panic: thread group not visible in its own or an ancestor PID namespace

Status: fixed on 2026/08/17 18:31
Fix commit: ca90691b284b SO_PEERCRED: fix race against thread-group reap
First crash: 32d, last: 32d
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/07/31 16:50 relkochta@google.com git://github.com/relkochta/gvisor.git relkochta/peercred-panic pending

Sample crash report:
panic: thread group not visible in its own or an ancestor PID namespace

goroutine 173693 gp=0x3875b95d5c20 m=66 mp=0x3875ba082008 [running]:
panic({0x12a7f20?, 0x15f2540?})
	GOROOT/src/runtime/panic.go:879 +0x16f fp=0x3875b9c0f300 sp=0x3875b9c0f250 pc=0x48c52f
gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).PIDNamespacedIDs(0x3875b9d3a408)
	pkg/sentry/kernel/threads.go:377 +0x107 fp=0x3875b9c0f360 sp=0x3875b9c0f300 pc=0xb55087
gvisor.dev/gvisor/pkg/sentry/socket/control.NewSCMCredentials(0x3875ba387908, {{{}}, 0xb8965990?, 0x3875?, 0x2b78?})
	pkg/sentry/socket/control/control.go:80 +0xba fp=0x3875b9c0f3a0 sp=0x3875b9c0f360 pc=0xb9dffa
gvisor.dev/gvisor/pkg/sentry/socket/control.Parse(0x3875ba387908, {0x1555ae0, 0x3875b97693b0}, {0x3875b8965980?, 0x3?, 0x147bf60?}, 0x8)
	pkg/sentry/socket/control/control.go:484 +0x6aa fp=0x3875b9c0f590 sp=0x3875b9c0f3a0 pc=0xb9faaa
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.sendSingleMsg(0x3875ba387908, {0x7f90b19a5840, 0x3875b97693b0}, 0x3875b97693b0, 0x3875ba387908?, 0x0)
	pkg/sentry/syscalls/linux/sys_socket.go:1097 +0x2ec fp=0x3875b9c0f8d8 sp=0x3875b9c0f590 pc=0xd112cc
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SendMsg(0x3875ba387908, 0x3875b8358008?, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_socket.go:988 +0x1cb fp=0x3875b9c0f988 sp=0x3875b9c0f8d8 pc=0xd1022b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x3875ba387908, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x67d fp=0x3875b9c0fcc8 sp=0x3875b9c0f988 pc=0xb4dcfd
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x3875ba387908, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x4b fp=0x3875b9c0fd20 sp=0x3875b9c0fcc8 pc=0xb4ee8b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x3875ba387908, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x68 fp=0x3875b9c0fd70 sp=0x3875b9c0fd20 pc=0xb4eba8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x3875b9a09ba0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0x3875b9c0fe48 sp=0x3875b9c0fd70 pc=0xb4e925
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x3875b967f200?, 0x3875ba387908)
	pkg/sentry/kernel/task_run.go:258 +0xf9c fp=0x3875b9c0ff30 sp=0x3875b9c0fe48 pc=0xb4379c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x3875ba387908, 0x1310)
	pkg/sentry/kernel/task_run.go:89 +0x202 fp=0x3875b9c0ffc0 sp=0x3875b9c0ff30 pc=0xb42302
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:531 +0x1b fp=0x3875b9c0ffe0 sp=0x3875b9c0ffc0 pc=0xb4c81b
runtime.goexit({})
	src/runtime/asm_amd64.s:1771 +0x1 fp=0x3875b9c0ffe8 sp=0x3875b9c0ffe0 pc=0x4951e1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 146944
	pkg/sentry/kernel/task_start.go:531 +0xc5

Crashes (17):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/30 09:58 gvisor a907734abece 2377cd3d console log report syz / log C ci-gvisor-ptrace-1 panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:56 gvisor a907734abece 2377cd3d console log report syz / log C ci-gvisor-ptrace-3 panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:54 gvisor a907734abece 2377cd3d .config console log report syz / log C ci-gvisor-ptrace-2-race panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:52 gvisor a907734abece 2377cd3d console log report syz / log C ci-gvisor-systrap-1 panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:51 gvisor a907734abece 2377cd3d .config console log report syz / log C ci-gvisor-ptrace-3-race panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:50 gvisor a907734abece 2377cd3d .config console log report syz / log C ci-gvisor-ptrace-1-race panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:31 gvisor a907734abece 2377cd3d .config console log report syz / log C ci-gvisor-systrap-1-race panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:53 gvisor a907734abece 2377cd3d console log report syz / log C ci-gvisor-arm64-systrap-1 panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:45 gvisor a907734abece 2377cd3d console log report syz / log C ci-gvisor-arm64-ptrace-1 panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 13:07 gvisor 3355a32937b4 0a1bc234 .config console log report syz / log ci-gvisor-ptrace-2-race-cover panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 12:57 gvisor 3355a32937b4 0a1bc234 .config console log report syz / log ci-gvisor-ptrace-1-race-cover panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 12:56 gvisor 3355a32937b4 0a1bc234 .config console log report syz / log ci-gvisor-ptrace-3-race-cover panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 10:00 gvisor a907734abece 2377cd3d .config console log report syz / log ci-gvisor-kvm-cover panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:49 gvisor a907734abece 2377cd3d console log report syz / log ci-gvisor-kvm panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 10:03 gvisor a907734abece 2377cd3d .config console log report syz / log ci-gvisor-arm64-ptrace-1-cover panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 09:52 gvisor a907734abece 2377cd3d .config console log report syz / log ci-gvisor-arm64-systrap-1-cover panic: thread group not visible in its own or an ancestor PID namespace
2026/07/30 06:06 gvisor a907734abece 2377cd3d .config console log report info ci-gvisor-systrap-1-race panic: thread group not visible in its own or an ancestor PID namespace
* Struck through repros no longer work on HEAD.