panic: runtime error: invalid memory address or nil pointer dereference (32)

Status: fixed on 2026/07/07 11:38
Reported-by: syzbot+2782bfbe8e6746861719@syzkaller.appspotmail.com
Fix commit: 35db98496ee1 clone: Deliver pidfd only after child init
First crash: 62d, last: 62d
▶ ▼ Similar bugs (30)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 1086d 1087d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 360d 363d 26/26 fixed on 2025/09/19 06:07
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1667d 1663d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1768d 1797d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2189d 2725d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 894d 899d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 121d 121d 26/26 fixed on 2026/05/01 11:36
gvisor panic: runtime error: invalid memory address or nil pointer dereference (22) 2 1 1004d 1004d 26/26 fixed on 2023/12/01 06:13
gvisor panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1619d 1626d 14/26 fixed on 2022/03/25 11:21
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1318d 1380d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 565d 565d 26/26 fixed on 2025/02/13 10:39
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 646d 655d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 1019d 1019d 26/26 fixed on 2023/11/17 08:30
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1279d 1280d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2937d 2991d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 756d 756d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 645d 646d 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 2 92 887d 888d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1280d 1283d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1670d 1695d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (2) 2 syz, C 4493 2913d 2933d 0/26 fixed on 2018/10/15 18:31
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 1122d 1123d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2063d 2107d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1388d 1482d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1061d 1075d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1032d 1039d 26/26 fixed on 2023/11/02 02:06
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1125d 1132d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 338d 338d 26/26 fixed on 2025/09/26 06:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 1172d 1172d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2123d 2142d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe1eea0]

goroutine 773 gp=0xc0005e0b40 m=14 mp=0xc000101008 [running]:
panic({0x1ba6ec0?, 0x5a383f0?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/panic.go:879 +0x15c fp=0xc00136b1c0 sp=0xc00136b110 pc=0xcda1c
runtime.panicmem(...)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/panic.go:336
runtime.sigpanic()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/signal_unix.go:931 +0x2f0 fp=0xc00136b220 sp=0xc00136b1c0 pc=0xd0a10
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Debugf(0xc0014f9908, {0x1defccf, 0x15}, {0xc001521ad0, 0x1, 0x1})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_log.go:54 +0xc0 fp=0xc00136b280 sp=0xc00136b230 pc=0xe1eea0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalTimerLocked(0xc0014f9908, 0xc00151ac80, 0x1, 0x0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:464 +0x814 fp=0xc00136b3a0 sp=0xc00136b280 pc=0xe2ed94
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalLocked(...)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:400
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).SendGroupSignal(0xc0014f9908, 0xc00151ac80)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:385 +0x13c fp=0xc00136b440 sp=0xc00136b3a0 pc=0xe2e1ac
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).PIDFDSendSignal(0xc0014f8008, 0xc0011af980, 0x21, 0x0, 0x0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/pidfd.go:390 +0xbdc fp=0xc00136b570 sp=0xc00136b440 pc=0xdc9aec
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.PIDFDSendSignal(0xc0014f8008, 0x62?, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_signal.go:567 +0x4d0 fp=0xc00136b680 sp=0xc00136b570 pc=0x1192870
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0xcd4 fp=0xc00136b940 sp=0xc00136b680 pc=0xe3e2f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xa0 fp=0xc00136b9f0 sp=0xc00136b940 pc=0xe40a50
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0xe8 fp=0xc00136ba60 sp=0xc00136b9f0 pc=0xe40078
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0014f8008)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x7dc fp=0xc00136bb90 sp=0xc00136ba60 pc=0xe3fa6c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0014f8008?, 0xc0014f8008)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x264c fp=0xc00136be50 sp=0xc00136bb90 pc=0xe25eec
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0014f8008, 0xa7)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x57c fp=0xc00136bfa0 sp=0xc00136be50 pc=0xe231bc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:479 +0x38 fp=0xc00136bfd0 sp=0xc00136bfa0 pc=0xe3b908
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0xc00136bfd0 sp=0xc00136bfd0 pc=0xd67e4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 750
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:479 +0x19c

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/28 20:32 gvisor 928199eb9fb2 fb92f11c .config console log report syz / log ci-gvisor-arm64-systrap-1-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2026/06/28 19:58 gvisor 928199eb9fb2 fb92f11c .config console log report syz / log ci-gvisor-arm64-ptrace-1-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2026/06/28 19:54 gvisor 928199eb9fb2 fb92f11c .config console log report syz / log ci-gvisor-arm64-systrap-1-race panic: runtime error: invalid memory address or nil pointer dereference
2026/06/28 19:48 gvisor 928199eb9fb2 fb92f11c console log report syz / log ci-gvisor-arm64-ptrace-1 panic: runtime error: invalid memory address or nil pointer dereference
2026/06/28 19:36 gvisor 928199eb9fb2 fb92f11c .config console log report syz / log ci-gvisor-arm64-ptrace-1-race panic: runtime error: invalid memory address or nil pointer dereference
2026/06/28 19:10 gvisor 928199eb9fb2 fb92f11c .config console log report info ci-gvisor-arm64-ptrace-1-race panic: runtime error: invalid memory address or nil pointer dereference
* Struck through repros no longer work on HEAD.