syzbot


panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (2)

Status: fixed on 2024/12/16 21:08
Fix commit: c27c9a02aef5 kernel: use the kernel context to run task destroy actions
First crash: 70d, last: 69d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) 1 200d 200d 26/26 fixed on 2024/08/07 22:01

Sample crash report:
panic: running on goroutine 96 (task goroutine for kernel.Task 0xc000999908 is 0)

goroutine 96 gp=0xc0008a8e00 m=13 mp=0xc000a80008 [running]:
panic({0x1beb780?, 0xc000a1e980?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc0009ab558 sp=0xc0009ab4a8 pc=0x478628
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc000999908)
	pkg/sentry/kernel/task_run.go:368 +0x14e fp=0xc0009ab5d8 sp=0xc0009ab558 pc=0xfdbdee
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Value(0xc000999908, {0x1bed040, 0x2045f88})
	pkg/sentry/kernel/task_context.go:59 +0x57 fp=0xc0009ab618 sp=0xc0009ab5d8 pc=0xfbce37
gvisor.dev/gvisor/pkg/sentry/kernel.KernelFromContext({0x2073ac0, 0xc000999908})
	pkg/sentry/kernel/context.go:55 +0x5b fp=0xc0009ab650 sp=0xc0009ab618 pc=0xf63c7b
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*filesystem).Release(0xc000aa6b40, {0x2073ac0, 0xc000999908})
	pkg/sentry/fsimpl/cgroupfs/cgroupfs.go:468 +0x4b fp=0xc0009ab6b0 sp=0xc0009ab650 pc=0x171d0ab
gvisor.dev/gvisor/pkg/sentry/vfs.(*Filesystem).DecRef.func1()
	pkg/sentry/vfs/filesystem.go:81 +0x11f fp=0xc0009ab708 sp=0xc0009ab6b0 pc=0xb16c5f
gvisor.dev/gvisor/pkg/sentry/vfs.(*FilesystemRefs).DecRef(0xc000aa6b40, 0xc0009ab790)
	bazel-out/k8-fastbuild/bin/pkg/sentry/vfs/filesystem_refs.go:133 +0xb4 fp=0xc0009ab780 sp=0xc0009ab708 pc=0xb17774
gvisor.dev/gvisor/pkg/sentry/vfs.(*Filesystem).DecRef(0xc000aa6b40, {0x2073ac0, 0xc000999908})
	pkg/sentry/vfs/filesystem.go:77 +0xa5 fp=0xc0009ab7c0 sp=0xc0009ab780 pc=0xb16b05
gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).unlockMounts(0xc0002cf1e0, {0x2073ac0, 0xc000999908})
	pkg/sentry/vfs/vfs.go:1050 +0x2b0 fp=0xc0009ab890 sp=0xc0009ab7c0 pc=0xb4aa70
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy.deferwrap1()
	pkg/sentry/vfs/mount.go:949 +0x50 fp=0xc0009ab8d0 sp=0xc0009ab890 pc=0xb27a50
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc0009ab960 sp=0xc0009ab8d0 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy(0xc00079c420, {0x2073ac0, 0xc000999908})
	pkg/sentry/vfs/mount.go:979 +0x8cc fp=0xc0009abad8 sp=0xc0009ab960 pc=0xb2796c
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).DecRef(0xc00079c420, {0x2073ac0, 0xc000999908})
	pkg/sentry/vfs/mount.go:943 +0xca fp=0xc0009abb08 sp=0xc0009abad8 pc=0xb2706a
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).processDeferredDecRefs.deferwrap1()
	pkg/sentry/fsimpl/kernfs/kernfs.go:182 +0x62 fp=0xc0009abb50 sp=0xc0009abb08 pc=0xc94e22
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc0009abbe0 sp=0xc0009abb50 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).processDeferredDecRefs(0xc0006a60c0, {0x2073ac0, 0xc000999908})
	pkg/sentry/fsimpl/kernfs/kernfs.go:186 +0x205 fp=0xc0009abc40 sp=0xc0009abbe0 pc=0xc94d85
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).Invalidate.deferwrap1()
	pkg/sentry/fsimpl/kernfs/kernfs.go:323 +0x50 fp=0xc0009abc80 sp=0xc0009abc40 pc=0xc95a70
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc0009abd10 sp=0xc0009abc80 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).Invalidate(0xc000265320, {0x2073ac0, 0xc000999908})
	pkg/sentry/fsimpl/kernfs/kernfs.go:339 +0x42d fp=0xc0009abe30 sp=0xc0009abd10 pc=0xc9592d
gvisor.dev/gvisor/pkg/sentry/fsimpl/proc.(*taskInode).TaskDestroyAction(0xc000bfb408, {0x2073ac0, 0xc000999908})
	pkg/sentry/fsimpl/proc/task.go:130 +0x18d fp=0xc0009abee0 sp=0xc0009abe30 pc=0x13ce52d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).execOnDestroyActions.func1()
	pkg/sentry/kernel/task_exit.go:807 +0x1ad fp=0xc0009abfe0 sp=0xc0009abee0 pc=0xfc736d
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0009abfe8 sp=0xc0009abfe0 pc=0x4819a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).execOnDestroyActions in goroutine 262
	pkg/sentry/kernel/task_exit.go:804 +0x1f1

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/13 18:08 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-ptrace-1-race-cover panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 18:04 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-ptrace-3-race-cover panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 18:03 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-systrap-1-race-cover panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 18:02 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-ptrace-1-race panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 18:02 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-ptrace-2-race panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 18:00 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-systrap-1-race panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 17:55 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-ptrace-3-race panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 17:42 gvisor 9fcf0b5b5360 7d3b55db .config console log report syz / log C ci-gvisor-ptrace-2-race-cover panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
2024/12/13 17:17 gvisor 9fcf0b5b5360 7d3b55db .config console log report info ci-gvisor-ptrace-2-race-cover panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
* Struck through repros no longer work on HEAD.