syzbot


panic: runtime error: invalid memory address or nil pointer dereference (21)

Status: fixed on 2023/11/17 08:30
Fix commit: 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
First crash: 377d, last: 377d
Similar bugs (25)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 4 444d 445d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) C 262 1025d 1021d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) C 45305 1126d 1155d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) C 20051 1547d 2083d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) C 4239 252d 257d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (22) 1 362d 362d 26/26 fixed on 2023/12/01 06:13
gvisor panic: runtime error: invalid memory address or nil pointer dereference (10) C 11 977d 983d 14/26 fixed on 2022/03/25 11:21
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) C 31 676d 738d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) C 7905 4d13h 13d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) C 753 637d 638d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference C 20682 2295d 2348d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 1 114d 114d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) C 1117 3d02h 4d12h 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 92 245d 246d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) C 2752 638d 641d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) C 214 1028d 1053d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (2) C 4493 2271d 2291d 0/26 fixed on 2018/10/15 18:31
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 480d 480d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) syz 62 1421d 1465d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) C 2733 746d 840d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) C 79 419d 433d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (20) C 8 390d 397d 26/26 fixed on 2023/11/02 02:06
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) C 48 483d 490d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 1 530d 530d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) C 4 1481d 1500d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x80 pc=0x85aefa]

goroutine 4019148 [running]:
panic({0x1054900?, 0x1e35b20?})
	GOROOT/src/runtime/panic.go:1017 +0x3ac fp=0xc00ab24e48 sp=0xc00ab24d98 pc=0x43a72c
runtime.panicmem(...)
	GOROOT/src/runtime/panic.go:261
runtime.sigpanic()
	GOROOT/src/runtime/signal_unix.go:861 +0x378 fp=0xc00ab24ea8 sp=0xc00ab24e48 pc=0x451f38
gvisor.dev/gvisor/pkg/lisafs.(*ClientFD).Read(0xc00ab24f98?, {0x1442be8?, 0xc00a19b9b0?}, {0x7efd2d26b000?, 0x3000?, 0x10a9e80?}, 0x10000000100?)
	pkg/lisafs/client_file.go:163 +0x3a fp=0xc00ab24f30 sp=0xc00ab24ea8 pc=0x85aefa
gvisor.dev/gvisor/pkg/sentry/fsimpl/gofer.(*handleReadWriter).Read(0xc0033ef560, {0x7efd2d26b000?, 0xc00485a000?, 0x0?})
	pkg/sentry/fsimpl/gofer/handle.go:133 +0x45 fp=0xc00ab24f78 sp=0xc00ab24f30 pc=0xdbdae5
gvisor.dev/gvisor/pkg/safemem.FromIOReader.readToBlock({{0x1427760?, 0xc0033ef560?}}, {0x7efd2d26b000?, 0xc0033ef560?, 0x0?}, {0x0, 0x0, 0x0})
	pkg/safemem/io.go:196 +0x17c fp=0xc00ab25000 sp=0xc00ab24f78 pc=0x6d51dc
gvisor.dev/gvisor/pkg/safemem.FromIOReader.ReadToBlocks({{0x1427760?, 0xc0033ef560?}}, {0x7efd2d26b000?, 0x0?, 0xb?, 0x1b2ec20000?})
	pkg/safemem/io.go:176 +0xf6 fp=0xc00ab250b8 sp=0xc00ab25000 pc=0x6d4f16
gvisor.dev/gvisor/pkg/sentry/fsimpl/gofer.(*handle).readToBlocksAt(0xc00a19b9c8, {0x1442be8?, 0xc00a19b9b0}, {0x7efd2d26b000?, 0xc000914000?, 0xc00ab25228?, 0x79abc5?}, 0x7f000)
	pkg/sentry/fsimpl/gofer/handle.go:62 +0x172 fp=0xc00ab25178 sp=0xc00ab250b8 pc=0xdbd2d2
gvisor.dev/gvisor/pkg/sentry/fsimpl/gofer.(*handle).readToBlocksAt-fm({0x1442be8?, 0xc00a19b9b0?}, {0x7efd2d26b000?, 0x7ecdbb54c000?, 0xc00ab25268?, 0x790015?}, 0x7efd2d26b000?)
	<autogenerated>:1 +0x4b fp=0xc00ab251c8 sp=0xc00ab25178 pc=0xddcb0b
gvisor.dev/gvisor/pkg/sentry/fsutil.(*FileRangeSet).Fill.func1.1(0x78e185?, 0x40000000?, 0xdd5c000?, 0xdd63000?, 0xc003790000?, {0x1442be8?, 0xc00a19b9b0?})
	pkg/sentry/fsutil/file_range_set.go:148 +0xd8 fp=0xc00ab25218 sp=0xc00ab251c8 pc=0x7ad698
gvisor.dev/gvisor/pkg/sentry/fsutil.(*FileRangeSet).Fill.func1({0x7efd2d26b000, 0xffffffffffffffff, 0x0, 0x7000})
	pkg/sentry/fsutil/file_range_set.go:149 +0xa9 fp=0xc00ab252a8 sp=0xc00ab25218 pc=0x7ad449
gvisor.dev/gvisor/pkg/safemem.ReaderFunc.ReadToBlocks(0xc00ab25308?, {0x7efd2d26b000?, 0xc00ab25328?, 0x78eb69?, 0x7efd2d26b000?})
	pkg/safemem/io.go:121 +0x28 fp=0xc00ab252d8 sp=0xc00ab252a8 pc=0x6d4d48
gvisor.dev/gvisor/pkg/safemem.ReadFullToBlocks({0x1426320, 0xc00be071d0}, {0x7efd2d26b000?, 0x1e1caa0?, 0x0?, 0x0?})
	pkg/safemem/io.go:54 +0x94 fp=0xc00ab25338 sp=0xc00ab252d8 pc=0x6d4a34
gvisor.dev/gvisor/pkg/sentry/pgalloc.(*MemoryFile).Allocate(0xc00083c270?, 0x7000, {0x2, 0x0, 0x0, 0x2, {0x1426320, 0xc00be071d0}})
	pkg/sentry/pgalloc/pgalloc.go:521 +0x24a fp=0xc00ab25410 sp=0xc00ab25338 pc=0x78d9ca
gvisor.dev/gvisor/pkg/sentry/fsutil.(*FileRangeSet).Fill(0x0?, {0x1442be8, 0xc00a19b9b0}, {0x0?, 0xf?}, {0x0?, 0x0?}, 0x1993a0, 0xe?, 0x2, ...)
	pkg/sentry/fsutil/file_range_set.go:172 +0x313 fp=0xc00ab254f0 sp=0xc00ab25410 pc=0x7ad233
gvisor.dev/gvisor/pkg/sentry/fsimpl/gofer.(*dentry).Translate(0xc00083c000, {0x1442be8, 0xc00a19b9b0}, {0x107b3000?, 0x1435958?}, {0xc00046a800?, 0x10793000?}, {0x1, 0x0, 0x0})
	pkg/sentry/fsimpl/gofer/regular_file.go:797 +0x4ee fp=0xc00ab25678 sp=0xc00ab254f0 pc=0xdc6eae
gvisor.dev/gvisor/pkg/sentry/mm.(*MemoryManager).getPMAsInternalLocked(0xc0061af000, {0x1442be8, 0xc00a19b9b0}, {0xc0055e4800?, 0xc0055e4800?}, {0x0?, 0x10000000000?}, {0x1, 0x0, 0x0})
	pkg/sentry/mm/pma.go:282 +0x1613 fp=0xc00ab25af0 sp=0xc00ab25678 pc=0x814df3
gvisor.dev/gvisor/pkg/sentry/mm.(*MemoryManager).getPMAsLocked(0x0?, {0x1442be8?, 0xc00a19b9b0?}, {0xc0055e4800?, 0x1418428?}, {0xc00ab25c18?, 0x7efd0b59cf68?}, {0x1, 0x0, 0x0})
	pkg/sentry/mm/pma.go:125 +0xb4 fp=0xc00ab25b80 sp=0xc00ab25af0 pc=0x813254
gvisor.dev/gvisor/pkg/sentry/mm.(*MemoryManager).withInternalMappings(0xc0061af000, {0x1442be8, 0xc00a19b9b0}, {0x18?, 0xc000560c00?}, {0xb0?, 0xb9?, 0x19?}, 0xa?, 0xc00ab25cb8)
	pkg/sentry/mm/io.go:542 +0x2e5 fp=0xc00ab25c80 sp=0xc00ab25b80 pc=0x80df05
gvisor.dev/gvisor/pkg/sentry/mm.(*MemoryManager).CopyIn(0x7efda73f61d8?, {0x1442be8?, 0xc00a19b9b0?}, 0xc0044e3180?, {0xc004c2b64e?, 0xc00ab25d48?, 0x410765?}, {0x80?, 0x0?})
	pkg/sentry/mm/io.go:163 +0xdf fp=0xc00ab25cf8 sp=0xc00ab25c80 pc=0x80bd5f
gvisor.dev/gvisor/pkg/sentry/platform.TryCPUIDEmulate({0x1442c78?, 0xc007646000}, {0x143dea0, 0xc0061af000}, 0xc00a4dbb30)
	pkg/sentry/platform/cpuid_amd64.go:52 +0xcb fp=0xc00ab25d58 sp=0xc00ab25cf8 pc=0x7031cb
gvisor.dev/gvisor/pkg/sentry/platform/systrap.(*context).Switch(0xc008a44680, {0x1442c78, 0xc007646000}, {0x143dea0, 0xc0061af000}, 0xc00a4dbb30, 0x0?)
	pkg/sentry/platform/systrap/systrap.go:249 +0x68b fp=0xc00ab25e10 sp=0xc00ab25d58 pc=0xce400b
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc004166b00?, 0xc007646000)
	pkg/sentry/kernel/task_run.go:252 +0x837 fp=0xc00ab25f48 sp=0xc00ab25e10 pc=0x987397
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc007646000, 0xe305)
	pkg/sentry/kernel/task_run.go:98 +0x1ef fp=0xc00ab25fc0 sp=0xc00ab25f48 pc=0x9864af
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.func1()
	pkg/sentry/kernel/task_start.go:391 +0x25 fp=0xc00ab25fe0 sp=0xc00ab25fc0 pc=0x991525
runtime.goexit()
	src/runtime/asm_amd64.s:1650 +0x1 fp=0xc00ab25fe8 sp=0xc00ab25fe0 pc=0x471241
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 502
	pkg/sentry/kernel/task_start.go:391 +0xe5

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/15 09:34 gvisor 3ab01aedb874 cb976f63 console log report info ci-gvisor-systrap-1 panic: runtime error: invalid memory address or nil pointer dereference
* Struck through repros no longer work on HEAD.