syzbot


panic: runtime error: invalid memory address or nil pointer dereference (3)

Status: auto-closed as invalid on 2020/10/29 10:40
Reported-by: syzbot+ec837fcdce61873388a4@syzkaller.appspotmail.com
First crash: 1631d, last: 1365d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: runtime error: invalid memory address or nil pointer dereference (4) 2753 1135d 1135d 0/3 closed as invalid on 2021/03/18 11:28
openbsd panic: runtime error: invalid memory address or nil pointer dereference (8) 1 685d 685d 0/3 closed as invalid on 2022/06/17 01:56
openbsd panic: runtime error: invalid memory address or nil pointer dereference (5) 10821 1134d 1135d 0/3 closed as invalid on 2021/03/22 12:20
openbsd panic: runtime error: invalid memory address or nil pointer dereference (2) 1 1633d 1633d 0/3 closed as invalid on 2019/11/06 08:14
openbsd panic: runtime error: invalid memory address or nil pointer dereference (7) 1 850d 850d 0/3 auto-closed as invalid on 2022/03/28 14:56
openbsd panic: runtime error: invalid memory address or nil pointer dereference (6) 276 1082d 1082d 0/3 closed as invalid on 2021/05/10 12:07
openbsd panic: runtime error: invalid memory address or nil pointer dereference 1 1642d 1642d 0/3 closed as invalid on 2019/10/28 07:09
openbsd panic: runtime error: invalid memory address or nil pointer dereference (9) 4 10d 37d 0/3 upstream: reported on 2024/03/20 12:51

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x28 pc=0x79434f]

goroutine 11 [running]:
github.com/google/syzkaller/prog.clone(0x98ee80, 0xc000181290, 0xc000550dc8, 0xc002f63720, 0xc001f579e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:71 +0x60f
github.com/google/syzkaller/prog.(*Prog).Clone(0xc000179740, 0x8f3c34)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:24 +0x27a
github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc001c127a0, 0xc001af05a0, 0xbf6d00, 0x0, 0x897d00, 0x200000001, 0xc001b47c20, 0xc000551068, 0x7b46fe)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:839 +0xc5
github.com/google/syzkaller/prog.(*ResourceType).generate(0xbf6d00, 0xc001c127a0, 0xc001af05a0, 0xc0017f2600, 0x98ed80, 0xc001b47c20, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:669 +0x285
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc001c127a0, 0xc001af05a0, 0x993aa0, 0xbf6d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x40b
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc001c127a0, 0xc001af05a0, 0xc8e160, 0xc, 0xc, 0x203000, 0x203000, 0x203000, 0x203000, 0x0, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x113
github.com/google/syzkaller/prog.(*StructType).generate(0xc037a0, 0xc001c127a0, 0xc001af05a0, 0x0, 0xcdc800, 0x23969e7d0, 0xc00003e800, 0x23969e7d0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc001c127a0, 0xc001af05a0, 0x993b80, 0xc037a0, 0xc002f60000, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x40b
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc001c127a0, 0xc001af05a0, 0xbfef40, 0x2, 0x2, 0x203000, 0x203000, 0x0, 0x0, 0x0, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x113
github.com/google/syzkaller/prog.(*StructType).generate(0xc03980, 0xc001c127a0, 0xc001af05a0, 0x0, 0xcdc800, 0xc000551510, 0x4fc693, 0xc002cdf500, 0x29ac336dbda00c5f)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc001c127a0, 0xc001af05a0, 0x993b80, 0xc03980, 0xc0013f0000, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x40b
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608
github.com/google/syzkaller/prog.(*UnionType).generate(0xbfe980, 0xc001c127a0, 0xc001af05a0, 0x0, 0xcdc800, 0xc001af92e0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:788 +0xbf
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc001c127a0, 0xc001af05a0, 0x993c60, 0xbfe980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x40b
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc001c127a0, 0xc001af05a0, 0xbfe940, 0x2, 0x2, 0x0, 0x203000, 0xc0005517f0, 0x40de78, 0x10, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x113
github.com/google/syzkaller/prog.(*StructType).generate(0xc02480, 0xc001c127a0, 0xc001af05a0, 0x0, 0xcdc800, 0xc001b47a70, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc001c127a0, 0xc001af05a0, 0x993b80, 0xc02480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x40b
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc001c127a0, 0xc001af05a0, 0xbfe680, 0x2, 0x2, 0xc000108b00, 0xbfd440, 0xc001b49c70, 0x84a560, 0xc000108bc0, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x113
github.com/google/syzkaller/prog.(*StructType).generate(0xc01040, 0xc001c127a0, 0xc001af05a0, 0x0, 0xcdc800, 0x91b090, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc001c127a0, 0xc001af05a0, 0x993b80, 0xc01040, 0xcd0000, 0x0, 0x0, 0x0, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x40b
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608
github.com/google/syzkaller/prog.(*UnionType).mutate(0xbfe5c0, 0xc001c127a0, 0xc001af05a0, 0x98eec0, 0xc0019d4ac0, 0xc0019d4808, 0xbf5360, 0x1, 0x1, 0xc001a71500, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:457 +0x18b
github.com/google/syzkaller/prog.(*Target).mutateArg(0xc000075520, 0xc001c127a0, 0xc001af05a0, 0x98eec0, 0xc0019d4ac0, 0xc0019d4808, 0xbf5360, 0x1, 0x1, 0xc001a71500, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:229 +0xec
github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc000551ec0, 0xa)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:182 +0x275
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc001b49bc0, 0x988ac0, 0xc002b32cc0, 0x14, 0xc00291bf00, 0xc00137c000, 0x26ad, 0x3000)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:47 +0x330
main.(*Proc).loop(0xc002958000)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x3e5
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:267 +0x1175


OpenBSD/amd64 (ci-openbsd-multicore-1.c.syzkaller.internal) (tty00)

login: 

Crashes (28):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/31 10:39 openbsd b767a9add6bd 8df85ed9 .config console log report ci-openbsd-multicore
2020/07/23 03:34 openbsd fad015d206fd 340ea530 .config console log report ci-openbsd-main
2020/07/02 14:50 openbsd b1b451713294 bed10395 .config console log report ci-openbsd-multicore
2020/06/26 21:44 openbsd d8c65c0d1302 b202c7a8 .config console log report ci-openbsd-multicore
2020/06/23 01:17 openbsd 4d943fd61ab7 1afe1535 .config console log report ci-openbsd-main
2020/06/15 13:11 openbsd 2207d07413d2 8e3ab941 .config console log report ci-openbsd-multicore
2020/06/11 20:03 openbsd 39a863a0a5ba 5c25fdab .config console log report ci-openbsd-multicore
2020/06/11 06:00 openbsd 470a8ce0996f 3ab7a05a .config console log report ci-openbsd-main
2020/06/04 04:05 openbsd 02c5bef54a61 b0d1c0d5 .config console log report ci-openbsd-main
2020/05/14 00:31 openbsd e059df187fca a885920d .config console log report ci-openbsd-main
2020/04/30 09:51 openbsd 577c7898896a 2dd552a5 .config console log report ci-openbsd-main
2020/04/21 07:18 openbsd 4f217ef055e2 98a9f9e6 .config console log report ci-openbsd-main
2020/04/12 18:34 openbsd 616e219ab9b7 36b0b050 .config console log report ci-openbsd-main
2020/03/24 18:45 openbsd e6666952b701 68660b21 .config console log report ci-openbsd-main
2020/03/06 07:09 openbsd 17a1c5d6e306 b655d91b .config console log report ci-openbsd-multicore
2020/02/23 19:39 openbsd 49c609622354 2c36e7a7 .config console log report ci-openbsd-main
2020/02/20 09:08 openbsd d4c391f3b98c b690a6e3 .config console log report ci-openbsd-main
2020/02/13 05:18 openbsd 4f72d6edf4ac 84f4fc8a .config console log report ci-openbsd-main
2020/02/10 21:24 openbsd 431e362e062d 18847f55 .config console log report ci-openbsd-multicore
2020/02/09 01:37 openbsd dd2e81b7e835 06150bf1 .config console log report ci-openbsd-main
2020/01/30 04:13 openbsd c9ac349a8ef5 5ed23f9a .config console log report ci-openbsd-main
2020/01/29 12:00 openbsd 23b78d59dd06 c8e81ce4 .config console log report ci-openbsd-main
2020/01/15 20:56 openbsd baa66dbe09e9 069a5a44 .config console log report ci-openbsd-main
2020/01/12 02:06 openbsd 3c025a5e8658 4c04afaa .config console log report ci-openbsd-multicore
2019/12/11 18:37 openbsd 548054a96d3d 0d368675 .config console log report ci-openbsd-main
2019/11/21 01:39 openbsd ddfcd1cc9cf3 8098ea0f .config console log report ci-openbsd-multicore
2019/11/14 01:25 openbsd 39b7db2742d3 048f2d49 .config console log report ci-openbsd-main
2019/11/08 06:04 openbsd 9b3feccb14f9 f39aff9e .config console log report ci-openbsd-multicore
* Struck through repros no longer work on HEAD.