syzbot


panic: runtime error: invalid memory address or nil pointer dereference (10)

Status: fixed on 2022/03/25 11:21
Fix commit: 5835bc8c3a4b cgroupfs: Handle invalid PID/PGID on migration.
First crash: 984d, last: 977d
Similar bugs (25)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 4 444d 445d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) C 262 1025d 1021d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) C 45305 1126d 1155d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) C 20051 1547d 2083d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) C 4239 252d 257d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (22) 1 362d 362d 26/26 fixed on 2023/12/01 06:13
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) C 31 676d 738d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) C 7905 4d13h 13d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (21) 1 377d 377d 26/26 fixed on 2023/11/17 08:30
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) C 753 637d 638d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference C 20682 2295d 2348d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 1 114d 114d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) C 1117 3d02h 4d11h 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 92 245d 246d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) C 2752 638d 641d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) C 214 1028d 1053d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (2) C 4493 2271d 2291d 0/26 fixed on 2018/10/15 18:31
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 480d 480d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) syz 62 1421d 1465d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) C 2733 746d 840d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) C 79 419d 433d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (20) C 8 390d 397d 26/26 fixed on 2023/11/02 02:06
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) C 48 483d 490d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 1 530d 530d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) C 4 1481d 1500d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xd3b5d0]

goroutine 259 [running]:
panic({0x1981000, 0x28bac50})
	GOROOT/src/runtime/panic.go:1147 +0x3a8 fp=0xc0009bb000 sp=0xc0009baf40 pc=0x437d08
runtime.panicmem(...)
	GOROOT/src/runtime/panic.go:221
runtime.sigpanic()
	GOROOT/src/runtime/signal_unix.go:735 +0x327 fp=0xc0009bb050 sp=0xc0009bb000 pc=0x450187
gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).MigrateCgroup(0x0, {0xc00060ae10, {0x1dc1b20, 0xc0004baa80}})
	pkg/sentry/kernel/task_cgroup.go:140 +0x90 fp=0xc0009bb170 sp=0xc0009bb050 pc=0xd3b5d0
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*cgroupProcsData).Write(0xc0003c61e0, {0x1dd7c30, 0xc000722a80}, 0x40f47d, {{0x1dcb3e8, 0xc000420000}, {0x0, 0x1, 0x20000080, 0xb}, ...}, ...)
	pkg/sentry/fsimpl/cgroupfs/base.go:305 +0x1c7 fp=0xc0009bb218 sp=0xc0009bb170 pc=0x112d1c7
gvisor.dev/gvisor/pkg/sentry/vfs.(*DynamicBytesFileDescriptionImpl).pwriteLocked(0xc0009342a0, {0x1dd7c30, 0xc000722a80}, {{0x1dcb3e8, 0xc000420000}, {0x0, 0x1, 0x20000080, 0xb}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description_impl_util.go:381 +0x331 fp=0xc0009bb380 sp=0xc0009bb218 pc=0x919151
gvisor.dev/gvisor/pkg/sentry/vfs.(*DynamicBytesFileDescriptionImpl).Write(0xc0009342a0, {0x1dd7c30, 0xc000722a80}, {{0x1dcb3e8, 0xc000420000}, {0x0, 0x1, 0x20000080, 0xb}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description_impl_util.go:402 +0x136 fp=0xc0009bb460 sp=0xc0009bb380 pc=0x919636
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*DynamicBytesFD).Write(0xc0009342a0, {0x1dd7c30, 0xc000722a80}, {{0x1dcb3e8, 0xc000420000}, {0x0, 0x1, 0x20000080, 0xb}, {0x0, ...}}, ...)
	pkg/sentry/fsimpl/kernfs/dynamic_bytes_file.go:125 +0xac fp=0xc0009bb4e8 sp=0xc0009bb460 pc=0xab754c
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc000934300, {0x1dd7c30, 0xc000722a80}, {{0x1dcb3e8, 0xc000420000}, {0x0, 0x1, 0x20000080, 0xb}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:665 +0x14c fp=0xc0009bb5b0 sp=0xc0009bb4e8 pc=0x913b0c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.write(0xc0009bb7c0, 0x43c865, {{0x1dcb3e8, 0xc000420000}, {0x0, 0x1, 0x20000080, 0xb}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/vfs2/read_write.go:348 +0xae fp=0xc0009bb740 sp=0xc0009bb5b0 pc=0x149296e
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.Write(0xc000722a80, {{0x4}, {0x20000080}, {0xb}, {0x0}, {0x17}, {0x7fffdac80e78}})
	pkg/sentry/syscalls/linux/vfs2/read_write.go:317 +0x36f fp=0xc0009bb8e0 sp=0xc0009bb740 pc=0x1491eef
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000722a80, 0x7fb180051c58, {{0x4}, {0x20000080}, {0xb}, {0x0}, {0x17}, {0x7fffdac80e78}})
	pkg/sentry/kernel/task_syscall.go:103 +0x411 fp=0xc0009bba88 sp=0xc0009bb8e0 pc=0xd70131
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000722a80, 0x1, {{0x4}, {0x20000080}, {0xb}, {0x0}, {0x17}, {0x7fffdac80e78}})
	pkg/sentry/kernel/task_syscall.go:238 +0x8e fp=0xc0009bbb18 sp=0xc0009bba88 pc=0xd715ae
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0007200f0, 0x1, {{0x4}, {0x20000080}, {0xb}, {0x0}, {0x17}, {0x7fffdac80e78}})
	pkg/sentry/kernel/task_syscall.go:198 +0xc5 fp=0xc0009bbb90 sp=0xc0009bbb18 pc=0xd70ea5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000722a80)
	pkg/sentry/kernel/task_syscall.go:173 +0x4a7 fp=0xc0009bbca0 sp=0xc0009bbb90 pc=0xd709c7
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000722a80, 0xc000722a80)
	pkg/sentry/kernel/task_run.go:254 +0x19dc fp=0xc0009bbeb8 sp=0xc0009bbca0 pc=0xd5b87c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000722a80, 0xc)
	pkg/sentry/kernel/task_run.go:95 +0x2d4 fp=0xc0009bbfb0 sp=0xc0009bbeb8 pc=0xd59454
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start·dwrap·236()
	pkg/sentry/kernel/task_start.go:339 +0x48 fp=0xc0009bbfe0 sp=0xc0009bbfb0 pc=0xd6de68
runtime.goexit()
	src/runtime/asm_amd64.s:1581 +0x1 fp=0xc0009bbfe8 sp=0xc0009bbfe0 pc=0x46e081
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:339 +0x1d1

Crashes (11):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/24 17:41 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:21 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:21 gvisor 9085d334deed 89bc8608 .config console log report syz C ci-gvisor-ptrace-2-race panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:21 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:20 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-kvm panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:19 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:19 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:18 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-ptrace-3-race panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 17:06 gvisor 7da1c59e773f 89bc8608 .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: invalid memory address or nil pointer dereference
2022/03/24 16:55 gvisor 7da1c59e773f 89bc8608 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: invalid memory address or nil pointer dereference
2022/03/18 15:22 gvisor 24cef0a622bb e2d91b1d .config console log report info ci-gvisor-kvm-cover panic: runtime error: invalid memory address or nil pointer dereference
* Struck through repros no longer work on HEAD.