panic: runtime error: invalid memory address or nil pointer dereference (2)

Status: fixed on 2018/10/15 18:31
Fix commit: beac59b37a8b Fix panic if FIOASYNC callback is registered and triggered without target
First crash: 2932d, last: 2912d
▶ ▼ Similar bugs (30)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 1085d 1086d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 359d 362d 26/26 fixed on 2025/09/19 06:07
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1666d 1662d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1767d 1797d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2188d 2724d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 893d 898d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 120d 120d 26/26 fixed on 2026/05/01 11:36
gvisor panic: runtime error: invalid memory address or nil pointer dereference (22) 2 1 1003d 1003d 26/26 fixed on 2023/12/01 06:13
gvisor panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1619d 1625d 14/26 fixed on 2022/03/25 11:21
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1318d 1379d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 564d 564d 26/26 fixed on 2025/02/13 10:39
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 645d 654d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 1018d 1018d 26/26 fixed on 2023/11/17 08:30
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1278d 1279d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2936d 2990d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 755d 755d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 644d 645d 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 2 92 886d 887d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1279d 1282d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1669d 1694d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 1122d 1122d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2062d 2106d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (32) 2 syz 6 61d 54d 26/26 fixed on 2026/07/07 11:38
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1387d 1481d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1060d 1074d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1031d 1038d 26/26 fixed on 2023/11/02 02:06
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1124d 1131d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 337d 338d 26/26 fixed on 2025/09/26 06:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 1171d 1171d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2123d 2141d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x68b3d6]

goroutine 182 [running]:
gvisor.googlesource.com/gvisor/pkg/sentry/mm.pmaIterator.ValuePtr(...)
	bazel-out/k8-fastbuild/bin/pkg/sentry/mm/pma_set.go:973
gvisor.googlesource.com/gvisor/pkg/sentry/mm.pmaIterator.getInternalMappingsLocked(0x0, 0x0, 0x0, 0x0)
	pkg/sentry/mm/pma.go:972 +0x26
gvisor.googlesource.com/gvisor/pkg/sentry/mm.(*MemoryManager).getPMAInternalMappingsLocked(0xc42016b900, 0xc42016bf68, 0x3, 0x20000200, 0x20001040, 0x20000000, 0x20002000, 0x1, 0xc42016bf68)
	pkg/sentry/mm/pma.go:748 +0x5d
gvisor.googlesource.com/gvisor/pkg/sentry/mm.(*MemoryManager).withInternalMappings(0xc42016b900, 0xc5afe0, 0xc4205fc000, 0x20000200, 0x20001040, 0x100, 0xc4205ab4f0, 0xc400000001, 0xc4205ab500, 0xe40)
	pkg/sentry/mm/io.go:493 +0x334
gvisor.googlesource.com/gvisor/pkg/sentry/mm.(*MemoryManager).CopyOut(0xc42016b900, 0xc5afe0, 0xc4205fc000, 0x20000200, 0xc4206a7000, 0xe40, 0x1000, 0x100, 0x1000, 0xc4205ab618, ...)
	pkg/sentry/mm/io.go:119 +0x14b
gvisor.googlesource.com/gvisor/pkg/sentry/usermem.CopyOutVec(0xc5afe0, 0xc4205fc000, 0xc59cc0, 0xc42016b900, 0x0, 0x1, 0x20000200, 0x50c7e3e3, 0xc4206a7000, 0xe40, ...)
	pkg/sentry/usermem/usermem.go:276 +0x1b0
gvisor.googlesource.com/gvisor/pkg/sentry/usermem.IOSequence.CopyOut(0xc59cc0, 0xc42016b900, 0x0, 0x1, 0x20000200, 0x50c7e3e3, 0x100, 0xc5afe0, 0xc4205fc000, 0xc4206a7000, ...)
	pkg/sentry/usermem/usermem.go:494 +0xc4
gvisor.googlesource.com/gvisor/pkg/sentry/kernel/pipe.(*Pipe).read(0xc4202bd400, 0xc5afe0, 0xc4205fc000, 0xc59cc0, 0xc42016b900, 0x0, 0x1, 0x20000200, 0x50c7e3e3, 0x100, ...)
	pkg/sentry/kernel/pipe/pipe.go:186 +0x249
gvisor.googlesource.com/gvisor/pkg/sentry/kernel/pipe.(*ReaderWriter).Read(0xc42000c0d0, 0xc5afe0, 0xc4205fc000, 0xc4205ce7e0, 0xc59cc0, 0xc42016b900, 0x0, 0x1, 0x20000200, 0x50c7e3e3, ...)
	pkg/sentry/kernel/pipe/reader_writer.go:55 +0x8a
gvisor.googlesource.com/gvisor/pkg/sentry/fs.(*File).Readv(0xc4205ce7e0, 0xc5afe0, 0xc4205fc000, 0xc59cc0, 0xc42016b900, 0x0, 0x1, 0x20000200, 0x50c7e3e3, 0x100, ...)
	pkg/sentry/fs/file.go:232 +0x116
gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.readv(0xc4205fc000, 0xc4205ce7e0, 0xc59cc0, 0xc42016b900, 0x0, 0x1, 0x20000200, 0x50c7e3e3, 0x100, 0x50c7e3e3, ...)
	pkg/sentry/syscalls/linux/sys_read.go:191 +0x91
gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.Read(0xc4205fc000, 0x4, 0x20000200, 0x50c7e3e3, 0x0, 0x4002e0, 0x4002e0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/sys_read.go:67 +0x21e
gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc4205fc000, 0x0, 0x4, 0x20000200, 0x50c7e3e3, 0x0, 0x4002e0, 0x4002e0, 0x4321bb, 0xb9b360, ...)
	pkg/sentry/kernel/task_syscall.go:162 +0x307
gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc4205fc000, 0x0, 0x4, 0x20000200, 0x50c7e3e3, 0x0, 0x4002e0, 0x4002e0, 0x4002e0, 0x4002e0)
	pkg/sentry/kernel/task_syscall.go:280 +0x62
gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc4205fc000, 0x0, 0x4, 0x20000200, 0x50c7e3e3, 0x0, 0x4002e0, 0x4002e0, 0x86d270, 0xc420220f68)
	pkg/sentry/kernel/task_syscall.go:241 +0x91
gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc4205fc000, 0x2, 0xc420454480)
	pkg/sentry/kernel/task_syscall.go:216 +0x142
gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc4205fc000, 0xc4de60, 0x0)
	pkg/sentry/kernel/task_run.go:219 +0xe56
gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).run(0xc4205fc000, 0x8)
	pkg/sentry/kernel/task_run.go:95 +0x174
created by gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:258 +0x100

Crashes (4493):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/21 15:33 https://gvisor.googlesource.com/gvisor master 47d5a12ce565 95b5c82b .config console log report syz C ci-gvisor-kvm-direct-sandbox
2018/08/21 15:19 https://gvisor.googlesource.com/gvisor master 47d5a12ce565 95b5c82b .config console log report syz C ci-gvisor-kvm-direct-sandbox
2018/08/21 07:43 https://gvisor.googlesource.com/gvisor master 0fc7b306959e 95b5c82b .config console log report syz C ci-gvisor-kvm-direct-sandbox
2018/08/21 07:05 https://gvisor.googlesource.com/gvisor master 0fc7b306959e 95b5c82b .config console log report syz C ci-gvisor-kvm-proxy-overlay-sandbox
2018/08/19 15:02 https://gvisor.googlesource.com/gvisor master 11800311a537 2dc4378f .config console log report syz C ci-gvisor-main
2018/08/19 12:44 https://gvisor.googlesource.com/gvisor master 11800311a537 2dc4378f .config console log report syz C ci-gvisor-ptrace-direct-overlay-host
2018/08/19 16:28 https://github.com/dvyukov/gvisor.git race e9355e64d1a8 2dc4378f .config console log report syz C ci-gvisor-ptrace-proxy-sandbox-race
2018/08/19 11:29 https://github.com/dvyukov/gvisor.git race d4d5ed1d9def 2dc4378f .config console log report syz C ci-gvisor-kvm-direct-overlay-host-race
2018/09/08 11:48 https://gvisor.googlesource.com/gvisor master ae648bafda2d 6b5120a4 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 10:47 https://gvisor.googlesource.com/gvisor master ae648bafda2d 6b5120a4 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 09:44 https://gvisor.googlesource.com/gvisor master ae648bafda2d 6b5120a4 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 08:42 https://gvisor.googlesource.com/gvisor master ae648bafda2d 6b5120a4 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 07:51 https://gvisor.googlesource.com/gvisor master 590d8320992d 6b5120a4 .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/08 06:47 https://gvisor.googlesource.com/gvisor master ae648bafda2d 6b5120a4 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 04:42 https://gvisor.googlesource.com/gvisor master ae648bafda2d 6b5120a4 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 03:00 https://gvisor.googlesource.com/gvisor master 590d8320992d 69cfeb80 .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/08 02:03 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/08 00:51 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 23:43 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 22:11 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 21:54 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 20:50 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 19:34 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 18:28 https://gvisor.googlesource.com/gvisor master 590d8320992d 69cfeb80 .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/07 16:54 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 16:29 https://gvisor.googlesource.com/gvisor master ae648bafda2d 69cfeb80 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 14:29 https://gvisor.googlesource.com/gvisor master d95663a6b983 e30d3b52 .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/07 13:20 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 11:55 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 11:50 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 10:47 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 09:11 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 07:43 https://gvisor.googlesource.com/gvisor master d95663a6b983 e30d3b52 .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/07 06:42 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 05:27 https://gvisor.googlesource.com/gvisor master d95663a6b983 e30d3b52 .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/07 04:53 https://gvisor.googlesource.com/gvisor master ae648bafda2d e30d3b52 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 03:23 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 02:14 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 01:58 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/07 00:43 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/06 23:27 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/06 22:46 https://gvisor.googlesource.com/gvisor master d95663a6b983 0bb7a7eb .config console log report ci-gvisor-kvm-direct-sandbox
2018/09/06 21:14 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/06 19:43 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/06 18:48 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/06 17:10 https://gvisor.googlesource.com/gvisor master ae648bafda2d 0bb7a7eb .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/09/06 14:15 https://gvisor.googlesource.com/gvisor master ae648bafda2d 873745f2 .config console log report ci-gvisor-ptrace-direct-overlay-host
2018/08/29 21:22 https://gvisor.googlesource.com/gvisor master 2524111fc633 4937cb2b .config console log report ci-gvisor-main
2018/08/29 00:02 https://gvisor.googlesource.com/gvisor master b17e80ef5a44 b771b17e .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2018/08/30 00:16 https://github.com/dvyukov/gvisor.git race d4d5ed1d9def 4937cb2b .config console log report ci-gvisor-kvm-direct-overlay-host-race
2018/08/29 23:56 https://github.com/dvyukov/gvisor.git race d4d5ed1d9def 4937cb2b .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2018/08/19 05:50 https://github.com/dvyukov/gvisor.git race d4d5ed1d9def 4e1e8035 .config console log report ci-gvisor-kvm-direct-overlay-host-race
* Struck through repros no longer work on HEAD.