syzbot


panic: runtime error: invalid memory address or nil pointer dereference (22)

Status: fixed on 2023/12/01 06:13
Fix commit: 4733e050ebec Check that handshake.listenEP is non-nil.
First crash: 685d, last: 685d
Similar bugs (28)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 767d 768d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (29) 2 C 7 41d 44d 26/26 fixed on 2025/09/19 06:07
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) 2 C 262 1348d 1344d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) 2 C 45305 1449d 1479d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) 2 C 20051 1870d 2406d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) 2 C 4239 575d 580d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (10) 2 C 11 1301d 1307d 14/26 fixed on 2022/03/25 11:21
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) 2 C 31 1000d 1061d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (28) 2 C 21 246d 246d 26/26 fixed on 2025/02/13 10:39
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) 2 C 7905 327d 336d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 700d 700d 26/26 fixed on 2023/11/17 08:30
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) 2 C 753 960d 961d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference 2 C 20682 2618d 2672d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 437d 437d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) 2 C 1117 326d 327d 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 2 92 568d 569d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) 2 C 2752 961d 964d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) 2 C 214 1351d 1377d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (2) 2 C 4493 2594d 2614d 0/26 fixed on 2018/10/15 18:31
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 804d 804d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 1744d 1788d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) 2 C 2733 1070d 1163d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) 2 C 79 742d 756d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (20) 2 C 8 713d 720d 26/26 fixed on 2023/11/02 02:06
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) 2 C 48 806d 813d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (30) 2 C 16194 19d 20d 26/26 fixed on 2025/09/26 06:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 853d 853d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) 2 C 4 1805d 1823d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x1b575ac]

goroutine 658 [running]:
panic({0x30c940?, 0x231ea80?})
	GOROOT/src/runtime/panic.go:1017 +0x3cc fp=0xc005b6c380 sp=0xc005b6c2d0 pc=0x12e72fc
runtime.panicmem(...)
	GOROOT/src/runtime/panic.go:261
runtime.sigpanic()
	GOROOT/src/runtime/signal_unix.go:861 +0x30c fp=0xc005b6c3e0 sp=0xc005b6c380 pc=0x130100c
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*handshake).synRcvdState(0xc005e9b9e0, 0xc0001fe500)
	pkg/tcpip/transport/tcp/connect.go:414 +0x18c fp=0xc005b6d7d0 sp=0xc005b6c3f0 pc=0x1b575ac
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*handshake).handleSegment(0xc005e9b9e0, 0xc0001fe500)
	pkg/tcpip/transport/tcp/connect.go:533 +0x11c fp=0xc005b6d820 sp=0xc005b6d7d0 pc=0x1b5852c
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*handshake).processSegments(0xc005e9b9e0)
	pkg/tcpip/transport/tcp/connect.go:550 +0x80 fp=0xc005b6d880 sp=0xc005b6d820 pc=0x1b58630
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*processor).handleConnecting(0xc0089c2468?, 0xc0089c2300)
	pkg/tcpip/transport/tcp/dispatcher.go:148 +0xac fp=0xc005b6de70 sp=0xc005b6d880 pc=0x1b608bc
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*processor).start(0xc0001efb30, 0xc000d1c678)
	pkg/tcpip/transport/tcp/dispatcher.go:310 +0x204 fp=0xc005b6dfa0 sp=0xc005b6de70 pc=0x1b615c4
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*dispatcher).init.func2()
	pkg/tcpip/transport/tcp/dispatcher.go:391 +0x44 fp=0xc005b6dfd0 sp=0xc005b6dfa0 pc=0x1b61c24
runtime.goexit()
	src/runtime/asm_arm64.s:1197 +0x4 fp=0xc005b6dfd0 sp=0xc005b6dfd0 pc=0x1320dd4
created by gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*dispatcher).init in goroutine 324
	pkg/tcpip/transport/tcp/dispatcher.go:391 +0x184

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/30 04:35 gvisor a7d2bf12c2a3 f819d6f7 .config console log report info ci-gvisor-arm64-ptrace-1-race panic: runtime error: invalid memory address or nil pointer dereference
* Struck through repros no longer work on HEAD.