syzbot


panic: runtime error: invalid memory address or nil pointer dereference (20)

Status: fixed on 2023/11/02 02:06
Fix commit: 429f7c439616 Move rootfs check to inside mountMu.
First crash: 674d, last: 667d
Similar bugs (26)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 721d 722d 26/26 fixed on 2023/09/13 00:17
gvisor panic: runtime error: invalid memory address or nil pointer dereference (9) 2 C 262 1302d 1298d 14/26 fixed on 2022/02/10 01:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (7) 2 C 45305 1403d 1432d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: invalid memory address or nil pointer dereference (3) 2 C 20051 1824d 2360d 0/26 fixed on 2020/09/09 05:34
gvisor panic: runtime error: invalid memory address or nil pointer dereference (23) 2 C 4239 529d 534d 26/26 fixed on 2024/03/19 11:42
gvisor panic: runtime error: invalid memory address or nil pointer dereference (22) 2 1 639d 639d 26/26 fixed on 2023/12/01 06:13
gvisor panic: runtime error: invalid memory address or nil pointer dereference (10) 2 C 11 1254d 1260d 14/26 fixed on 2022/03/25 11:21
gvisor panic: runtime error: invalid memory address or nil pointer dereference (12) 2 C 31 953d 1015d 18/26 fixed on 2023/01/23 05:20
gvisor panic: runtime error: invalid memory address or nil pointer dereference (28) 2 C 21 200d 200d 26/26 fixed on 2025/02/13 10:39
gvisor panic: runtime error: invalid memory address or nil pointer dereference (26) 2 C 7905 281d 290d 26/26 fixed on 2024/11/22 02:29
gvisor panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 654d 654d 26/26 fixed on 2023/11/17 08:30
gvisor panic: runtime error: invalid memory address or nil pointer dereference (14) 2 C 753 914d 915d 18/26 fixed on 2023/02/28 09:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference 2 C 20682 2572d 2626d 0/26 fixed on 2018/08/19 04:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 391d 391d 26/26 fixed on 2024/08/06 09:03
gvisor panic: runtime error: invalid memory address or nil pointer dereference (27) 2 C 1117 280d 281d 26/26 fixed on 2024/11/23 14:37
gvisor panic: runtime error: invalid memory address or nil pointer dereference (24) 2 92 522d 523d 0/26 closed as invalid on 2024/03/26 13:32
gvisor panic: runtime error: invalid memory address or nil pointer dereference (13) 2 C 2752 915d 918d 18/26 fixed on 2023/02/27 08:23
gvisor panic: runtime error: invalid memory address or nil pointer dereference (8) 2 C 214 1305d 1330d 14/26 fixed on 2022/02/01 22:27
gvisor panic: runtime error: invalid memory address or nil pointer dereference (2) 2 C 4493 2548d 2568d 0/26 fixed on 2018/10/15 18:31
gvisor panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 757d 757d 26/26 fixed on 2023/08/04 01:52
gvisor panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 1698d 1742d 14/26 fixed on 2021/01/06 10:11
gvisor panic: runtime error: invalid memory address or nil pointer dereference (11) 2 C 2733 1023d 1117d 14/26 fixed on 2022/11/11 17:56
gvisor panic: runtime error: invalid memory address or nil pointer dereference (19) 2 C 79 696d 710d 26/26 fixed on 2023/10/05 23:05
gvisor panic: runtime error: invalid memory address or nil pointer dereference (16) 2 C 48 760d 767d 26/26 fixed on 2023/08/02 12:57
gvisor panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 807d 807d 26/26 fixed on 2023/07/12 19:22
gvisor panic: runtime error: invalid memory address or nil pointer dereference (4) 2 C 4 1758d 1777d 0/26 fixed on 2020/11/13 09:22

Sample crash report:
panic: runtime error: invalid memory address or nil pointer dereference
	panic: nested locking: vfs.virtualFilesystemMutex:
goroutine 407 [running]:
gvisor.dev/gvisor/pkg/sentry/vfs.(*virtualFilesystemMutex).Lock(0xc0001de1d8)
	bazel-out/k8-fastbuild-ST-3dcbe13c9b87/bin/pkg/sentry/vfs/virtual_filesystem_mutex.go:33 +0x3c
gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).lockMounts(...)
	pkg/sentry/vfs/vfs.go:1013
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy(0xc0004a64d0, {0x7eb838, 0xc0004d6000})
	pkg/sentry/vfs/mount.go:820 +0x66
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).DecRef(0xc0004a64d0, {0x7eb838, 0xc0004d6000})
	pkg/sentry/vfs/mount.go:815 +0x79
gvisor.dev/gvisor/pkg/sentry/vfs.VirtualDentry.DecRef({0xc0004a64d0?, 0xc000b1a800?}, {0x7eb838, 0xc0004d6000})
	pkg/sentry/vfs/vfs.go:1086 +0x85
panic({0x30b000?, 0x260b600?})
	GOROOT/src/runtime/panic.go:920 +0x270
gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).PivotRoot(0xc0001de1d8, {0x7eb838?, 0xc0004d6000}, 0xc0007d7000?, 0xc00019f100?, 0x7?)
	pkg/sentry/vfs/mount.go:1058 +0x86f
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.PivotRoot(0xc0004d6000, 0xc00067f598?, {{0x20000280}, {0x200002c0}, {0x55db45fc80c6}, {0x0}, {0x7f0e10830a87}, {0x0}})
	pkg/sentry/syscalls/linux/sys_file.go:425 +0x365
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0004d6000, 0x9b, {{0x20000280}, {0x200002c0}, {0x55db45fc80c6}, {0x0}, {0x7f0e10830a87}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:142 +0x8b5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0004d6000, 0x2525b60?, {{0x20000280}, {0x200002c0}, {0x55db45fc80c6}, {0x0}, {0x7f0e10830a87}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:322 +0x6c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00067fb58?, 0x208a459?, {{0x20000280}, {0x200002c0}, {0x55db45fc80c6}, {0x0}, {0x7f0e10830a87}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:282 +0x87
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0004d6000)
	pkg/sentry/kernel/task_syscall.go:257 +0x4f0
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0004d6000?, 0xc0004d6000)
	pkg/sentry/kernel/task_run.go:269 +0x1e08
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0004d6000, 0x22)
	pkg/sentry/kernel/task_run.go:98 +0x43b
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 378
	pkg/sentry/kernel/task_start.go:391 +0x1ae

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/01 18:12 gvisor 4a8f42267b66 69904c9f .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: invalid memory address or nil pointer dereference
2023/11/01 18:09 gvisor 4a8f42267b66 69904c9f .config console log report syz C ci-gvisor-systrap-1-race panic: runtime error: invalid memory address or nil pointer dereference
2023/11/02 00:37 gvisor 4a8f42267b66 69904c9f .config console log report syz ci-gvisor-ptrace-1-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2023/11/01 18:44 gvisor 4a8f42267b66 69904c9f .config console log report syz ci-gvisor-ptrace-2-race panic: runtime error: invalid memory address or nil pointer dereference
2023/11/01 15:39 gvisor 4a8f42267b66 69904c9f .config console log report syz ci-gvisor-ptrace-2-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2023/11/01 14:41 gvisor 4a8f42267b66 69904c9f .config console log report syz ci-gvisor-systrap-1-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2023/11/01 13:50 gvisor 4a8f42267b66 69904c9f .config console log report info ci-gvisor-systrap-1-race-cover panic: runtime error: invalid memory address or nil pointer dereference
2023/10/25 21:42 gvisor d4973670c3c9 72e794c4 console log report info ci-gvisor-kvm panic: runtime error: invalid memory address or nil pointer dereference
* Struck through repros no longer work on HEAD.