Extracting prog: 2m46.201059346s
Minimizing prog: 12m46.506578802s
Simplifying prog options: 4m35.978364081s
Extracting C: 1m1.510993026s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD
detailed listing:
executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

program did not crash
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
program did not crash
simplifying guilty program options
testing program (duration=1m8.149474935s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program crashed: SYZFAIL: SIGILL
a never seen crash title: SYZFAIL: SIGILL, ignore
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program crashed: SYZFAIL: SIGILL
a never seen crash title: SYZFAIL: SIGILL, ignore
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program crashed: SYZFAIL: SIGILL
validation run: crashed=true
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program crashed: SYZFAIL: SIGILL
validation run: crashed=true
testing program (duration=1m8.149474935s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000040000000000000000000000850000006d00000095"], &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)

program crashed: SYZFAIL: SIGILL
validation run: crashed=true
reproducing took 25m15.850680203s
repro crashed as (corrupted=false):
SYZFAIL: SIGILL
pc-offset:0xffffffffffebf9d4 pc:0x7f668858f50c addr:(nil) code=128 (errno 9: Bad file descriptor)
SIGILL: illegal instruction
PC=0x47fad7 m=1 sigcode=128
instruction bytes: 0x48 0x83 0xc4 0x10 0x5d 0xc3 0xcc 0xcc 0xcc 0xb8 0xba 0x0 0x0 0x0 0xf 0x5

goroutine 0 gp=0xc000002700 m=1 mp=0xc00007c008 [idle]:
runtime.usleep(0x14)
	/usr/local/go/src/runtime/sys_linux_amd64.s:135 +0x37 fp=0xc00005df38 sp=0xc00005df18 pc=0x47fad7
runtime.sysmon()
	/usr/local/go/src/runtime/proc.go:6111 +0xa5 fp=0xc00005dfa0 sp=0xc00005df38 pc=0x44fda5
runtime.mstart1()
	/usr/local/go/src/runtime/proc.go:1855 +0x93 fp=0xc00005dfc8 sp=0xc00005dfa0 pc=0x4466b3
runtime.mstart0()
	/usr/local/go/src/runtime/proc.go:1808 +0x75 fp=0xc00005dff8 sp=0xc00005dfc8 pc=0x4465f5
runtime.mstart()
	/usr/local/go/src/runtime/asm_amd64.s:395 +0x5 fp=0xc00005e000 sp=0xc00005dff8 pc=0x47c345

goroutine 1 gp=0xc000002380 m=nil [sync.WaitGroup.Wait]:
runtime.gopark(0xc000111c98?, 0x419274?, 0x60?, 0x92?, 0x7f9a2ad5fb20?)
	/usr/local/go/src/runtime/proc.go:435 +0xce fp=0xc003474c38 sp=0xc003474c18 pc=0x47666e
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:441
runtime.semacquire1(0xc001ed0190, 0x0, 0x1, 0x0, 0x18)
	/usr/local/go/src/runtime/sema.go:188 +0x21d fp=0xc003474ca0 sp=0xc003474c38 pc=0x4567fd
sync.runtime_SemacquireWaitGroup(0xc00000eac8?)
	/usr/local/go/src/runtime/sema.go:110 +0x25 fp=0xc003474cd8 sp=0xc003474ca0 pc=0x477c05
sync.(*WaitGroup).Wait(0x15a1b20?)
	/usr/local/go/src/sync/waitgroup.go:118 +0x48 fp=0xc003474d00 sp=0xc003474cd8 pc=0x489bc8
golang.org/x/sync/errgroup.(*Group).Wait(0xc001ed0180)
	/syzkaller/gopath/pkg/mod/golang.org/x/sync@v0.17.0/errgroup/errgroup.go:56 +0x1e fp=0xc003474d20 sp=0xc003474d00 pc=0xfae5de
github.com/google/syzkaller/pkg/rpcserver.RunLocal({0x235ffb0?, 0xc00261a5f0?}, 0x2330568?)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:54 +0x192 fp=0xc003474da8 sp=0xc003474d20 pc=0x12725d2
main.main()
	/syzkaller/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:187 +0x93e fp=0xc003474f50 sp=0xc003474da8 pc=0x127f3fe
runtime.main()
	/usr/local/go/src/runtime/proc.go:283 +0x28b fp=0xc003474fe0 sp=0xc003474f50 pc=0x44310b
runtime.goexit({})
	/usr/local/go/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc003474fe8 sp=0xc003474fe0 pc=0x47e281

goroutine 17 gp=0xc0000a0000 m=nil [force gc (idle)]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
Connection to 10.128.1.69 closed by remote host.

final repro crashed as (corrupted=false):
SYZFAIL: SIGILL
pc-offset:0xffffffffffebf9d4 pc:0x7f668858f50c addr:(nil) code=128 (errno 9: Bad file descriptor)
SIGILL: illegal instruction
PC=0x47fad7 m=1 sigcode=128
instruction bytes: 0x48 0x83 0xc4 0x10 0x5d 0xc3 0xcc 0xcc 0xcc 0xb8 0xba 0x0 0x0 0x0 0xf 0x5

goroutine 0 gp=0xc000002700 m=1 mp=0xc00007c008 [idle]:
runtime.usleep(0x14)
	/usr/local/go/src/runtime/sys_linux_amd64.s:135 +0x37 fp=0xc00005df38 sp=0xc00005df18 pc=0x47fad7
runtime.sysmon()
	/usr/local/go/src/runtime/proc.go:6111 +0xa5 fp=0xc00005dfa0 sp=0xc00005df38 pc=0x44fda5
runtime.mstart1()
	/usr/local/go/src/runtime/proc.go:1855 +0x93 fp=0xc00005dfc8 sp=0xc00005dfa0 pc=0x4466b3
runtime.mstart0()
	/usr/local/go/src/runtime/proc.go:1808 +0x75 fp=0xc00005dff8 sp=0xc00005dfc8 pc=0x4465f5
runtime.mstart()
	/usr/local/go/src/runtime/asm_amd64.s:395 +0x5 fp=0xc00005e000 sp=0xc00005dff8 pc=0x47c345

goroutine 1 gp=0xc000002380 m=nil [sync.WaitGroup.Wait]:
runtime.gopark(0xc000111c98?, 0x419274?, 0x60?, 0x92?, 0x7f9a2ad5fb20?)
	/usr/local/go/src/runtime/proc.go:435 +0xce fp=0xc003474c38 sp=0xc003474c18 pc=0x47666e
runtime.goparkunlock(...)
	/usr/local/go/src/runtime/proc.go:441
runtime.semacquire1(0xc001ed0190, 0x0, 0x1, 0x0, 0x18)
	/usr/local/go/src/runtime/sema.go:188 +0x21d fp=0xc003474ca0 sp=0xc003474c38 pc=0x4567fd
sync.runtime_SemacquireWaitGroup(0xc00000eac8?)
	/usr/local/go/src/runtime/sema.go:110 +0x25 fp=0xc003474cd8 sp=0xc003474ca0 pc=0x477c05
sync.(*WaitGroup).Wait(0x15a1b20?)
	/usr/local/go/src/sync/waitgroup.go:118 +0x48 fp=0xc003474d00 sp=0xc003474cd8 pc=0x489bc8
golang.org/x/sync/errgroup.(*Group).Wait(0xc001ed0180)
	/syzkaller/gopath/pkg/mod/golang.org/x/sync@v0.17.0/errgroup/errgroup.go:56 +0x1e fp=0xc003474d20 sp=0xc003474d00 pc=0xfae5de
github.com/google/syzkaller/pkg/rpcserver.RunLocal({0x235ffb0?, 0xc00261a5f0?}, 0x2330568?)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:54 +0x192 fp=0xc003474da8 sp=0xc003474d20 pc=0x12725d2
main.main()
	/syzkaller/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:187 +0x93e fp=0xc003474f50 sp=0xc003474da8 pc=0x127f3fe
runtime.main()
	/usr/local/go/src/runtime/proc.go:283 +0x28b fp=0xc003474fe0 sp=0xc003474f50 pc=0x44310b
runtime.goexit({})
	/usr/local/go/src/runtime/asm_amd64.s:1700 +0x1 fp=0xc003474fe8 sp=0xc003474fe0 pc=0x47e281

goroutine 17 gp=0xc0000a0000 m=nil [force gc (idle)]:
runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
Connection to 10.128.1.69 closed by remote host.