panic: runtime error: invalid memory address or nil pointer dereference (22)

Status: fixed on 2023/12/01 06:13
Fix commit: 4733e050ebec Check that handshake.listenEP is non-nil.
First crash: 1003d, last: 1003d
Similar bugs (30)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 1085d 1086d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 359d 362d 26/26 fixed on 2025/09/19 06:07
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1666d 1662d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1768d 1797d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2189d 2724d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 893d 898d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 120d 121d 26/26 fixed on 2026/05/01 11:36
gvisor panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1619d 1625d 14/26 fixed on 2022/03/25 11:21
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1318d 1379d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 564d 564d 26/26 fixed on 2025/02/13 10:39
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 645d 654d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 1018d 1018d 26/26 fixed on 2023/11/17 08:30
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1278d 1279d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2936d 2990d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 756d 756d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 644d 645d 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 2 92 886d 887d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1279d 1282d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1670d 1695d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (2) 2 syz, C 4493 2912d 2932d 0/26 fixed on 2018/10/15 18:31
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 1122d 1122d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2062d 2106d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (32) 2 syz 6 62d 55d 26/26 fixed on 2026/07/07 11:38
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1388d 1481d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1060d 1074d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1031d 1039d 26/26 fixed on 2023/11/02 02:06
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1124d 1131d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 337d 338d 26/26 fixed on 2025/09/26 06:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 1171d 1171d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2123d 2141d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x1b575ac]

goroutine 658 [running]:
panic({0x30c940?, 0x231ea80?})
	GOROOT/src/runtime/panic.go:1017 +0x3cc fp=0xc005b6c380 sp=0xc005b6c2d0 pc=0x12e72fc
runtime.panicmem(...)
	GOROOT/src/runtime/panic.go:261
runtime.sigpanic()
	GOROOT/src/runtime/signal_unix.go:861 +0x30c fp=0xc005b6c3e0 sp=0xc005b6c380 pc=0x130100c
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*handshake).synRcvdState(0xc005e9b9e0, 0xc0001fe500)
	pkg/tcpip/transport/tcp/connect.go:414 +0x18c fp=0xc005b6d7d0 sp=0xc005b6c3f0 pc=0x1b575ac
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*handshake).handleSegment(0xc005e9b9e0, 0xc0001fe500)
	pkg/tcpip/transport/tcp/connect.go:533 +0x11c fp=0xc005b6d820 sp=0xc005b6d7d0 pc=0x1b5852c
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*handshake).processSegments(0xc005e9b9e0)
	pkg/tcpip/transport/tcp/connect.go:550 +0x80 fp=0xc005b6d880 sp=0xc005b6d820 pc=0x1b58630
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*processor).handleConnecting(0xc0089c2468?, 0xc0089c2300)
	pkg/tcpip/transport/tcp/dispatcher.go:148 +0xac fp=0xc005b6de70 sp=0xc005b6d880 pc=0x1b608bc
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*processor).start(0xc0001efb30, 0xc000d1c678)
	pkg/tcpip/transport/tcp/dispatcher.go:310 +0x204 fp=0xc005b6dfa0 sp=0xc005b6de70 pc=0x1b615c4
gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*dispatcher).init.func2()
	pkg/tcpip/transport/tcp/dispatcher.go:391 +0x44 fp=0xc005b6dfd0 sp=0xc005b6dfa0 pc=0x1b61c24
runtime.goexit()
	src/runtime/asm_arm64.s:1197 +0x4 fp=0xc005b6dfd0 sp=0xc005b6dfd0 pc=0x1320dd4
created by gvisor.dev/gvisor/pkg/tcpip/transport/tcp.(*dispatcher).init in goroutine 324
	pkg/tcpip/transport/tcp/dispatcher.go:391 +0x184

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/30 04:35 gvisor a7d2bf12c2a3 f819d6f7 .config console log report info ci-gvisor-arm64-ptrace-1-race panic: runtime error: invalid memory address or nil pointer dereference
* Struck through repros no longer work on HEAD.