Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (4) -1 syz, C 16071 12m 1783d 24/26 never bd30d19d87ae Add cos and ubuntu-gpu release agents
kvm: panic: Sentry detected stuck tasks (30) -1 syz, C 15 136d 173d 0/26 never 6a24f67cce95 Set clone propagation to MS_PRIVATE upon BindAt failure.
fatal error: stack overflow (6) -1 syz, C 3626 23d 26d 26/26 11d a349c019667d Add cycle detection and jump recursion depth limit for netfilter.
SYZFAIL: too much cover (2) -1 1 55d 48d 26/26 11d 31a791793542 Split Landlock syscall tests by ABI version.
panic: UserChainTarget should never be called. 2 syz, C 457 23d 24d 26/26 11d 9d9b0681e814 Fix panic in iptables UserChainTarget.Action().
panic: thread group not visible in its own or an ancestor PID namespace 2 syz, C 17 29d 29d 26/26 11d ca90691b284b SO_PEERCRED: fix race against thread-group reap
panic: runtime error: invalid memory address or nil pointer dereference (32) 2 syz 6 61d 54d 26/26 52d 35db98496ee1 clone: Deliver pidfd only after child init
SYZFAIL: posix_spawnp failed -1 syz 6361 84d 617d 26/26 84d a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount
panic: Incrementing non-positive count ADDR on nsfs.Inode 2 syz, C 20 117d 117d 26/26 112d e0b8f07fefe9 pidfds: Fix setns() race with a dying target pidns
DATA RACE in kernel.(*Task).waitParentLocked -1 syz, C 5 116d 116d 26/26 112d 79075c279368 clone3: Create pidfds before making new task visible
kvm: no output from test machine (6) -1 syz, C 5 116d 117d 26/26 112d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: nested locking: kernel.taskSetRWMutex: (3) 2 syz, C 8 116d 116d 26/26 112d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 119d 120d 26/26 119d b31f2afdec69 setns: Fix setns(nsfd, 0x0)
DATA RACE in kernel.(*Task).waitCollectZombieLocked -1 syz 5 134d 167d 26/26 128d 149ca746755e wait: Prefer group exit status for non-consuming waits
panic: Sentry detected stuck tasks (35) 2 syz 41 136d 189d 26/26 136d c057198fd552 Resolve deadlock in /proc/[pid]/fdinfo/[fd].
DATA RACE in mm.(*MemoryManager).DecUsers -1 syz, C 4 165d 165d 26/26 164d 70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as.
DATA RACE in usertrap.(*State).PatchSyscall -1 syz 2 191d 191d 26/26 190d c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.
panic: ktime.SyntheticClock (time=ADDR) does not contain enqueued timer ADDR for time=ADDR with setting {Enabled:false N 2 syz, C 11 212d 212d 26/26 211d 5f31525f7613 Catch negative values in `timer_settime(2)`.
panic: Sentry detected stuck tasks (34) 2 2 226d 232d 26/26 226d 534579b743fb watchdog: Add a "stuck goroutines" suffix to the full stack dump at panic
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (3) 2 syz, C 11 241d 242d 26/26 226d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
panic: SampledTimer(ADDR).Set called in pause state NUM 2 syz, C 11 242d 242d 26/26 226d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
DATA RACE in netlink.(*Socket).SetSockOpt (2) -1 syz, C 6 257d 258d 26/26 255d 512aa34f81ab netlink: Fix data race on socket.sendBufferSize
FATAL ERROR: running container: starting container: starting root container: urpc method "containerManager.StartRoot" fa -1 127 291d 296d 26/26 280d c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation
gvisor test error: FATAL ERROR: running container: starting container: starting root container: urpc method "containerManager.StartRoot" fa -1 1 296d 296d 26/26 280d c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation
gvisor test error: FATAL ERROR: error executing umounter: fork/exec /proc/self/exe: no such file or directory -1 4 296d 296d 26/26 280d c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation
kvm: panic: Sentry detected stuck tasks (29) -1 syz, C 3 284d 285d 26/26 282d 2d94e669ae96 Avoid netlink deadlock
panic: Sentry detected stuck tasks (33) 2 syz, C 13 283d 284d 26/26 282d 2d94e669ae96 Avoid netlink deadlock
gvisor test error: SYZFATAL: image testing failed w/o kernel bug (4) -1 1228 289d 326d 26/26 288d ac46fb4b6126 coverage: call cfile.InitHook from InitCoverageData
DATA RACE in kernel.(*Task).MemoryManager (4) -1 1 331d 331d 26/26 289d 849e1bd48cc9 kernel: lock Task.mu in Task.MaxRSS
panic: registering already registered file 2 syz, C 164 318d 336d 26/26 289d c7e2a2ab44b4 Check for EventRegister success before setting FileAsync.registered.
panic: Sentry detected stuck tasks (32) 2 5 291d 330d 26/26 289d b3f000ac172f Do not retry on invalid UDP send buffers
panic: unregistering unregistered file 2 syz, C 641 329d 330d 26/26 289d 18edfee32572 Add async handler methods to FUSE DeviceFD.
panic: WARNING: circular locking detected: kernfs.ancestryRWMutex -> vfs.inotifyEventMutex: (2) 2 3 343d 364d 26/26 289d 9daae06f8ded sentry/kernel: unshare atomically and without holding Task.mu unnecessarily
panic: runtime error: slice bounds out of range [NUM:NUM] (4) 2 syz, C 78 306d 309d 26/26 289d 7532ec065ecc Fix: Check for errors in FUSE Readlink response.
DATA RACE in transport.(*connectionedEndpoint).PeerCreds -1 syz, C 8 357d 361d 26/26 289d 6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests.
panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 336d 337d 26/26 336d 41a5b6c519ee Check for connection in FUSE EventRegister.
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: (2) 2 syz, C 15 339d 342d 26/26 339d aba998b90aff kernel: Defer DecRef in SetWorkingDirectory to break lock cycle
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.ancestryRWMutex: 2 1 345d 345d 26/26 343d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
DATA RACE in transport.(*connectionedEndpoint).SetPeerCreds -1 syz, C 3958 357d 365d 26/26 343d 2f7f776a4464 Automated rollback of changelist 798788535
DATA RACE in transport.(*connectionedEndpoint).BidirectionalConnect -1 syz, C 11531 357d 365d 26/26 343d 2f7f776a4464 Automated rollback of changelist 798788535
panic: Sentry detected stuck tasks (31) 2 3 345d 386d 26/26 343d 6448dbe1b799 procfs: release the file system mutex on the error path
gvisor test error: init process did not start -1 1 363d 363d 26/26 343d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
DATA RACE in transport.(*connectionedEndpoint).swapPeerCreds -1 syz, C 2636 357d 365d 26/26 343d 2f7f776a4464 Automated rollback of changelist 798788535
panic: nested locking: kernfs.filesystemRWMutex: (10) 2 syz, C 16 348d 415d 26/26 343d 6448dbe1b799 procfs: release the file system mutex on the error path
panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 358d 361d 26/26 343d 2f7f776a4464 Automated rollback of changelist 798788535
panic: WARNING: circular locking detected: kernel.fsContextMutex -> tmpfs.filesystemRWMutex: 2 4 347d 350d 26/26 345d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: mm.mappingRWMutex -> kernel.fsContextMutex: 2 5 345d 349d 26/26 345d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: vfs.inotifyEventMutex -> mm.mappingRWMutex: (2) 2 5 347d 350d 26/26 345d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: 2 syz, C 10461 345d 351d 26/26 345d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: kernel.fsContextMutex -> vfs.inotifyEventMutex: 2 16 346d 351d 26/26 345d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: Decrementing non-positive ref count ADDR, owned by tun.tunEndpoint 2 syz, C 19 346d 347d 26/26 346d 20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.
kvm: panic: Watchdog goroutine is stuck (7) -1 syz 4 352d 368d 26/26 351d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
panic: Watchdog goroutine is stuck (4) 2 syz 250 351d 436d 26/26 351d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
gvisor build error (25) -1 624 365d 372d 26/26 364d 49a6cc35fab1 kvm: pagetables: Enable 5-level paging
DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1 -1 syz 3 367d 371d 26/26 365d 1941bc68e20d Fix race between unshare(2) and execve(2).
DATA RACE in kernel.(*Task).Unshare -1 syz, C 6 370d 371d 26/26 365d 1941bc68e20d Fix race between unshare(2) and execve(2).
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.packetEPsRWMutex: 2 1 408d 408d 26/26 399d d48212e236c1 No need to lock packetEPsMu in newNIC.
kvm: panic: Sentry detected stuck tasks (28) -1 syz, C 11 438d 443d 26/26 414d 973b2f23e566 Check for fatal signals and reset watchdog during MM.mapASLocked().
panic: WARNING: circular locking detected: kernfs.ancestryRWMutex -> vfs.inotifyEventMutex: 2 1 439d 432d 26/26 426d a2ad5774b434 Fix lock order inversion between taskMutex and kernfs.ancestryRWMutex.
DATA RACE in packetmmap.(*ringBuffer).internalMappingsForFrame (2) -1 1 474d 474d 26/26 469d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).Init (5) -1 syz 2 472d 473d 26/26 469d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*ringBuffer).init (3) -1 syz, C 9 471d 477d 26/26 470d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (5) -1 syz, C 19 471d 477d 26/26 470d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (4) -1 syz, C 4 480d 481d 26/26 478d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader (2) -1 syz, C 3 481d 481d 26/26 478d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).Init (4) -1 syz, C 9 480d 485d 26/26 478d 5790f690667a lock around getting the current time from the stack.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader -1 syz, C 6 485d 485d 26/26 483d 5790f690667a lock around getting the current time from the stack.
kvm: panic: Sentry detected stuck tasks (27) -1 syz, C 5 487d 489d 26/26 483d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: Sentry detected stuck tasks (29) 2 syz, C 51 486d 490d 26/26 485d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: runtime error: index out of range [NUM] with length NUM (6) 2 syz, C 227 498d 499d 26/26 491d cd8fcab3446c Fix range check on socket option counter metric.
kvm: panic: Sentry detected stuck tasks (25) -1 syz, C 3409 499d 595d 26/26 491d bc724d81d2f7 Avoid a deadlock in packet endpoint's Close method.
panic: runtime error: index out of range [-NUM] (2) 2 syz, C 19 493d 493d 26/26 491d 49b9d83fc867 Consolidate helper functions around unimplemented socket option metrics
panic: Sentry detected stuck tasks (28) 2 syz, C 11282 491d 595d 26/26 491d 45adb00f5086 fuse,vfs: don't FUSE_GETATTR for /proc/mountinfo
panic: invalid field value or did not reuse the same FieldValue pointer as passed in NewField 2 syz, C 56 498d 499d 26/26 491d 3f22efe2ac35 Return ENOPROTOOPT from setsockopt syscalls as default.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (3) -1 syz, C 4 505d 505d 26/26 505d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
DATA RACE in packetmmap.(*Endpoint).Init (3) -1 syz 3 505d 505d 26/26 505d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
panic: runtime error: slice bounds out of range [NUM:NUM] (3) 2 syz, C 20 508d 509d 26/26 505d e3ca602624c1 Check for bad values of the packet mmap reserve option.
DATA RACE in kernel.(*ThreadGroup).endGroupStopLocked -1 syz 6 520d 520d 26/26 515d 8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.
panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 563d 563d 26/26 561d 95ad423f8c05 Don't return empty translation in ring buffer during bus error.
panic: WARNING: circular locking detected: kernel.taskMutex -> mm.mappingRWMutex: 2 16 566d 608d 26/26 563d d949e7177c2f taskCopyContext should not require holding task.mu.
panic: runtime error: index out of range [NUM] with length NUM (5) 2 syz, C 165 564d 567d 26/26 563d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (2) -1 syz, C 1 567d 567d 26/26 563d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*ringBuffer).init (2) -1 2 567d 567d 26/26 567d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*Endpoint).ConfigureMMap -1 syz, C 2 567d 567d 26/26 567d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*ringBuffer).internalMappingsForFrame -1 1 567d 567d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).Init (2) -1 syz, C 9 567d 567d 26/26 567d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus (2) -1 syz, C 19 567d 567d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).HandlePacket -1 syz, C 3 567d 567d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).GetPacketMMapOpts -1 syz, C 10 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).Init -1 syz, C 7 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).HandlePacket -1 syz 3 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).GetPacketMMapEndpoint -1 14 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus -1 syz, C 3 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetSockOptInt -1 syz, C 10 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetPacketMMapEndpoint -1 syz, C 25 567d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*ringBuffer).init -1 2 568d 568d 26/26 567d da7cd03064d7 Lock around packet mmap fields.
panic: runtime error: integer divide by zero (4) 2 702 567d 568d 26/26 567d 213917f3eaf8 Don't switch to using the packet mmap endpoint for zero length requests.
panic: invalid allocation length: 0x0 (5) 2 32 567d 568d 26/26 567d 213917f3eaf8 Don't switch to using the packet mmap endpoint for zero length requests.
panic: runtime error: slice bounds out of range [NUM:NUM] (2) 2 syz, C 606 568d 568d 26/26 568d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: runtime error: index out of range [NUM] with length NUM (4) 2 syz, C 174 568d 568d 26/26 568d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: Sentry detected stuck tasks (27) 2 syz, C 14 602d 622d 26/26 598d 679c77e4f05e proc: Allow interrupting generation of /proc/pid/mount{s,info}
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (2) 2 syz, C 9 623d 623d 26/26 620d c27c9a02aef5 kernel: use the kernel context to run task destroy actions
DATA RACE in buffer.(*Buffer).PullUp -1 syz, C 2 645d 638d 26/26 623d afa323bd3070 Replace most instances of IncRef with Clone.
DATA RACE in buffer.(*ViewList).Remove -1 syz, C 4 645d 644d 26/26 623d afa323bd3070 Replace most instances of IncRef with Clone.
panic: PullUp failed (3) 2 syz, C 19 624d 644d 26/26 623d afa323bd3070 Replace most instances of IncRef with Clone.
panic: Sentry detected stuck tasks (26) 2 syz, C 17 626d 626d 26/26 625d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
kvm: panic: Sentry detected stuck tasks (24) -1 syz, C 9 626d 669d 26/26 625d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
panic: Sentry detected stuck tasks (25) 2 syz, C 78 627d 656d 26/26 627d 54eb79b6e80a Acquire rlock when reading link address from the bridge.
panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM 2 syz, C 34 629d 631d 26/26 627d ddaa99e5d4d2 Ignore the length field when processing the experiment extension header.
panic: nested locking: tmpfs.filesystemRWMutex: (3) 2 syz, C 88 645d 641d 26/26 641d f66f0e235a0b Fix memmap.MappingIdentity.Device/InodeID() lock ordering.
panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 643d 644d 26/26 643d 2b55090a5813 Do not crash when creating thread group with already-exceeded soft CPU limit.
panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 644d 653d 26/26 644d ae1d4ccf0298 mm: validate vseg before using it
no output from test machine (13) -1 syz, C 86992 648d 667d 26/26 647d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
panic: nested locking: tmpfs.filesystemRWMutex: (2) 2 syz, C 33 648d 651d 26/26 648d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
DATA RACE in buffer.(*View).Write -1 1 773d 773d 26/26 693d a446b45d4d05 Ensure views returned by PullUp are owned exclusively by their packet.
panic: runtime error: index out of range [ADDR] with length NUM (2) 2 syz, C 23 697d 698d 26/26 697d 9d41ac1ff0b2 Fix unsigned to signed integer conversion in syserr.getHostTranslation().
panic: unknown host errno "errno NUM" (NUM) (2) 2 syz, C 286 699d 724d 26/26 697d 3971ecbc6ccd Remove linuxerr.IsValid and use syserr.IsValid instead.
panic: nested locking: stack.bridgeRWMutex: 2 2 712d 705d 26/26 699d 5e8dd6482cb7 Disallow setting a coordinator for a coordinator device.
lost connection to test machine (10) -1 syz 11752 714d 770d 26/26 714d 2a413db73006 kvm: check CPL to find out if the Sentry is in VM
panic: unknown host errno "memory page has hardware error" (NUM) 2 10 721d 728d 26/26 721d 40bde6c617c7 Add EHWPOISON to host_linux.go
panic: unknown host errno "errno NUM" (NUM) 2 syz, C 397 731d 768d 26/26 731d 9ecb627726cf Fix syzkaller panic for unknown error 58.
panic: No file type specified in 'mode' for InodeAttrs.Init(): mode=NUM (2) 2 syz, C 454 742d 770d 26/26 742d 834bef599679 fuse: Error out in case of unsupported file type instead of panicking.
panic: unknown host errno "operation not possible due to RF-kill" (NUM) 2 1 743d 743d 26/26 742d e6cf09a18c7e Add ERFKILL errno to host_linux file.
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) 2 1 753d 753d 26/26 751d e30fa671774b FUSE: Only block with a task if it is the task goroutine.
panic: unknown host errno "errno ADDR" (ADDR) 2 syz, C 88 751d 769d 26/26 751d b1ade52f24be fuse: handle bad response errors
panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 755d 755d 26/26 752d 2ef09d3bddc7 FUSE: Avoid panic when opening unknown file type.
panic: unknown host errno "no XENIX semaphores available" (NUM) 2 7 755d 756d 26/26 755d 0184ec4aacbc Add ENAVAIL to host_linux.go.
DATA RACE in log.GoogleEmitter.Emit (4) -1 1 756d 756d 26/26 755d 742b914fcb82 Don't log mount.root because it leads to racy access.
panic: unknown host errno "is a named type file" (NUM) 2 7 756d 757d 26/26 756d ef1ca17e5842 Add EISNAM to linuxHostTranslations and fix error message for ENOTNAM.
SYZFAIL: mount(proc) failed -1 54326 786d 787d 26/26 770d e39ed91daaf9 sentry: support NULL mount source
gvisor test error: SYZFAIL: mount(proc) failed -1 58 787d 787d 26/26 770d e39ed91daaf9 sentry: support NULL mount source
lost connection to test machine (9) -1 syz 8441 771d 1110d 26/26 771d cd56935ddf77 runsc: pass the GLIBC_TUNABLES env to the sandbox process
DATA RACE in log.GoogleEmitter.Emit (3) -1 1 774d 774d 26/26 772d ddfbb50ecc2d Don't log the task in CgroupPrepareMigrate warning.
DATA RACE in binary.bigEndian.Uint16 -1 1 788d 788d 26/26 777d bd58900fba9e Change veth WritePackets to deep clone its list of packets.
DATA RACE in binary.bigEndian.PutUint16 (2) -1 3 778d 788d 26/26 777d bd58900fba9e Change veth WritePackets to deep clone its list of packets.
no output from test machine (11) -1 syz, C 50911 780d 902d 26/26 780d db9fab290c26 Fix a race condition in TCPDeferAcceptTimeout
panic: send on closed channel 2 1 789d 782d 26/26 781d 9d1849029e8e tcpip/link/veth: don't send any packets if another end has been closed
SYZFAIL: tun: ioctl(TUNSETIFF) failed (2) -1 15 786d 785d 26/26 784d c6d16988a984 Log endpoint type when SOL_IP options are not supported.
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.stackRWMutex: 2 syz, C 27 798d 800d 26/26 793d c4dc0321aa40 Do not hold BridgeEndpoint.mu during dispatcher.DeliverNetworkPacket().
init process did not start -1 2 806d 806d 26/26 801d 80a501d8cc23 Avoid redundant work in `bpf.optimizeJumpsToSmallestSetOfReturns`.
DATA RACE in futex.(*waiterList).Front -1 syz, C 1 813d 813d 26/26 805d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterEntry).SetNext -1 syz, C 3 813d 813d 26/26 805d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterList).PushBack -1 syz, C 3 813d 813d 26/26 805d b58e8a129d62 futex: add missing locking in lockBuckets()
gvisor test error: SYZFATAL: failed to connect to host: dial tcp: address stdin: missing port in address -1 1077 843d 847d 26/26 840d a5b10b7dd04c Fix some processes_test flakes.
panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 892d 897d 26/26 892d 5f5e01d186b2 Fix panic while setting TCP_CORK off.
no output from test machine (10) -1 syz, C 19806 917d 1841d 26/26 914d 16dba7fa7677 systrap: handle stub thread crashes
panic: stub thread ADDR failed: err 0x-ADDR line NUM: sysmsg.Msg{msg: ADDR state NUM err -ADDR line NUM debug NUM app st 2 syz, C 5 960d 960d 26/26 933d fe66cae2edc7 Enumerate known systrap stub failures to exit process cleanly.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (4) 2 syz, C 22 951d 958d 26/26 949d 7b151e25d076 Don't drop the mountpoint reference in already umounted dead mountpoints.
DATA RACE in safemem.Copy (7) -1 syz, C 4 976d 976d 26/26 973d de71aae89aed `seccomp`: Use dedicated input buffer for populating seccomp cache.
kvm: panic: Sentry detected stuck tasks (22) -1 syz, C 8 997d 1008d 26/26 990d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
fatal error: stack overflow (5) -1 syz, C 23 994d 1010d 26/26 990d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
panic: runtime error: invalid memory address or nil pointer dereference (22) 2 1 1002d 1002d 26/26 1001d 4733e050ebec Check that handshake.listenEP is non-nil.
panic: attempted to rewrite jump target to a different return instruction: from={pc=NUM: {NUM NUM NUM NUM}}, to={pc=NUM: 2 syz, C 8 1008d 1008d 26/26 1004d 7cf14b7c8b5e Add equality function for BPF instructions.
fatal error: stack overflow (4) -1 syz, C 12 1011d 1014d 26/26 1011d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
kvm: panic: Sentry detected stuck tasks (21) -1 syz, C 2 1012d 1014d 26/26 1011d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
fatal error: large allocation -1 syz, C 234 1023d 1027d 26/26 1012d 917bee5b6d91 Add a size limit to `outputQueueTransformer.transform`.
panic: runtime error: slice bounds out of range [12:LINE] 2 syz, C 63 1017d 1796d 26/26 1015d c96439ecd0b4 devpts: IterDirents has to check offset and return if it is out of range
kvm: panic: Sentry detected stuck tasks (20) -1 syz, C 2 1016d 1016d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
fatal error: stack overflow (3) -1 2 1016d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (3) 2 syz, C 16 1017d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by vfs.Filesystem 2 syz, C 152 1016d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 1017d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Incrementing non-positive count ADDR on tmpfs.inode (4) 2 syz, C 24 1016d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Incrementing non-positive count ADDR on vfs.Filesystem (3) 2 1 1017d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: tmpfs.inode.decLinksLocked() called with no existing links 2 1 1016d 1016d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: tmpfs.inode.incLinksLocked() called with no existing links 2 syz, C 1 1017d 1017d 26/26 1015d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
kvm: panic: Sentry detected stuck tasks (19) -1 3 1019d 1017d 26/26 1017d 3ab01aedb874 Refactor the umount algorithm.
kvm: panic: Sentry detected stuck tasks (18) -1 syz, C 3 1031d 1036d 26/26 1029d 429f7c439616 Move rootfs check to inside mountMu.
panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1030d 1038d 26/26 1030d 429f7c439616 Move rootfs check to inside mountMu.
panic: WARNING: circular locking detected: mm.activeRWMutex -> tmpfs.filesystemRWMutex: 2 1 1044d 1044d 26/26 1030d e1e7edcc1b67 Don't release unused RightsControlMessage in Recv.
panic: close of closed channel 2 syz, C 1192 1665d 1673d 26/26 1033d 2e3e5b606789 Create a new test dimension that mounts a FUSE fs on /tmp.
DATA RACE in vfs.(*Mount).setMountOptions -1 syz, C 5 1042d 1042d 26/26 1038d ea4f0073d4a1 Fix data race between getting mount options and updating mount options.
gvisor boot error: init process did not start (5) -1 41 1143d 1271d 26/26 1040d 2e8b96b4fd74 Automated rollback of changelist 514487900
panic: Sentry detected stuck tasks (24) 2 syz, C 13 1044d 1050d 26/26 1044d 1407fdf120ab Fix concurrent pivot_root bug.
panic: expected socket to exist at '!N 2 syz, C 23 1047d 1047d 26/26 1044d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '$N 2 syz, C 24 1048d 1049d 26/26 1044d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '#N 2 syz, C 23 1046d 1047d 26/26 1044d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at ' N 2 syz, C 20 1048d 1048d 26/26 1044d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: Sentry detected stuck tasks (23) 2 syz, C 23 1051d 1056d 26/26 1051d a8bc2e146626 Fix group id cleanup and tidy up some mount methods.
kvm: panic: Sentry detected stuck tasks (17) -1 14 1055d 1086d 26/26 1054d 44e0d6d07246 Unlock putOldMp before retrying the mount checks in pivot_root.
panic: Sentry detected stuck tasks (22) 2 5 1056d 1057d 26/26 1056d 44e0d6d07246 Unlock putOldMp before retrying the mount checks in pivot_root.
panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1059d 1073d 26/26 1058d f744f443dd7d Check before attempting to mount an anon mountpoint.
panic: nested locking: tmpfs.filesystemRWMutex: 2 1 1074d 1067d 26/26 1058d c74f5866cb75 Fix circular lock that can happen during unlink.
DATA RACE in kernel.(*Task).MemoryManager (3) -1 syz, C 12 1059d 1059d 26/26 1058d c39ecc4eb47a The local task in process_vm_read|writev is just the calling task.
DATA RACE in kernel.(*runExitMain).execute (2) -1 syz, C 143 1368d 1378d 26/26 1058d b66713079526 Clean up and re-enable process_vm_readv/writev
DATA RACE in binary.littleEndian.Uint64 (2) -1 syz, C 48 1368d 1378d 26/26 1058d b66713079526 Clean up and re-enable process_vm_readv/writev
panic: Sentry detected stuck tasks (21) 2 64 1058d 1105d 26/26 1058d 677d11f22fbe Chunkify tmpfs Allocate().
DATA RACE in vfs.(*VirtualFilesystem).connectLocked (2) -1 2 1071d 1071d 26/26 1058d de5271b36007 Fix small data race in mount.
DATA RACE in safemem.Copy (6) -1 syz, C 121 1368d 1368d 26/26 1058d b66713079526 Clean up and re-enable process_vm_readv/writev
panic: Unknown syscall NUM error: strconv.ParseInt: parsing "./file1": invalid syntax 2 syz, C 19 1081d 1074d 26/26 1066d 1910a4577f01 cgroupfs: do not return errors from strconv.ParseInt() to write()
panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 1084d 1085d 26/26 1081d bb4410f44e32 Rollback 6ceceae9385c and 206e88db3653.
gvisor test error: panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry -1 38 1086d 1086d 26/26 1085d 206e88db3653 Fix cwd/root update method during namespace cloning.
panic: nested locking: kernfs.filesystemRWMutex: (7) 2 4 1099d 1101d 26/26 1094d c80ab228d85b Make vfs.PopDelayedDecRefs() clear vfs.toDecRef.
panic: nested locking: kernfs.filesystemRWMutex: (6) 2 syz, C 8 1102d 1118d 26/26 1101d 755c1f242cd4 nsfs: mark inodes as anonymous
panic: Sentry detected stuck tasks (20) 2 syz, C 895 1106d 1109d 26/26 1105d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (15) -1 syz, C 186 1106d 1109d 26/26 1105d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (14) -1 syz 4 1121d 1127d 26/26 1116d 118a17d92dcf kernfs: set DenySpliceIn for DynamicBytesFD
panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 1121d 1121d 26/26 1120d 6f978d71856e kernel: GetMountNamespace has to check that mntns isn't nil
DATA RACE in udp.(*endpoint).Connect.func1 -1 syz, C 3 1136d 1129d 26/26 1120d 5babda534107 Lock around endpoint info access in UDP onICMPError.
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 48074 1122d 1540d 26/26 1122d 41bb04c14901 Implement mount namespaces
panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1123d 1130d 26/26 1122d ef95be6e1c10 kernel: check that a task has a network namespace
panic: kcov task work is registered, but no coverage data was found 2 6120 1136d 1141d 26/26 1134d f43a5fc63ac7 Remove panic in ConsumeCoverageData() when no coverage is observed.
panic: Sentry detected stuck tasks (18) 2 syz, C 625 1138d 1197d 26/26 1136d e54e3668b07c Impose default tmpfs size limits correctly.
gvisor test error: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3) -1 124 1142d 1143d 26/26 1141d ffcbc70b9a4a systrap: don't change an fpu state from the stub code
DATA RACE in pipefs.(*inode).UID -1 syz 2 1142d 1142d 26/26 1141d 02ed5839a762 Add a lock to pipefs's inode to protect a inode's attributes.
lost connection to test machine (8) -1 1964 1141d 1474d 26/26 1141d 8b57c2e7402f runsc/seccomp: allow sched_getaffinity if race is on
panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 1170d 1170d 26/26 1143d bb5ada8caffd Defer dec refing mounts in InvalidateDentry.
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> fasync.fileMutex: (2) 2 2 1166d 1166d 26/26 1159d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 1 1166d 1166d 26/26 1159d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 3 1166d 1166d 26/26 1159d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
kvm: lost connection to test machine (3) -1 8 1176d 1198d 26/26 1170d 52692c3647ea fdtable: avoid large arrays
panic: nested locking: kernfs.filesystemRWMutex: (5) 2 5 1170d 1172d 26/26 1170d bb5ada8caffd Defer dec refing mounts in InvalidateDentry.
panic: nested locking: kernfs.filesystemRWMutex: (4) 2 syz, C 31 1172d 1266d 26/26 1172d 084a5022563f Change InvalidateDentry to return a list of vds with an extra reference.
kvm: panic: Sentry detected stuck tasks (12) -1 193 1176d 1338d 26/26 1175d 52692c3647ea fdtable: avoid large arrays
panic: WARNING: circular locking detected: mm.activeRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 4 1208d 1208d 26/26 1176d 8c975e6e6e68 Mark some kernfs inode as Anonymous.
DATA RACE in fasync.(*FileAsync).SetOwnerTask -1 syz, C 11 1177d 1179d 26/26 1176d 5fed8c81b89a Fix data race by acquiring lock before accessing fields of FileAsync.
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: 2 syz, C 1 1180d 1180d 26/26 1176d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> fasync.fileMutex: 2 1 1180d 1180d 26/26 1176d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: 2 syz, C 3 1180d 1180d 26/26 1176d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.filesystemRWMutex: (2) 2 1 1198d 1198d 26/26 1176d ed528835f753 Small circular lock fix.
gvisor test error: SYZFATAL: BUG: got no fallback coverage: -1 132 1198d 1275d 26/26 1186d 83f4f485b4ad systrap: don't call Goyield() if the race detector is enabled
panic: Incrementing non-positive count ADDR on tmpfs.inode (3) 2 6 1206d 1228d 26/26 1190d 283b80a456aa Fix logic bug in attaching mounts.
DATA RACE in log.GoogleEmitter.Emit (2) -1 3 1194d 1196d 26/26 1191d 158636229e87 Avoid serializing the sharedContext struct in formatting directives.
DATA RACE in kernel.(*TaskImage).Fork -1 syz, C 8 1287d 1287d 26/26 1194d 028cf757bbef Clarify comment about copying Task.image in Task.Clone().
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: (2) 2 syz, C 17 1198d 1199d 26/26 1197d ed528835f753 Small circular lock fix.
panic: Sentry detected stuck tasks (17) 2 syz, C 822 1197d 1463d 26/26 1197d ed528835f753 Small circular lock fix.
gvisor build error (19) -1 110 1199d 1200d 26/26 1199d 74e63e9e296a Update packages
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (2) 2 syz, C 47 1206d 1211d 26/26 1199d 283b80a456aa Fix logic bug in attaching mounts.
gvisor test error: timed out (4) -1 548 1201d 1565d 26/26 1200d 83f4f485b4ad systrap: don't call Goyield() if the race detector is enabled
panic: WARNING: circular locking detected: stack.neighborEntryRWMutex -> stack.nicRWMutex: 2 1 1232d 1232d 26/26 1201d 38823be81914 Don't lock before accessing nic.networkEndpoints
panic: WARNING: circular locking detected: transport.streamQueueReceiverMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1208d 1208d 26/26 1201d 2044c3449153 Don't hold streamQueueReceiver.mu while calling RightsControlMessage.Release().
panic: WARNING: circular locking detected: transport.endpointMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1208d 1208d 26/26 1201d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: 2 syz, C 18 1321d 1396d 26/26 1201d e0b1585586c6 Remove stale `vdDentry` variable from VirtualFilesystem.connectMountAt().
panic: nested locking: transport.endpointMutex: 2 syz, C 1 1208d 1208d 26/26 1201d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
fatal error: unexpected signal during runtime execution (3) -1 9 1246d 1249d 26/26 1246d 96aa115516c8 systrap: simplify interrupt handling in syshandler
gvisor boot error: panic: prctl(PR_SET_NO_NEW_PRIVS) failed: invalid argument -1 12 1249d 1249d 26/26 1249d 6890e539c700 systrap: set all arguments of prctl(PR_SET_NO_NEW_PRIVS)
panic: interface conversion: *kernel.Kernel is not unimpl.Events: missing method EmitUnimplementedEvent 2 syz, C 5857 1253d 1255d 26/26 1253d f8b98248139c Update `unimpl.EmitUnimplementedEvent` interface to add the syscall number.
gvisor test error: SYZFATAL: BUG: program execution failed: executor NUM: not serving -1 137 1255d 1261d 26/26 1255d 08920d098b30 Fix systrap TLS handling on ARM.
gvisor build error (18) -1 313 1262d 1284d 26/26 1255d fedadb093205 Fix syzkaller systrap builds.
DATA RACE in systrap.(*subprocessPool).fetchAvailable -1 25 1265d 1275d 26/26 1255d f01bf248c19f Fix data race in subprocess pool.
panic: WARNING: circular locking detected: tmpfs.filesystemRWMutex -> kernel.taskSetRWMutex: 2 syz 14 1261d 1536d 26/26 1255d 758da469f7ed kernel: release kernel.taskSetRWMutex before calling TaskImage.Release
panic: runtime error: index out of range [ADDR] with length NUM 2 syz, C 17 1266d 1266d 26/26 1255d fc94225c333d Fix crash with large FD value
gvisor boot error: FATAL ERROR: overlay flag is incompatible with shared file access for rootfs -1 148 1268d 1269d 26/26 1260d 1b7a4e2a055c Prepare to make root overlay the default.
gvisor boot error: FATAL ERROR: overlay flag has been replaced with overlay2 flag -1 66 1267d 1269d 26/26 1260d 1b7a4e2a055c Prepare to make root overlay the default.
DATA RACE in vfs.(*VirtualFilesystem).PivotRoot -1 syz, C 1 1278d 1278d 26/26 1269d 807fd0fd27d0 Lock around accessing the mount namespace in pivot_root.
panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1277d 1278d 18/26 1277d 8a1845f8b850 Don't send a signal to a controlling thread group if one has not been set.
fatal error: stack overflow -1 1 1353d 1353d 18/26 1278d 426deb60fd25 lockdep: fix the TOCTTOU issue
panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1278d 1281d 18/26 1278d 8184fa1db0fa Clean up devpts code, and deduplicate the foreground process state.
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM (2) 2 syz, C 7 1283d 1285d 18/26 1281d 5817f4cc64e4 Fix FUSE how handles malformed INIT requests.
panic: nested locking: kernfs.filesystemRWMutex: (3) 2 syz 19 1290d 1315d 18/26 1288d 28472cc03fe1 don't take an unnecessary reference in proc.fdSymlink.Valid()
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry (2) 2 syz, C 13 1295d 1295d 18/26 1294d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry (2) 2 syz, C 65 1294d 1295d 18/26 1294d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry 2 syz, C 14 1297d 1300d 18/26 1295d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry 2 syz, C 390 1295d 1301d 18/26 1295d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *gofer.dentry, not *kernfs.Dentry 2 syz, C 13 1298d 1298d 18/26 1297d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: runtime error: index out of range [NUM] with length NUM (3) 2 syz, C 372 1313d 1317d 18/26 1313d fe562179fea1 Handle absolute symlink target '/' correctly in VFS layer.
panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1317d 1378d 18/26 1313d e08f204299df inet: each socket has to hold a reference to its network namespace
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.filesystemRWMutex: 2 1 1332d 1332d 18/26 1315d 492d7a98116b Decref target VirtualDentry outside the vfs mount lock during mount ops.
gvisor test error: panic: ptrace set regs (&{PtraceRegs:{Regs:[ADDR NUM ADDR NUM NUM NUM NUM ADDR ADDR NUM NUM ADDR ADDR NUM ADDR ADDR NUM -1 10 1320d 1320d 15/26 1318d 194029b95444 arm64: validate registers that come from user-space
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: (2) 2 syz, C 53 1351d 1353d 14/26 1351d bc440b67fce0 Don't hold nic.mu when calling n.linkResQueue.cancel.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.neighborCacheRWMutex: 2 syz, C 356 1354d 1359d 14/26 1353d 70be2fc8a772 Remove unsetting route's cached neighbor entry in link res callback.
gvisor build error (16) -1 12 1366d 1366d 14/26 1354d 20b2ec04d94d Update bazel packages
panic: WARNING: circular locking detected: stack.packetsPendingLinkResolutionMutex -> stack.routeRWMutex: 2 syz, C 2602 1354d 1359d 14/26 1354d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: 2 syz, C 1246 1354d 1359d 14/26 1354d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
gvisor boot error: FATAL ERROR: running container: creating container: failed to create an unnamed temporary file inside "/tmp" -1 24 1358d 1358d 14/26 1357d 368e85414697 overlay2: Do not use O_TMPFILE to create unnamed temporary file.
panic: WARNING: circular locking detected: kernel.signalHandlersMutex -> kernfs.filesystemRWMutex: 2 syz, C 351 1364d 1366d 14/26 1364d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 2320 1364d 1366d 14/26 1364d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: cgroupfs: pids controller attempted to remove pending charge for Task ADDR, but task didn't have pending charges, (2) 2 1 1397d 1397d 14/26 1366d 62ddad611979 cgroupfs: Fix several races with task migration.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode 2 syz, C 27 1366d 1367d 14/26 1366d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: Incrementing non-positive count ADDR on tmpfs.inode (2) 2 syz, C 56 1366d 1367d 14/26 1366d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: kernfs.Dentry.DecRef() called without holding a reference (2) 2 syz, C 61 1366d 1367d 14/26 1366d 1823b16fccf7 Clean up DecRefs in mount methods.
kvm: panic: Sentry detected stuck tasks (10) -1 3 1383d 1400d 14/26 1367d ece02b45b5b4 Add a maximum to the total number of mounts allowed in a namespace.
panic: Lock not held: transport.endpointMutex[e]: 2 syz, C 1191 1368d 1368d 14/26 1368d 1ceee8c31071 connectioned: Change nested lock name to only have a single nested lock.
DATA RACE in safemem.Copy (5) -1 syz, C 3153 1368d 1378d 14/26 1368d ae731e0394f5 Don't use other process's scratch buffer.
panic: unbalance unlock: mm.activeRWMutex:LINE: 2 2 1370d 1381d 14/26 1368d 445fa6f40c89 Lockdep: Print more info in the "unbalanced unlock" case.
panic: WARNING: circular locking detected: kernel.taskMutex -> kernel.taskSetRWMutex: 2 syz, C 1470 1378d 1379d 14/26 1376d 38a0512f13fa Fix circular lock in process_vm_(read|write)v
DATA RACE in binary.littleEndian.Uint64 -1 syz, C 29 1477d 1480d 14/26 1379d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR 2 syz, C 914 1379d 1397d 14/26 1379d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
DATA RACE in safemem.Copy (4) -1 syz, C 1019 1477d 1480d 14/26 1379d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [ADDR:NUM] 2 syz, C 13 1383d 1383d 14/26 1379d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM 2 syz, C 124 1380d 1396d 14/26 1379d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: integer divide by zero (3) 2 syz, C 443 1379d 1396d 14/26 1379d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: Unknown syscall -NUM error: EOF 2 syz, C 14 1384d 1385d 14/26 1379d f3aaf4326636 io_ring: Handle EOF on IORING_OP_READV
DATA RACE in tmpfs.GetSeals -1 1 1385d 1385d 14/26 1381d 374e716c7ce2 AddSeals has to take the write lock to modify seals
DATA RACE in tmpfs.AddSeals -1 syz, C 4 1384d 1385d 14/26 1381d 374e716c7ce2 AddSeals has to take the write lock to modify seals
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM 2 syz, C 196 1665d 1673d 14/26 1383d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: addresses IP and fe80::aa do not have the same length (2) 2 1 1388d 1388d 14/26 1384d 8756ebc3b406 Netstack: Check address matches the endpoint protocol for IP_DROP_MEMBERSHIP
panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1387d 1480d 14/26 1386d ae136df84998 Add nil-check for parent mount in umount(2) while handling mount propagation.
DATA RACE in vfs.(*VirtualFilesystem).setPropagation -1 syz, C 3 1399d 1400d 14/26 1386d 20ef2127a102 Lock around optional tag generation.
DATA RACE in bufferv2.newChunk -1 syz, C 68 1393d 1409d 14/26 1392d 6b3b5493d0ea Fix ipv6 header view ownership.
DATA RACE in vfs.(*VirtualFilesystem).GenerateProcMountInfo -1 syz, C 2 1398d 1399d 14/26 1396d 20ef2127a102 Lock around optional tag generation.
panic: runtime error: integer divide by zero (2) 2 syz, C 56 1396d 1397d 14/26 1396d d4b159ae93b5 iouring: Disallow zero, or less CQ entries than SQ entries
panic: nested locking: kernel.taskSetRWMutex: 2 syz, C 2 1455d 1455d 14/26 1402d c1427a04dfba Disable fasync for signalfd descriptors
gvisor test error: panic: WARNING: circular locking detected: mm.activeRWMutex -> kernel.taskSetRWMutex: -1 1 1423d 1423d 14/26 1416d 2e844f74fcdd Do not use ktime.Timer for CPU clock ticks.
panic: Decrementing non-positive ref count ADDR, owned by kernel.ProcessGroup (2) 2 syz, C 3 1421d 1455d 14/26 1421d 36ddd3050cc2 Check if ThreadGroup exists before executing JoinProcessGroup.
kvm: panic: Sentry detected stuck tasks (9) -1 2 1449d 1450d 14/26 1438d 48e2252b3bac fix panic caused by too-large buffer allocations
gvisor build error (15) -1 232 1445d 1444d 14/26 1442d d2827e5a9242 Don't require gcc-multilib to be installed to build BPF
panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: NUM, proposed charg 2 syz, C 97 1459d 1578d 14/26 1458d 46e08207b58f cgroupfs: Handle hierachy changes across charge/uncharge.
panic: addresses IP and fe80::aa do not have the same length 2 102 1478d 1507d 14/26 1472d b195ca54f311 Netstack: Check that the multicast address matches the endpoint protocol.
DATA RACE in fuse.newFUSEFilesystem -1 syz, C 384 1665d 1673d 14/26 1481d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: WARNING: circular locking detected: cgroupfs.pidsControllerMutex -> mm.mappingRWMutex: 2 3 1535d 1536d 14/26 1533d d5a04e338eef cgroupfs: Don't copy in with cgroups locks held.
panic: WARNING: circular locking detected: tmpfs.inodeMutex -> mm.activeRWMutex: 2 syz, C 8353 1536d 1536d 14/26 1533d 82498d087ef8 Don't hold MM.activeMu when calling MM.vmaMapsEntryLocked().
panic: Sentry detected stuck tasks (16) 2 5 1541d 1614d 14/26 1540d 8b41af93300c sync/lockdep: use RangeRepeatable instead of Range
kvm: panic: Sentry detected stuck tasks (7) -1 1 1560d 1553d 14/26 1541d 6fda48f50dcd tcpip/transport/raw: check MTU before copying a buffer from user memory
panic: invalid allocation length: 0x0 (4) 2 syz, C 4338 1541d 1544d 14/26 1541d 3290a054c5bd getdents: Test that size parameter is not zero before allocating PMAs.
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> mm.activeRWMutex: 2 2 1558d 1554d 14/26 1547d e47be0cfc06d Move Send/RecvNotify calls outside of CopyIn/Out, due to lock order.
panic: runtime error: index out of range [-NUM] 2 syz, C 13 1572d 1572d 14/26 1569d a7cad2b092de Tmpfs with size option enabled bug fix.
DATA RACE in fuse.(*connection).callFutureLocked -1 syz, C 2 1670d 1673d 14/26 1578d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Read -1 syz, C 238 1667d 1673d 14/26 1578d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.newFUSEConnection -1 syz, C 52 1667d 1673d 14/26 1578d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PWrite -1 syz, C 11 1670d 1673d 14/26 1578d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PRead -1 syz, C 9 1669d 1673d 14/26 1578d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Seek -1 syz, C 8 1672d 1673d 14/26 1578d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: unexpected tcp state in processor: BOUND 2 syz, C 36 1589d 1592d 14/26 1589d 3b917921d7fe Fix race in listen.
DATA RACE in cgroupfs.(*memsData).Write -1 syz, C 4 1601d 1601d 14/26 1592d 5f9bd8a53b20 cgroupfs: Synchronize access to cpuset controller bitmaps.
panic: unknown network protocol number NUM 2 syz, C 56 1682d 1694d 14/26 1612d 6a28dc7c5963 Correct fragmentation reference counting.
panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1618d 1624d 14/26 1617d 5835bc8c3a4b cgroupfs: Handle invalid PID/PGID on migration.
DATA RACE in kernfs.(*OrderedChildren).checkExistingLocked -1 syz, C 1 1640d 1640d 14/26 1618d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
panic: Inode doesn't match what kernfs thinks! OrderedChild: &{dir:{InodeNoopRefCount:{InodeTemporary:{}} InodeAlwaysVal 2 syz, C 12 1625d 1640d 14/26 1618d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
DATA RACE in bitmap.(*Bitmap).Maximum -1 syz, C 8 1632d 1640d 14/26 1631d 4503ba3f5efd Fix data race when using UNSHARE in close_range.
kvm: lost connection to test machine -1 364 1635d 1988d 14/26 1632d 81d384cfe9d3 Fix race between epoll readiness check and re-readying.
lost connection to test machine (6) -1 4341 1633d 1872d 14/26 1633d 81d384cfe9d3 Fix race between epoll readiness check and re-readying.
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 (2) -1 syz, C 4 1649d 1642d 14/26 1637d b1ceabc884c0 Hold baseEndpoint.mu when calling baseEndpoint.Connected()
kvm: panic: Sentry detected stuck tasks (6) -1 15 1641d 1652d 14/26 1641d f51097051ac5 tun: reject packets larger MTU
panic: Sentry detected stuck tasks (15) 2 syz, C 2582 1650d 1727d 14/26 1645d 510cc2f7fca9 Fix pivot_root lock inversion.
Invalid request partialResult in sendto (3) -1 syz, C 9 1648d 1648d 14/26 1646d 395c38be75d1 Add ECONNABORTED to the partial result error list.
kvm: panic: Sentry detected stuck tasks (5) -1 syz, C 65 1653d 1715d 14/26 1652d b413d78c27db sendfile: limit a buffer size
panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1665d 1661d 14/26 1660d b7ccfa5084e2 Fixes #7086,#6964,#3413,#7001.
DATA RACE in fuse.(*connection).callFuture (2) -1 3 1666d 1666d 14/26 1665d e219f75d8b3c Fuse: Cache `maxActiveRequests` in `connection` to avoid reading it from `fs`.
panic: Unknown syscall NUM error: payload too small. Minimum data lenth required: NUM, but got data length NUM 2 syz, C 79 1666d 1672d 14/26 1666d 55ef37166897 Return well-defined error on short payload in FUSE.
fatal error: sync: unlock of unlocked mutex -1 syz, C 26 1666d 1667d 14/26 1666d 10d1a49c5ba2 Fuse: `DeviceFD.Read`: Lock `DeviceFD` ahead of other locks.
DATA RACE in fuse.(*connection).callFuture -1 1 1670d 1670d 14/26 1667d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*connection).initProcessReply -1 syz, C 14 1668d 1672d 14/26 1667d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).writeLocked -1 syz, C 33 1668d 1672d 14/26 1667d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*connection).Call -1 syz, C 65 1667d 1671d 14/26 1667d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).Release -1 syz, C 404 1667d 1672d 14/26 1667d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in stack.(*PacketBuffer).reset (2) -1 syz 2 1693d 1693d 14/26 1669d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1669d 1694d 14/26 1669d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: Incrementing non-positive count ADDR on stack.PacketBuffer 2 syz, C 9 1680d 1680d 14/26 1669d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
DATA RACE in mqfs.FilesystemType.GetFilesystem -1 1 1684d 1684d 14/26 1669d d1dadc9c19a1 Remove dentry_cache_limit mount option from mqfs.
gvisor build error (13) -1 201 1675d 1682d 14/26 1674d c18ec0b53cf2 Fix race build error.
panic: runtime error: index out of range [NUM] with length NUM (2) 2 syz, C 21 1675d 1682d 14/26 1675d 5fb527632358 Handle 0 sized writes to /dev/net/tun.
panic: PullUp failed (2) 2 syz 4 1683d 1692d 14/26 1680d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
DATA RACE in transport.(*connectionedEndpoint).Listen -1 1 1711d 1711d 14/26 1696d 52bee5297caf unix: call Listening under the endpoint lock
DATA RACE in udp.(*endpoint).Connect (2) -1 syz, C 4 2101d 2107d 14/26 1705d 2485a4e2cb4a Make stack.Route safe to access concurrently
kvm: panic: Sentry detected stuck tasks (4) -1 syz, C 627 1722d 1749d 14/26 1722d 4d29819e13a1 pipe: have separate notifiers for readers and writers
panic: Sentry detected stuck tasks (14) 2 20 1731d 1776d 14/26 1730d b2f8b495ad73 cgroup/cpuset: handle the offset argument of write methods properly
DATA RACE in stack.(*PacketBuffer).reset -1 9 1751d 1752d 14/26 1751d bb1ae811f4eb Prevent PacketBuffers from being returned to the pool too early in nic.
panic: runtime error: makeslice: len out of range (4) 2 36 1752d 1756d 14/26 1752d 37792ee1e6e1 Validate ControlMessageHeader.Length
SYZFAIL: tun: can't open /dev/net/tun -1 syz 339 1760d 2013d 14/26 1760d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
kvm: no output from test machine (2) -1 syz, C 23 1761d 1839d 14/26 1760d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
DATA RACE in cgroupfs.(*cpusData).Generate -1 2 1766d 1770d 14/26 1765d 6078d26588c0 Sychronize access to cpuset controller bitmaps.
DATA RACE in cgroupfs.(*cpusData).Write -1 syz, C 6 1765d 1770d 14/26 1765d 6078d26588c0 Sychronize access to cpuset controller bitmaps.
panic: runtime error: index out of range [NUM] with length NUM 2 syz, C 12 1767d 1769d 14/26 1766d f54a25c1f03e Validate an icmp header before accessing it
panic: interface conversion: kernfs.Inode is nil, not *mqfs.rootInode 2 2 1768d 1770d 14/26 1766d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1767d 1796d 14/26 1766d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: kernfs.Dentry.DecRef() called without holding a reference 2 syz, C 87 1767d 1771d 14/26 1766d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: Only permission mask must be set: ADDR 2 syz, C 756 1767d 1771d 14/26 1767d 4d07fc952d6b Do not leak non-permission mode bits in mq_open(2).
gvisor build error (11) -1 386 1838d 1843d 14/26 1794d c2353e4055ac [op] Fix //debian:debian.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3) -1 syz, C 2034 1795d 1889d 14/26 1794d 0bdd79ccd469 kvm: trap mmap syscalls to map new regions to the guest
DATA RACE in safemem.Copy (3) -1 syz, C 3 1801d 1801d 14/26 1795d 1fe0a6691ff5 Prevent PacketData from being modified.
panic: runtime error: slice bounds out of range [:LINE] with capacity 0 2 2 1845d 1846d 14/26 1796d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
panic: Sentry detected stuck tasks (13) 2 1 1806d 1806d 14/26 1796d 4076153be684 Fix lock ordering violation
Invalid request partialResult in pwritev -1 syz, C 278 1988d 2007d 14/26 1798d 7fac7e32f3a8 Translate syserror when validating partial IO errors
kvm: panic: Watchdog goroutine is stuck (4) -1 18 1826d 1884d 14/26 1798d 14d6cb4436f1 platform/kvm: fix a race condition in vCPU.unlock()
panic: runtime error: slice bounds out of range [40:LINE] 2 3 1852d 1855d 14/26 1798d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
Invalid request partialResult in sendto (2) -1 syz, C 10 1834d 1909d 14/26 1798d e5fe488b2273 Wake up Writers when tcp socket is shutdown for writes.
kvm: panic: Sentry detected stuck tasks (2) -1 syz, C 66 1805d 1968d 14/26 1798d 1947c873423c Fix deadlock in /proc/[pid]/fd/[num]
panic: Sentry detected stuck tasks (12) 2 2 1807d 1807d 14/26 1806d 51b96514cd93 Limit most file mmaps to the range of an int64.
DATA RACE in msgqueue.(*Queue).pop -1 syz, C 2 1832d 1832d 14/26 1808d d6c99694bcb9 Fix race on msgrcv(MSG_COPY).
panic: Sentry detected stuck tasks (11) 2 syz, C 31 1823d 1950d 14/26 1820d 9149b2cefdb5 unix: avoid taking two endpoint locks
panic: runtime error: makeslice: len out of range (3) 2 syz, C 10 1822d 1822d 14/26 1822d 927ea16dd384 unix: handle a case when a buffer is overflowed
panic: unknown error: SIGBUS at ADDR 2 syz, C 17 1824d 1838d 14/26 1823d dfbcb8903ae8 [syserr] Fix SIGBUS on syserr.FromError
DATA RACE in safemem.Copy (2) -1 syz, C 9 1848d 1848d 14/26 1838d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
panic: runtime error: slice bounds out of range [2:LINE] 2 1 1865d 1865d 14/26 1838d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
DATA RACE in buffer.(*buffer).Remove -1 syz, C 2 1848d 1848d 14/26 1838d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
kvm: no output from test machine -1 1107 1848d 1999d 14/26 1848d 569f605f438d Correctly handle interruptions in blocking msgqueue syscalls.
no output from test machine (9) -1 syz, C 2298 1848d 2003d 14/26 1848d 569f605f438d Correctly handle interruptions in blocking msgqueue syscalls.
panic: unable to find an index for ID: 0 2 syz, C 1497 1861d 1862d 14/26 1861d 3d0a9300050a Don't panic on user-controlled state in semaphore syscalls.
DATA RACE in atomic.CompareAndSwapInt32 (4) -1 syz 4 1875d 1868d 14/26 1863d a89b2f005b71 Use atomics when checking for parent setgid in VFS2 tmpfs file creation.
panic: FIN segments must be the final segment in the write list. 2 2 1881d 1881d 14/26 1877d 1fc7a9eac2f2 Do not queue zero sized segments.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (2) -1 syz, C 2532 1889d 2502d 14/26 1889d d703340bc04a runsc: don't kill sandbox, let it stop properly
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup (2) 2 1 1899d 1899d 14/26 1890d 2e6195ffe0ad CreateProcessGroup has to check whether a target process stil exists or not
kvm: panic: Watchdog goroutine is stuck (3) -1 syz, C 48 1905d 1956d 14/26 1903d 3fcbad509300 Fix lock ordering issue when enumerating cgroup tasks.
panic: Watchdog goroutine is stuck (2) 2 1 1916d 1909d 14/26 1904d 3fcbad509300 Fix lock ordering issue when enumerating cgroup tasks.
panic: Incrementing non-positive count ADDR on vfs.Filesystem (2) 2 1 1928d 1927d 14/26 1926d af229f46a149 Fix cgroupfs mount racing with unmount.
panic: PullUp failed 2 syz, C 615 1931d 1932d 14/26 1931d 436148d68a50 Fix panic on consume in a mixed push/consume case
panic: Incrementing non-positive count ADDR on vfs.Filesystem 2 syz, C 2 1949d 1949d 14/26 1931d 78ae3db1a39c Fix cgroup hierarchy registration.
DATA RACE in cgroupfs.FilesystemType.GetFilesystem -1 syz, C 1 1949d 1942d 14/26 1931d 78ae3db1a39c Fix cgroup hierarchy registration.
panic: Sentry detected stuck tasks (10) 2 syz, C 264 1957d 2009d 14/26 1957d b0333d33a206 Optimize safemem.Zero
kvm: panic: Watchdog goroutine is stuck (2) -1 110 1963d 1980d 14/26 1963d f4f6ce337aa8 Don't grab TaskSet mu recursively when reading task state.
panic: Watchdog goroutine is stuck 2 syz, C 1831 1964d 2262d 14/26 1963d f4f6ce337aa8 Don't grab TaskSet mu recursively when reading task state.
panic: makechan: size out of range 2 syz, C 183 1966d 1970d 14/26 1966d dc8f6c691474 Move maxListenBacklog check to sentry
fatal error: unexpected signal during runtime execution -1 syz 272 2034d 2723d 14/26 1966d eb9b8e53a3ef platform/kvm/x86: restore mxcsr when switching from guest to sentry
kvm: panic: Watchdog goroutine is stuck -1 240 1982d 1992d 14/26 1981d 2f3dac78ca9a kvm: prefault a floating point state before restoring it
Invalid request partialResult in write (2) -1 syz, C 11628 1984d 2049d 14/26 1983d 7fac7e32f3a8 Translate syserror when validating partial IO errors
kvm: panic: Sentry detected stuck tasks -1 syz, C 152 1983d 1999d 14/26 1983d 2f3dac78ca9a kvm: prefault a floating point state before restoring it
panic: Sentry detected stuck tasks (9) 2 9 2009d 2010d 14/26 2009d 38c42bbf4ad2 Remove deadlock in raw.endpoint caused by recursive read locking
panic: Sentry detected stuck tasks (8) 2 syz, C 64 2010d 2012d 14/26 2010d f5692f7dcc48 Kernfs should not try to rename a file to itself.
no output from test machine (8) -1 syz, C 15268 2011d 2114d 14/26 2011d acd516cfe292 Add YAMA security module restrictions on ptrace(2).
panic: running on goroutine 582 (task goroutine for kernel.Task ADDR is 400) 2 syz, C 1 2015d 2015d 14/26 2011d 6e000d3424c0 Use async task context for async IO.
panic: unknown error *tcpip.ErrMalformedHeader 2 syz, C 5 2027d 2020d 14/26 2011d c39284f45738 Let sentry understand tcpip.ErrMalformedHeader
panic: Sentry detected stuck tasks (7) 2 syz 2567 2012d 2043d 14/26 2012d c5a4e100085c unix: sendmmsg and recvmsg have to cap a number of message to UIO_MAXIOV
panic: wd changed: "/tmp" -> "(unreachable)/" 2 syz 2534 2024d 2105d 14/26 2024d 97a36d169698 Don't allow to umount the namespace root mount
Invalid request partialResult in sendto -1 syz, C 236 2033d 2036d 14/26 2025d d6d169320cd4 Add ETIMEDOUT to partial result list
FATAL ERROR: executing processes for container: executing command "/syz-fuzzer -executor=/syz-executor -name=vm-1 -arch= -1 4 2031d 2033d 14/26 2025d 120c8e346871 Replace TaskFromContext(ctx).Kernel() with KernelFromContext(ctx)
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup 2 syz, C 12 2042d 2042d 14/26 2025d fe4f4789601d kernel: reparentLocked has to update children maps of old and new parents
panic: Child "." for parent Dentry &{vfsd:{mu:{m:{Mutex:{state:LINE sema:LINE}}} dead:false mounts:LINE impl:ADDR} refs: 2 syz, C 13 2025d 2035d 14/26 2025d 09afd6832689 [vfs] Handle `.` and `..` as last path component names in kernfs Rename.
panic: Start ADDR + offset ADDR overflows? 2 syz, C 19 2050d 2356d 14/26 2025d bf4968e17d7d exec: don't panic if an elf file is malformed
panic: Decrementing non-positive ref count ADDR, owned by vfs.FileDescription 2 syz, C 12 2056d 2051d 14/26 2039d abdff887483f Do not send SCM Rights more than once when message is truncated.
DATA RACE in safemem.Copy -1 syz, C 4 2044d 2044d 14/26 2040d 76da673a0dda Do not modify IGMP packets when verifying checksum
panic: Sentry detected stuck tasks (6) 2 syz 714 2044d 2096d 14/26 2044d e57ebcd37a7b Simplify the pipe implementation.
panic: IPv6 payload too large: NUM, must be <= NUM 2 syz, C 46 2052d 2084d 14/26 2049d ec9e263f213c Correctly return EMSGSIZE when packet is too big in raw socket.
panic: buffer too long by 8 bytes 2 syz, C 12 2064d 2082d 14/26 2060d ce7a4440cae8 Fix panic when parsing SO_TIMESTAMP cmsg
panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2061d 2105d 14/26 2060d 2a200811d4c9 fs/fuse: check that a task has a specified file descriptor
panic: invalid pipe flags: must be readable, writable, or both 2 1 2070d 2070d 14/26 2060d 807a080d9574 Add missing error checks for FileDescription.Init.
DATA RACE in stack.(*NIC).DeliverNetworkPacket -1 4 2084d 2093d 14/26 2067d 25ebddbddfbc Fix a data race in packetEPs
panic: runtime error: integer divide by zero 2 syz, C 116 2184d 2210d 14/26 2067d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
panic: error when reading RouterAlert option's data bytes: EOF 2 syz, C 35 2082d 2084d 14/26 2067d c55e5bda4d45 Validate router alert's data length
DATA RACE in raw.(*endpoint).HandlePacket -1 syz, C 5 2080d 2080d 14/26 2067d 981faa2c1229 RLock Endpoint in raw.Endpoint.HandlePacket
panic: header.ScopeForIPv6Address(172.20.20.170): bad address 2 syz, C 48 2089d 2095d 14/26 2067d b15acae9a6e2 Fix error code for connect in raw sockets.
panic: close of nil channel (2) 2 1 2091d 2090d 14/26 2067d f6407de6bafb [syzkaller] Avoid AIOContext from resurrecting after being marked dead.
panic: Unknown syscall 165 error: strconv.ParseInt: parsing "ADDR": invalid syntax 2 syz, C 51 2090d 2095d 14/26 2067d 9c198e5df421 Fix error handling on fusefs mount.
DATA RACE in header.ICMPv6Checksum -1 syz, C 1 2082d 2082d 14/26 2067d 946cb909e62e Don't modify a packet header when it can be used by other endpoints
panic: Unknown syscall 8 error: EOF 2 syz 22 2078d 2085d 14/26 2067d 1ea241e4cc95 Fix seek on /proc/pid/cmdline when task is zombie.
panic: Stack for running G's are skipped while panicking. 2 syz, C 2426 2367d 2620d 14/26 2069d ab7ecdd66d2a watchdog: print panic error message before other messages
panic: Sentry detected stuck tasks (5) 2 syz 83 2096d 2109d 0/26 2096d 79e2364933bb Fix deadlock in UDP handleControlPacket path.
DATA RACE in log.GoogleEmitter.Emit -1 syz, C 34 2107d 2113d 0/26 2106d 9c553f2d4e4b Remove racy stringification of socket fds from /proc/net/*.
panic: runtime error: slice bounds out of range [255:LINE] 2 syz, C 5 2111d 2111d 0/26 2107d 49adf36ed7d3 Fix possible panic due to bad data.
panic: cacheLocked called on a dentry which has already been destroyed: &{{{{0 0}} true 0 ADDR} -1 ADDR 1 ADDR NUM false 2 1 2112d 2112d 0/26 2107d 74bc6e56ccd9 [vfs] kernfs: Do not panic if destroyed dentry is cached.
gvisor boot error: FATAL ERROR: running container: creating container: open /sys/fs/cgroup/devices/ci-gvisor-kvm-proxy-overlay-sandbox-test -1 1 2109d 2109d 0/26 2108d 764504c38fb5 runsc: check whether cgroup exists or not for each controller
panic: Sentry detected stuck tasks (4) 2 syz, C 5 2109d 2110d 0/26 2109d 05d2a26f7a86 Fix possible deadlock in UDP.Write().
panic: Incrementing non-positive count ADDR on tmpfs.inode 2 syz 2 2113d 2113d 0/26 2109d 10ba578c0182 tmpfs: make sure that a dentry will not be destroyed before the open() call
panic: Sentry detected stuck tasks (3) 2 syz, C 180 2110d 2114d 0/26 2110d 267560d159b2 Reset watchdog timer between sendfile() iterations.
panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2122d 2140d 0/26 2114d 4e389c785779 Check for nil in kernel.FSContext functions.
panic: Decrementing non-positive ref count ADDR, owned by *mm.SpecialMappable 2 56 2114d 2144d 0/26 2114d dcc1b71f1ba4 Fix reference counting on kcov mappings.
panic: Sentry detected stuck tasks (2) 2 syz, C 951 2114d 2155d 0/26 2114d db36d948fa63 TCP Receive window advertisement fixes.
no output from test machine (7) -1 syz, C 184 2114d 2141d 0/26 2114d 34a6e9576a96 loader/elf: validate file offset
panic: runtime error: makeslice: len out of range (2) 2 syz, C 5 2114d 2142d 0/26 2114d cd108432a50e splice: return EINVAL is len is negative
panic: Incrementing non-positive ref count ADDR owned by *mm.SpecialMappable 2 45 2116d 2144d 0/26 2114d dcc1b71f1ba4 Fix reference counting on kcov mappings.
panic: Child "" for parent Dentry &{vfsd:{mu:{Mutex:{state:LINE sema:LINE}} dead:false mounts:LINE impl:ADDR} DentryRefs 2 syz, C 3 2119d 2128d 0/26 2114d 1321f837bd9f [vfs2] Refactor kernfs checkCreateLocked.
panic: unknown error: EOF 2 syz, C 68 2142d 2145d 0/26 2141d c002fc36f9bb sockets: ignore io.EOF from view.ReadAt
no output from test machine (6) -1 syz 1873 2149d 2155d 0/26 2149d 76a09f0cf599 syscalls: Don't leak a file on the error path
no output from test machine (5) -1 syz, C 86414 2155d 2270d 0/26 2155d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
panic: Sentry detected stuck tasks 2 syz, C 506 2155d 2175d 0/26 2155d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
DATA RACE in tcp.(*endpoint).bindLocked -1 syz 2 2186d 2186d 0/26 2179d 38cdb0579b69 Fix data race in tcp.GetSockOpt.
panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2188d 2723d 0/26 2179d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 -1 syz 21 2262d 2269d 0/26 2261d 70c45e09cfd1 socket/unix: (*connectionedEndpoint).State() has to take the endpoint lock
panic: Sentry detected 1 stuck task(s): 2 syz, C 6204 2272d 2359d 0/26 2269d 4950ccde75b3 Fix write hang bug found by syzkaller.
DATA RACE in atomic.LoadInt64 -1 1 2277d 2277d 0/26 2275d 7da69fe9719b Fix data race on f.offset.
DATA RACE in fs.(*File).offsetForAppend -1 syz 2 2277d 2277d 0/26 2275d 7da69fe9719b Fix data race on f.offset.
DATA RACE in kernel.(*Task).accountTaskGoroutineEnter -1 syz 2 2300d 2300d 0/26 2298d 8dd1d5b75a95 Don't call kernel.Task.Block() from netstack.SocketOperations.Write().
panic: D0415 01:LINE.ADDR 8857 transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 95} 2 1 2326d 2326d 0/26 2310d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: close of nil channel 2 syz 6 2319d 2324d 0/26 2317d 37f863f62813 tcp: handle listen after shutdown properly
panic: D0414 08:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2} 2 1 2327d 2327d 0/26 2325d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 11:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 95} 2 1 2327d 2327d 0/26 2325d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 14:LINE.ADDR NUM task_exit.go:LINE] [ 98] Transitioning from exit state TaskExitNone to TaskExitInitiate 2 1 2327d 2327d 0/26 2325d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 16:LINE.ADDR 5236 transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2} 2 1 2327d 2327d 0/26 2325d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 13:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2} 2 1 2327d 2327d 0/26 2325d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: interface conversion: context.Context is kernel.taskAsyncContext, not *kernel.Task 2 syz 16 2329d 2345d 0/26 2329d c9195349c9ac Replace type assertion with TaskFromContext.
panic: runtime error: makeslice: len out of range 2 syz 49 2331d 2353d 0/26 2331d a10389e783aa splice: cap splice calls to MAX_RW_COUNT
DATA RACE in tcp.(*endpoint).Readiness -1 syz 2 2351d 2351d 0/26 2345d d04adebaab86 Fix data-race in endpoint.Readiness
DATA RACE in netstack.(*SocketOperations).SetSockOpt -1 syz 2 2350d 2350d 0/26 2348d 369cf38bd718 Fix data race in SetSockOpt.
DATA RACE in tcp.(*endpoint).SetSockOpt -1 syz 26 2353d 2373d 0/26 2348d e9e399c25d4f Remove workMu from tcpip.Endpoint.
DATA RACE in udp.(*endpoint).SetSockOptBool -1 syz 2 2367d 2360d 0/26 2351d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
no output from test machine (3) -1 syz, C 11663 2354d 2443d 0/26 2354d b55f0e5d40c1 fdtable: don't try to zap fdtable entry if close is called for non-existing fd
panic: Watchdog goroutine is stuck: 2 12 2355d 2361d 0/26 2355d 1c0535297067 Fix oom_score_adj.
panic: Sentry detected 4 stuck task(s): 2 7 2355d 2365d 0/26 2355d b0f2c3e7646d Fix infinite loop in semaphore.sem.wakeWaiters().
fatal error: out of memory (3) -1 syz 3 2360d 2360d 0/26 2360d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: too many address space collisions for -race mode -1 syz 3 2360d 2360d 0/26 2360d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: concurrent map iteration and map write (2) -1 syz 1 2371d 2371d 0/26 2362d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).ListXattr -1 1 2371d 2371d 0/26 2362d 62bd3ca8a375 Take write lock when removing xattr
lost connection to test machine (4) -1 1025286 2362d 2534d 0/26 2362d 6b4d36e32532 Hide /dev/net/tun when using hostinet.
DATA RACE in udp.(*endpoint).Connect -1 syz 10 2367d 2374d 0/26 2362d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).RemoveXattr -1 syz 2 2371d 2371d 0/26 2362d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in tcp.(*endpoint).windowCrossedACKThreshold -1 syz 10 2373d 2374d 0/26 2362d 33101752501f Fix data-race when reading/writing e.amss.
DATA RACE in stack.(*TransportEndpointInfo).AddrNetProto -1 syz 148 2367d 2374d 0/26 2362d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
fatal error: concurrent map read and map write (2) -1 syz 2 2371d 2371d 0/26 2362d 62bd3ca8a375 Take write lock when removing xattr
panic: runtime error: index out of range [1] with length 0 2 syz, C 1518 2367d 2374d 0/26 2362d 43abb24657e7 Fix panic caused by invalid address for Bind in packet sockets.
DATA RACE in netstack.(*SocketOperations).fetchReadView -1 syz 12 2367d 2374d 0/26 2362d 42fb7d349137 socket: take readMu to access readView
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).GetXattr -1 syz 3 2371d 2371d 0/26 2362d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in fs.(*UnstableAttr).SetOwner (2) -1 syz 3 2407d 2400d 0/26 2374d 115898e368e4 Prevent DATA RACE in UnstableAttr.
DATA RACE in fs.mayDelete -1 1 2403d 2396d 0/26 2374d fba479b3c786 Fix DATA RACE in fs.MayDelete.
DATA RACE in fs.(*Dirent).IncRef -1 syz 1 2400d 2393d 0/26 2374d 53504e29ca27 Fix mount refcount issue.
panic: Incrementing non-positive ref count (4) 2 syz, C 5 2391d 2393d 0/26 2374d 53504e29ca27 Fix mount refcount issue.
panic: munmap(ADDR, NUM)) failed: function not implemented (3) 2 1 2444d 2437d 0/26 2374d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: munmap(0, ADDR)) failed: function not implemented (3) 2 1 2429d 2422d 0/26 2374d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: wait failed: the process NUM:NUM exited: 1f (err <nil>) (2) 2 17 2427d 2449d 0/26 2374d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: wait failed: the process 9793:LINE exited: 1f (err <nil>) 2 syz, C 1 2445d 2438d 0/26 2374d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: wait failed: the process 4877:LINE exited: 1f (err <nil>) 2 1 2444d 2437d 0/26 2374d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: runtime error: slice bounds out of range [:LINE] with capacity 16 2 syz 42 2425d 2437d 0/26 2374d b3ae8a62cfdf Fix slice bounds out of range panic in parsing socket control message.
panic: wait failed: the process NUM:LINE exited: 1f (err <nil>) (4) 2 2 2437d 2431d 0/26 2374d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
DATA RACE in refs.(*WeakRef).init (2) -1 1 2467d 2460d 0/26 2395d 3db317390b5c Remove epoll entry from map when dropping it.
DATA RACE in refs.(*AtomicRefCount).DecRefWithDestructor -1 1 2414d 2407d 0/26 2395d 3db317390b5c Remove epoll entry from map when dropping it.
panic: interface conversion: refs.RefCounter is *fs.File, not *fs.Dirent 2 3 2408d 2418d 0/26 2395d 3db317390b5c Remove epoll entry from map when dropping it.
Invalid request partialResult in splice (2) -1 syz 134 2403d 2440d 0/26 2401d f263801a74d4 fs/splice: don't report partial errors for special files
fatal error: out of memory (2) -1 1 2417d 2410d 0/26 2401d 4cb55a7a3b09 Prevent arbitrary size allocation when sending UDS messages.
panic: invalid allocation length: 0x0 (3) 2 syz 12 2404d 2404d 0/26 2401d ede8dfab3760 Enforce splice offset limits
DATA RACE in fs.Rename (3) -1 1 2415d 2415d 0/26 2414d f1a5178c589d Fix data race in MountNamespace.resolve.
DATA RACE in tty.(*queue).readableSize -1 syz 2 2416d 2416d 0/26 2414d 80d0f9304484 Fix data race in tty.queue.readableSize.
panic: Incrementing non-positive ref count (3) 2 2 2435d 2445d 0/26 2424d 6410387ff9b4 Cleanup Shm reference handling
panic: munmap(ADDR, 1000)) failed: function not implemented (3) 2 2 2461d 2462d 0/26 2424d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
DATA RACE in fs.(*UnstableAttr).SetOwner -1 1 2444d 2444d 0/26 2443d bb00438f36eb Make masterInodeOperations.Truncate take a pointer receiver.
DATA RACE in fsutil.(*InodeSimpleAttributes).SetPermissions -1 syz 3 2444d 2444d 0/26 2443d bb00438f36eb Make masterInodeOperations.Truncate take a pointer receiver.
no output from test machine (2) -1 syz, C 6325 2450d 2566d 0/26 2450d 378d6c1f3697 unix: allow to bind unix sockets only to AF_UNIX addresses
DATA RACE in fs.Rename (2) -1 syz, C 433 2701d 2723d 0/26 2457d 89cc8eef9ba6 DATA RACE in fs.(*Dirent).fullName
Invalid request partialResult in sendfile (2) -1 syz, C 1341 2523d 2723d 0/26 2520d db218fdfcf16 Don't report partialResult errors from sendfile
Invalid request partialResult in splice -1 syz, C 206 2523d 2572d 0/26 2523d 7a234f736fe0 splice: try another fallback option only if the previous one isn't supported
lost connection to test machine (3) -1 syz, C 30758 2573d 2723d 0/26 2570d af90e68623c7 netlink: return an error in nlmsgerr
panic: node.Readdir returned offset -ADDR less than input offset ADDR 2 syz, C 26 2640d 2723d 0/26 2570d ab6774cebf5c gvisor/fs: getdents returns 0 if offset is equal to FileMaxOffset
DATA RACE in ramfs.(*dirFileOperations).Readdir -1 syz 1 2772d 2723d 0/26 2571d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
no output from test machine -1 syz, C 27191 2573d 2723d 0/26 2573d af90e68623c7 netlink: return an error in nlmsgerr
DATA RACE in kernel.(*Kernel).EmitUnimplementedEvent -1 syz 3 2585d 2586d 0/26 2585d cf2b2d97d512 Initialize kernel.unimplementedSyscallEmitter with a sync.Once.
DATA RACE in atomic.AddInt32 -1 1 2599d 2599d 0/26 2597d 542fbd01a7ed Fix race in FDTable.GetFDs().
panic: Unknown syscall 85 error: link should be resolved via Readlink() 2 syz 64 2608d 2605d 0/26 2604d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 2 error: link should be resolved via Readlink() 2 syz 16 2609d 2605d 0/26 2604d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 257 error: link should be resolved via Readlink() 2 syz 14 2608d 2612d 0/26 2606d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Incrementing non-positive ref count (2) 2 syz, C 183 2612d 2620d 0/26 2612d 4f2f44320f9b Simplify (and fix) refcounts in createAt.
DATA RACE in atomic.AddInt64 -1 1 2641d 2634d 0/26 2617d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in fs.(*lockedReader).Read -1 1 2639d 2632d 0/26 2620d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in atomic.StoreInt64 -1 syz 2 2627d 2632d 0/26 2620d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in mm.(*MemoryManager).Brk -1 syz 14 2660d 2676d 0/26 2659d 14f0e7618e28 Ensure all uses of MM.brk occur under MM.mappingMu in MM.Brk().
panic: hashed child "stat\t\xe9\xdc\xdf\x02\x02\x98\xcc\xf3<\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q\nI\xf81U\ro}\xe 2 syz, C 7 2703d 2696d 0/26 2677d 2df64cd6d2c8 createAt should return all errors from FindInode except ENOENT.
DATA RACE in fs.(*Dirent).fullName -1 3 2706d 2723d 0/26 2696d 89cc8eef9ba6 DATA RACE in fs.(*Dirent).fullName
panic: hashed over a positive child "file0" 2 1 2705d 2705d 0/26 2702d 61d8c361c663 Don't release d.mu in checks for child-existence.
DATA RACE in tty.(*lineDiscipline).masterReadiness -1 1 2704d 2704d 0/26 2703d c79e81bd27cd Addresses data race in tty implementation.
DATA RACE in tty.(*queue).WriteFromBlocks -1 syz 7 2704d 2707d 0/26 2703d c79e81bd27cd Addresses data race in tty implementation.
panic: runtime error: index out of range (2) 2 syz, C 7191 2703d 2709d 0/26 2703d 82529becaee6 Fix index out of bounds in tty implementation.
DATA RACE in atomic.CompareAndSwapInt32 (2) -1 syz 2 2705d 2705d 0/26 2703d d14a7de65865 Fix more data races in shm debug messages.
DATA RACE in atomic.CompareAndSwapInt32 -1 syz, C 9 2710d 2723d 0/26 2706d cea1dd7d21b9 Remove racy access to shm fields.
DATA RACE in netlink.(*Socket).SetSockOpt -1 syz 2 2722d 2722d 0/26 2706d 7b33df68450b Fix data race in netlink send buffer size
DATA RACE in dev.(*randomDevice).GetFile -1 1 2711d 2711d 0/26 2706d 645af7cdd8a1 Dev device methods should take pointer receiver.
DATA RACE in fsutil.(*InodeSimpleAttributes).UnstableAttr -1 syz 8 2771d 2774d 0/26 2768d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
panic: invalid allocation length: 0x0 (2) 2 syz, C 4 2810d 2811d 0/26 2809d 3b3f02627870 Truncate ar before calling mm.breakCopyOnWriteLocked().
gvisor boot error (3) -1 4 2814d 2816d 0/26 2814d 1775a0e11e56 container.Destroy should clean up container metadata even if other cleanups fail
DATA RACE in shm.(*Registry).findByKey -1 syz, C 47 2921d 2987d 0/26 2816d f93c288dd708 Fix a data race on Shm.key.
gvisor test error (2) -1 2778 2832d 2967d 0/26 2816d 24c1158b9c21 Add "trace signal" option
panic: invalid type: int 2 syz, C 559 2835d 2936d 0/26 2816d 5560615c531b Return an int32 for netlink SO_RCVBUF
panic: ptrace set regs failed: input/output error 2 syz, C 712 2821d 2919d 0/26 2816d 99d595869332 Validate FS_BASE in Task.Clone
Invalid request partialResult in sendfile -1 syz, C 7399 2821d 2975d 0/26 2816d ffcbda0c8bd7 Partial writes should loop in rpcinet.
panic: Decrementing non-positive ref count 2 syz, C 4804 2911d 2989d 0/26 2816d 0e277a39c8b6 Prevent premature destruction of shm segments.
panic: ptrace status unexpected: got 9, wanted stopped (2) 2 syz 78 2822d 2974d 0/26 2816d e7191f058f55 Use TRAP to simplify vsyscall emulation.
panic: invalid allocation length: 0x0 2 syz, C 223 2822d 2989d 0/26 2816d 46603b569c3a Fix panic on creation of zero-len shm segments.
DATA RACE in fs.(*Dirent).getDotAttrs -1 1 2929d 2929d 0/26 2816d 54dd0d0dc5ee Fix data race caused by unlocked call of Dirent.descendantOf.
panic: runtime error: invalid memory address or nil pointer dereference (2) 2 syz, C 4493 2911d 2931d 0/26 2874d beac59b37a8b Fix panic if FIOASYNC callback is registered and triggered without target
gvisor boot error -1 1911 2892d 2970d 0/26 2874d 43e6aff50e23 Don't fail if Root is readonly and is not a mount point
DATA RACE in kernel.(*Task).setKUIDsUncheckedLocked -1 syz, C 15 2924d 2982d 0/26 2874d f8ccfbbed487 Document more task-goroutine-owned fields in kernel.Task.
DATA RACE in fs.(*Dirent).hashChildParentSet -1 syz 8 2926d 2929d 0/26 2874d 8d318aac5532 fs: Hold Dirent.mu when calling Dirent.flush().
DATA RACE in waiter.(*Entry).Prev -1 syz, C 3992 2936d 2988d 0/26 2931d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Entry).Next -1 syz, C 2418 2936d 2988d 0/26 2931d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
fatal error: concurrent map read and map write -1 66 2941d 2944d 0/26 2931d dbbe9ec91541 Protect PCIDs with a mutex.
DATA RACE in waiter.(*Entry).SetNext -1 syz, C 739 2935d 2988d 0/26 2931d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
fatal error: concurrent map writes -1 3 2941d 2942d 0/26 2931d dbbe9ec91541 Protect PCIDs with a mutex.
panic: runtime error: index out of range 2 syz, C 35 2948d 2984d 0/26 2931d e97717e29a1b Enforce Unix socket address length limit
DATA RACE in waiter.(*Entry).SetPrev -1 70 2936d 2988d 0/26 2931d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Queue).Notify -1 syz, C 72 2936d 2988d 0/26 2931d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in unix.(*connectionlessEndpoint).UnidirectionalConnect -1 syz, C 965 2942d 2972d 0/26 2931d 2a44362c0b99 Fix data race in unix.BoundEndpoint.UnidirectionalConnect.
panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2935d 2989d 0/26 2931d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in kernel.(*Task).exitNotifyLocked -1 syz, C 2 2960d 2960d 0/26 2942d c036da5dffdf Hold TaskSet.mu in Task.Parent.
panic: invalid segment range [ADDR, ADDR) 2 syz, C 255 2978d 2989d 0/26 2963d 06920b3d1bb6 Exit tmpfs.fileInodeOperations.Translate early if required.Start >= EOF.
DATA RACE in kernel.(*Task).Clone -1 3 2966d 2978d 0/26 2963d 41aeb680b188 Inherit parent in clone(CLONE_THREAD) under TaskSet.mu.
DATA RACE in fs.(*Watch).Notify -1 syz 2 2979d 2979d 0/26 2977d 34af9a61741f Fix data race on inotify.Watch.mask.
lost connection to test machine (2) -1 syz, C 1814 2978d 2988d 0/26 2977d 52ddb8571c46 Skip overlay on root when its readonly
DATA RACE in fs.Rename -1 syz, C 16 2978d 2987d 0/26 2977d 2821dfe6ce95 Hold d.parent.mu when reading d.name
panic: MountNamespace.FindInode: path is empty 2 syz, C 3443 2977d 2989d 0/26 2977d 062a6f6ec5f4 Handle NUL-only paths in exec
panic: runtime error: slice bounds out of range 2 syz, C 39 2982d 2989d 0/26 2982d 1ceed49ba94c Check for invalid offset when submitting an AIO read/write request.
DATA RACE in proc.forEachMountSource -1 syz, C 24 2983d 2988d 0/26 2982d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in kernel.(*Task).Value -1 1 2986d 2986d 0/26 2982d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in semaphore.(*Set).checkPerms -1 syz, C 21 2983d 2987d 0/26 2983d 6b6852bceb12 Fix semaphore data races
DATA RACE in semaphore.(*Registry).RemoveID -1 syz, C 15 2984d 2988d 0/26 2983d 6b6852bceb12 Fix semaphore data races
DATA RACE in queue.(*Queue).Enqueue -1 syz, C 7 2985d 2988d 0/26 2984d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in unix.(*queueReceiver).RecvQueuedSize -1 syz, C 5 2984d 2987d 0/26 2984d 5f7f78c1d7ee Fix data races in Unix sockets
panic: munmap(ADDR, c6000)) failed: function not implemented 2 1 2988d 2988d 0/26 2984d dc33d71f8cf1 Change SIGCHLD to SIGKILL in ptrace stubs.
DATA RACE in unix.(*streamQueueReceiver).RecvQueuedSize -1 syz, C 3 2985d 2987d 0/26 2984d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in kernel.(*FSContext).SetWorkingDirectory -1 1 2988d 2988d 0/26 2984d 4ac79312b093 Don't read cwd or root without holding mu
DATA RACE in proc.(*mountInfoFile).ReadSeqFileData.func1 -1 1 2988d 2988d 0/26 2984d 1a9917d14d66 MountSource.Root() should return a refernce on the dirent.
DATA RACE in kernel.(*FSContext).SetRootDirectory -1 syz, C 165 2985d 2988d 0/26 2984d 478f0ac0038a Don't read FSContext.root without holding FSContext.mu
panic: munmap(ADDR, 0)) failed: invalid argument 2 syz, C 5 2989d 2989d 0/26 2988d fe3fc44da3ca Handle mremap(old_size=0).