xc0012dfdf0?, 0xc0?, 0xb5?, 0x7efe4cf12108?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc0017b9d60 sp=0xc0017b9d40 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.semacquire1(0xc0012722d8, 0x0, 0x1, 0x0, 0x12) /usr/local/go/src/runtime/sema.go:160 +0x225 fp=0xc0017b9dc8 sp=0xc0017b9d60 pc=0x4536e5 sync.runtime_Semacquire(0x5bf4ef?) /usr/local/go/src/runtime/sema.go:62 +0x25 fp=0xc0017b9e00 sp=0xc0017b9dc8 pc=0x4702a5 sync.(*WaitGroup).Wait(0xc000094ea0?) /usr/local/go/src/sync/waitgroup.go:116 +0x48 fp=0xc0017b9e28 sp=0xc0017b9e00 pc=0x480d88 main.main() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:148 +0x705 fp=0xc0017b9f50 sp=0xc0017b9e28 pc=0x9f5465 runtime.main() /usr/local/go/src/runtime/proc.go:271 +0x29d fp=0xc0017b9fe0 sp=0xc0017b9f50 pc=0x44063d runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0017b9fe8 sp=0xc0017b9fe0 pc=0x474141 goroutine 2 gp=0xc000006700 m=nil [force gc (idle)]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00005cfa8 sp=0xc00005cf88 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.forcegchelper() /usr/local/go/src/runtime/proc.go:326 +0xb3 fp=0xc00005cfe0 sp=0xc00005cfa8 pc=0x4408f3 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005cfe8 sp=0xc00005cfe0 pc=0x474141 created by runtime.init.6 in goroutine 1 /usr/local/go/src/runtime/proc.go:314 +0x1a goroutine 17 gp=0xc00008c000 m=nil [GC sweep wait]: runtime.gopark(0x1?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000058780 sp=0xc000058760 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.bgsweep(0xc000088000) /usr/local/go/src/runtime/mgcsweep.go:318 +0xdf fp=0xc0000587c8 sp=0xc000058780 pc=0x42ad1f runtime.gcenable.gowrap1() /usr/local/go/src/runtime/mgc.go:203 +0x25 fp=0xc0000587e0 sp=0xc0000587c8 pc=0x41f625 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0000587e8 sp=0xc0000587e0 pc=0x474141 created by runtime.gcenable in goroutine 1 /usr/local/go/src/runtime/mgc.go:203 +0x66 goroutine 18 gp=0xc00008c1c0 m=nil [GC scavenge wait]: runtime.gopark(0x10000?, 0xe80290?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000058f78 sp=0xc000058f58 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.(*scavengerState).park(0x25601a0) /usr/local/go/src/runtime/mgcscavenge.go:425 +0x49 fp=0xc000058fa8 sp=0xc000058f78 pc=0x4286c9 runtime.bgscavenge(0xc000088000) /usr/local/go/src/runtime/mgcscavenge.go:658 +0x59 fp=0xc000058fc8 sp=0xc000058fa8 pc=0x428c79 runtime.gcenable.gowrap2() /usr/local/go/src/runtime/mgc.go:204 +0x25 fp=0xc000058fe0 sp=0xc000058fc8 pc=0x41f5c5 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc000058fe8 sp=0xc000058fe0 pc=0x474141 created by runtime.gcenable in goroutine 1 /usr/local/go/src/runtime/mgc.go:204 +0xa5 goroutine 19 gp=0xc00008c380 m=nil [finalizer wait]: runtime.gopark(0x0?, 0xddaf88?, 0x0?, 0xe0?, 0x2000000020?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00005c620 sp=0xc00005c600 pc=0x440a6e runtime.runfinq() /usr/local/go/src/runtime/mfinal.go:194 +0x107 fp=0xc00005c7e0 sp=0xc00005c620 pc=0x41e667 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005c7e8 sp=0xc00005c7e0 pc=0x474141 created by runtime.createfing in goroutine 1 /usr/local/go/src/runtime/mfinal.go:164 +0x3d goroutine 3 gp=0xc000358a80 m=nil [GC worker (idle)]: runtime.gopark(0xbe4748bca?, 0x3?, 0xcb?, 0x3d?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00005d750 sp=0xc00005d730 pc=0x440a6e runtime.gcBgMarkWorker() /usr/local/go/src/runtime/mgc.go:1310 +0xe5 fp=0xc00005d7e0 sp=0xc00005d750 pc=0x421705 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005d7e8 sp=0xc00005d7e0 pc=0x474141 created by runtime.gcBgMarkStartWorkers in goroutine 1 /usr/local/go/src/runtime/mgc.go:1234 +0x1c goroutine 4 gp=0xc000358c40 m=nil [GC worker (idle)]: runtime.gopark(0xbe2f5492f?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00005df50 sp=0xc00005df30 pc=0x440a6e runtime.gcBgMarkWorker() /usr/local/go/src/runtime/mgc.go:1310 +0xe5 fp=0xc00005dfe0 sp=0xc00005df50 pc=0x421705 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005dfe8 sp=0xc00005dfe0 pc=0x474141 created by runtime.gcBgMarkStartWorkers in goroutine 1 /usr/local/go/src/runtime/mgc.go:1234 +0x1c goroutine 5 gp=0xc000358e00 m=nil [select]: runtime.gopark(0xc00005e778?, 0x3?, 0x8?, 0xc5?, 0xc00005e772?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00005e618 sp=0xc00005e5f8 pc=0x440a6e runtime.selectgo(0xc00005e778, 0xc00005e76c, 0xc000315a00?, 0x0, 0x0?, 0x1) /usr/local/go/src/runtime/select.go:327 +0x725 fp=0xc00005e738 sp=0xc00005e618 pc=0x4526a5 go.opencensus.io/stats/view.(*worker).start(0xc000315a00) /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:292 +0x9f fp=0xc00005e7c8 sp=0xc00005e738 pc=0x972cbf go.opencensus.io/stats/view.init.0.gowrap1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x25 fp=0xc00005e7e0 sp=0xc00005e7c8 pc=0x972025 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005e7e8 sp=0xc00005e7e0 pc=0x474141 created by go.opencensus.io/stats/view.init.0 in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x8d goroutine 6 gp=0xc001240700 m=nil [chan receive]: runtime.gopark(0xc00126af60?, 0xc00137f860?, 0xa8?, 0xa3?, 0x9dd320?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00005f6f8 sp=0xc00005f6d8 pc=0x440a6e runtime.chanrecv(0xc00126af00, 0xc00005f7b8, 0x1) /usr/local/go/src/runtime/chan.go:583 +0x3bf fp=0xc00005f770 sp=0xc00005f6f8 pc=0x40a73f runtime.chanrecv2(0xc00012c0c0?, 0xc000337178?) /usr/local/go/src/runtime/chan.go:447 +0x12 fp=0xc00005f798 sp=0xc00005f770 pc=0x40a372 github.com/google/syzkaller/pkg/stats.newSet.func1() /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/stats/set.go:98 +0x66 fp=0xc00005f7e0 sp=0xc00005f798 pc=0x9dbe86 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005f7e8 sp=0xc00005f7e0 pc=0x474141 created by github.com/google/syzkaller/pkg/stats.newSet in goroutine 1 /syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/pkg/stats/set.go:97 +0xd6 goroutine 150 gp=0xc0013e8000 m=nil [IO wait]: runtime.gopark(0xc00137e280?, 0xc00143dc88?, 0xa0?, 0xdb?, 0xb?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc00143d9c8 sp=0xc00143d9a8 pc=0x440a6e runtime.netpollblock(0x4954f8?, 0x408946?, 0x0?) /usr/local/go/src/runtime/netpoll.go:573 +0xf7 fp=0xc00143da00 sp=0xc00143d9c8 pc=0x439877 internal/poll.runtime_pollWait(0x7efe064451a8, 0x72) /usr/local/go/src/runtime/netpoll.go:345 +0x85 fp=0xc00143da20 sp=0xc00143da00 pc=0x46e945 internal/poll.(*pollDesc).wait(0xc00179e660?, 0xc001238280?, 0x1) /usr/local/go/src/internal/poll/fd_poll_runtime.go:84 +0x27 fp=0xc00143da48 sp=0xc00143da20 pc=0x4eb5a7 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:89 internal/poll.(*FD).Read(0xc00179e660, {0xc001238280, 0xc, 0xc}) /usr/local/go/src/internal/poll/fd_unix.go:164 +0x27a fp=0xc00143dae0 sp=0xc00143da48 pc=0x4ec89a os.(*File).read(...) /usr/local/go/src/os/file_posix.go:29 os.(*File).Read(0xc001374c38, {0xc001238280?, 0xc00143db58?, 0x411f25?}) /usr/local/go/src/os/file.go:118 +0x52 fp=0xc00143db20 sp=0xc00143dae0 pc=0x4f7b52 io.ReadAtLeast({0xec83e0, 0xc001374c38}, {0xc001238280, 0xc, 0xc}, 0xc) /usr/local/go/src/io/io.go:335 +0x90 fp=0xc00143db68 sp=0xc00143db20 pc=0x4815b0 io.ReadFull(...) /usr/local/go/src/io/io.go:354Connection to 10.128.1.118 closed by remote host.