Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
panic: Sentry detected stuck tasks (36) 2 8 1d11h 24d 26/26 1h19m 15e33efbdaee Do not present memory.current on the true root cgroup2 node
kvm: panic: Sentry detected stuck tasks (31) -1 1 1d11h 19h56m 26/26 13h21m d16b52a7d05e images/gpu: fix non-building images for nccl-tests and vllm
WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE -1 syz 8 98d 163d 26/26 8d02h b1abaf7973d0 Fix race where unregistered sysmsg threads starts processing contexts.
kvm: panic: Sentry detected stuck tasks (30) -1 syz, C 15 156d 194d 26/26 17d 6a24f67cce95 Set clone propagation to MS_PRIVATE upon BindAt failure.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (4) -1 syz, C 16178 17d 1803d 26/26 17d bd30d19d87ae Add cos and ubuntu-gpu release agents
fatal error: stack overflow (6) -1 syz, C 3626 43d 47d 26/26 31d a349c019667d Add cycle detection and jump recursion depth limit for netfilter.
SYZFAIL: too much cover (2) -1 1 76d 69d 26/26 31d 31a791793542 Split Landlock syscall tests by ABI version.
panic: UserChainTarget should never be called. 2 syz, C 457 43d 45d 26/26 31d 9d9b0681e814 Fix panic in iptables UserChainTarget.Action().
panic: thread group not visible in its own or an ancestor PID namespace 2 syz, C 17 49d 50d 26/26 31d ca90691b284b SO_PEERCRED: fix race against thread-group reap
panic: runtime error: invalid memory address or nil pointer dereference (32) 2 syz 6 81d 74d 26/26 73d 35db98496ee1 clone: Deliver pidfd only after child init
SYZFAIL: posix_spawnp failed -1 syz 6361 105d 637d 26/26 105d a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount
panic: Incrementing non-positive count ADDR on nsfs.Inode 2 syz, C 20 138d 138d 26/26 133d e0b8f07fefe9 pidfds: Fix setns() race with a dying target pidns
DATA RACE in kernel.(*Task).waitParentLocked -1 syz, C 5 136d 136d 26/26 133d 79075c279368 clone3: Create pidfds before making new task visible
kvm: no output from test machine (6) -1 syz, C 5 137d 137d 26/26 133d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: nested locking: kernel.taskSetRWMutex: (3) 2 syz, C 8 137d 137d 26/26 133d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 140d 140d 26/26 140d b31f2afdec69 setns: Fix setns(nsfd, 0x0)
DATA RACE in kernel.(*Task).waitCollectZombieLocked -1 syz 5 154d 187d 26/26 149d 149ca746755e wait: Prefer group exit status for non-consuming waits
panic: Sentry detected stuck tasks (35) 2 syz 41 157d 209d 26/26 156d c057198fd552 Resolve deadlock in /proc/[pid]/fdinfo/[fd].
DATA RACE in mm.(*MemoryManager).DecUsers -1 syz, C 4 186d 186d 26/26 184d 70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as.
DATA RACE in usertrap.(*State).PatchSyscall -1 syz 2 212d 212d 26/26 211d c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.
panic: ktime.SyntheticClock (time=ADDR) does not contain enqueued timer ADDR for time=ADDR with setting {Enabled:false N 2 syz, C 11 232d 232d 26/26 232d 5f31525f7613 Catch negative values in `timer_settime(2)`.
panic: Sentry detected stuck tasks (34) 2 2 247d 253d 26/26 247d 534579b743fb watchdog: Add a "stuck goroutines" suffix to the full stack dump at panic
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (3) 2 syz, C 11 262d 262d 26/26 247d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
panic: SampledTimer(ADDR).Set called in pause state NUM 2 syz, C 11 262d 262d 26/26 247d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
DATA RACE in netlink.(*Socket).SetSockOpt (2) -1 syz, C 6 278d 278d 26/26 276d 512aa34f81ab netlink: Fix data race on socket.sendBufferSize
FATAL ERROR: running container: starting container: starting root container: urpc method "containerManager.StartRoot" fa -1 127 311d 317d 26/26 301d c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation
gvisor test error: FATAL ERROR: running container: starting container: starting root container: urpc method "containerManager.StartRoot" fa -1 1 317d 317d 26/26 301d c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation
gvisor test error: FATAL ERROR: error executing umounter: fork/exec /proc/self/exe: no such file or directory -1 4 317d 317d 26/26 301d c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation
kvm: panic: Sentry detected stuck tasks (29) -1 syz, C 3 305d 306d 26/26 303d 2d94e669ae96 Avoid netlink deadlock
panic: Sentry detected stuck tasks (33) 2 syz, C 13 304d 305d 26/26 303d 2d94e669ae96 Avoid netlink deadlock
gvisor test error: SYZFATAL: image testing failed w/o kernel bug (4) -1 1228 310d 346d 26/26 309d ac46fb4b6126 coverage: call cfile.InitHook from InitCoverageData
DATA RACE in kernel.(*Task).MemoryManager (4) -1 1 351d 351d 26/26 309d 849e1bd48cc9 kernel: lock Task.mu in Task.MaxRSS
panic: registering already registered file 2 syz, C 164 338d 357d 26/26 309d c7e2a2ab44b4 Check for EventRegister success before setting FileAsync.registered.
panic: Sentry detected stuck tasks (32) 2 5 312d 350d 26/26 309d b3f000ac172f Do not retry on invalid UDP send buffers
panic: unregistering unregistered file 2 syz, C 641 349d 350d 26/26 309d 18edfee32572 Add async handler methods to FUSE DeviceFD.
panic: WARNING: circular locking detected: kernfs.ancestryRWMutex -> vfs.inotifyEventMutex: (2) 2 3 363d 384d 26/26 309d 9daae06f8ded sentry/kernel: unshare atomically and without holding Task.mu unnecessarily
panic: runtime error: slice bounds out of range [NUM:NUM] (4) 2 syz, C 78 327d 330d 26/26 309d 7532ec065ecc Fix: Check for errors in FUSE Readlink response.
DATA RACE in transport.(*connectionedEndpoint).PeerCreds -1 syz, C 8 377d 382d 26/26 310d 6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests.
panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 357d 357d 26/26 357d 41a5b6c519ee Check for connection in FUSE EventRegister.
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: (2) 2 syz, C 15 360d 362d 26/26 360d aba998b90aff kernel: Defer DecRef in SetWorkingDirectory to break lock cycle
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.ancestryRWMutex: 2 1 366d 366d 26/26 364d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
DATA RACE in transport.(*connectionedEndpoint).SetPeerCreds -1 syz, C 3958 377d 385d 26/26 364d 2f7f776a4464 Automated rollback of changelist 798788535
DATA RACE in transport.(*connectionedEndpoint).BidirectionalConnect -1 syz, C 11531 377d 385d 26/26 364d 2f7f776a4464 Automated rollback of changelist 798788535
panic: Sentry detected stuck tasks (31) 2 3 365d 407d 26/26 364d 6448dbe1b799 procfs: release the file system mutex on the error path
gvisor test error: init process did not start -1 1 384d 384d 26/26 364d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
DATA RACE in transport.(*connectionedEndpoint).swapPeerCreds -1 syz, C 2636 377d 385d 26/26 364d 2f7f776a4464 Automated rollback of changelist 798788535
panic: nested locking: kernfs.filesystemRWMutex: (10) 2 syz, C 16 368d 436d 26/26 364d 6448dbe1b799 procfs: release the file system mutex on the error path
panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 379d 382d 26/26 364d 2f7f776a4464 Automated rollback of changelist 798788535
panic: WARNING: circular locking detected: kernel.fsContextMutex -> tmpfs.filesystemRWMutex: 2 4 368d 371d 26/26 365d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: mm.mappingRWMutex -> kernel.fsContextMutex: 2 5 366d 369d 26/26 365d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: vfs.inotifyEventMutex -> mm.mappingRWMutex: (2) 2 5 367d 371d 26/26 365d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: 2 syz, C 10461 365d 371d 26/26 365d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: WARNING: circular locking detected: kernel.fsContextMutex -> vfs.inotifyEventMutex: 2 16 366d 371d 26/26 365d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: Decrementing non-positive ref count ADDR, owned by tun.tunEndpoint 2 syz, C 19 367d 367d 26/26 366d 20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.
kvm: panic: Watchdog goroutine is stuck (7) -1 syz 4 372d 389d 26/26 371d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
panic: Watchdog goroutine is stuck (4) 2 syz 250 371d 456d 26/26 371d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
gvisor build error (25) -1 624 385d 393d 26/26 385d 49a6cc35fab1 kvm: pagetables: Enable 5-level paging
DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1 -1 syz 3 388d 391d 26/26 385d 1941bc68e20d Fix race between unshare(2) and execve(2).
DATA RACE in kernel.(*Task).Unshare -1 syz, C 6 390d 391d 26/26 385d 1941bc68e20d Fix race between unshare(2) and execve(2).
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.packetEPsRWMutex: 2 1 429d 429d 26/26 420d d48212e236c1 No need to lock packetEPsMu in newNIC.
kvm: panic: Sentry detected stuck tasks (28) -1 syz, C 11 458d 463d 26/26 435d 973b2f23e566 Check for fatal signals and reset watchdog during MM.mapASLocked().
panic: WARNING: circular locking detected: kernfs.ancestryRWMutex -> vfs.inotifyEventMutex: 2 1 459d 452d 26/26 447d a2ad5774b434 Fix lock order inversion between taskMutex and kernfs.ancestryRWMutex.
DATA RACE in packetmmap.(*ringBuffer).internalMappingsForFrame (2) -1 1 495d 495d 26/26 489d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).Init (5) -1 syz 2 492d 494d 26/26 489d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*ringBuffer).init (3) -1 syz, C 9 492d 497d 26/26 490d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (5) -1 syz, C 19 492d 497d 26/26 490d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (4) -1 syz, C 4 501d 502d 26/26 498d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader (2) -1 syz, C 3 502d 502d 26/26 498d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).Init (4) -1 syz, C 9 501d 505d 26/26 498d 5790f690667a lock around getting the current time from the stack.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader -1 syz, C 6 506d 506d 26/26 504d 5790f690667a lock around getting the current time from the stack.
kvm: panic: Sentry detected stuck tasks (27) -1 syz, C 5 508d 509d 26/26 504d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: Sentry detected stuck tasks (29) 2 syz, C 51 506d 511d 26/26 505d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: runtime error: index out of range [NUM] with length NUM (6) 2 syz, C 227 519d 519d 26/26 511d cd8fcab3446c Fix range check on socket option counter metric.
kvm: panic: Sentry detected stuck tasks (25) -1 syz, C 3409 519d 615d 26/26 511d bc724d81d2f7 Avoid a deadlock in packet endpoint's Close method.
panic: runtime error: index out of range [-NUM] (2) 2 syz, C 19 514d 514d 26/26 511d 49b9d83fc867 Consolidate helper functions around unimplemented socket option metrics
panic: Sentry detected stuck tasks (28) 2 syz, C 11282 511d 615d 26/26 511d 45adb00f5086 fuse,vfs: don't FUSE_GETATTR for /proc/mountinfo
panic: invalid field value or did not reuse the same FieldValue pointer as passed in NewField 2 syz, C 56 519d 519d 26/26 511d 3f22efe2ac35 Return ENOPROTOOPT from setsockopt syscalls as default.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (3) -1 syz, C 4 525d 525d 26/26 525d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
DATA RACE in packetmmap.(*Endpoint).Init (3) -1 syz 3 525d 526d 26/26 525d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
panic: runtime error: slice bounds out of range [NUM:NUM] (3) 2 syz, C 20 528d 529d 26/26 526d e3ca602624c1 Check for bad values of the packet mmap reserve option.
DATA RACE in kernel.(*ThreadGroup).endGroupStopLocked -1 syz 6 540d 541d 26/26 535d 8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.
panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 583d 584d 26/26 582d 95ad423f8c05 Don't return empty translation in ring buffer during bus error.
panic: WARNING: circular locking detected: kernel.taskMutex -> mm.mappingRWMutex: 2 16 586d 629d 26/26 583d d949e7177c2f taskCopyContext should not require holding task.mu.
panic: runtime error: index out of range [NUM] with length NUM (5) 2 syz, C 165 584d 587d 26/26 583d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (2) -1 syz, C 1 587d 587d 26/26 583d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*ringBuffer).init (2) -1 2 587d 587d 26/26 587d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*Endpoint).ConfigureMMap -1 syz, C 2 587d 587d 26/26 587d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*ringBuffer).internalMappingsForFrame -1 1 588d 588d 26/26 587d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).Init (2) -1 syz, C 9 587d 587d 26/26 587d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus (2) -1 syz, C 19 587d 588d 26/26 587d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).HandlePacket -1 syz, C 3 588d 588d 26/26 587d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).GetPacketMMapOpts -1 syz, C 10 588d 588d 26/26 587d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).Init -1 syz, C 7 588d 589d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).HandlePacket -1 syz 3 588d 589d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).GetPacketMMapEndpoint -1 14 588d 589d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus -1 syz, C 3 588d 589d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetSockOptInt -1 syz, C 10 588d 589d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetPacketMMapEndpoint -1 syz, C 25 588d 589d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*ringBuffer).init -1 2 588d 588d 26/26 588d da7cd03064d7 Lock around packet mmap fields.
panic: runtime error: integer divide by zero (4) 2 702 588d 589d 26/26 588d 213917f3eaf8 Don't switch to using the packet mmap endpoint for zero length requests.
panic: invalid allocation length: 0x0 (5) 2 32 588d 589d 26/26 588d 213917f3eaf8 Don't switch to using the packet mmap endpoint for zero length requests.
panic: runtime error: slice bounds out of range [NUM:NUM] (2) 2 syz, C 606 588d 589d 26/26 588d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: runtime error: index out of range [NUM] with length NUM (4) 2 syz, C 174 588d 589d 26/26 588d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: Sentry detected stuck tasks (27) 2 syz, C 14 623d 643d 26/26 618d 679c77e4f05e proc: Allow interrupting generation of /proc/pid/mount{s,info}
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (2) 2 syz, C 9 643d 643d 26/26 640d c27c9a02aef5 kernel: use the kernel context to run task destroy actions
DATA RACE in buffer.(*Buffer).PullUp -1 syz, C 2 666d 659d 26/26 643d afa323bd3070 Replace most instances of IncRef with Clone.
DATA RACE in buffer.(*ViewList).Remove -1 syz, C 4 666d 664d 26/26 643d afa323bd3070 Replace most instances of IncRef with Clone.
panic: PullUp failed (3) 2 syz, C 19 644d 664d 26/26 643d afa323bd3070 Replace most instances of IncRef with Clone.
panic: Sentry detected stuck tasks (26) 2 syz, C 17 646d 647d 26/26 646d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
kvm: panic: Sentry detected stuck tasks (24) -1 syz, C 9 646d 689d 26/26 646d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
panic: Sentry detected stuck tasks (25) 2 syz, C 78 647d 676d 26/26 647d 54eb79b6e80a Acquire rlock when reading link address from the bridge.
panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM 2 syz, C 34 650d 652d 26/26 648d ddaa99e5d4d2 Ignore the length field when processing the experiment extension header.
panic: nested locking: tmpfs.filesystemRWMutex: (3) 2 syz, C 88 666d 661d 26/26 661d f66f0e235a0b Fix memmap.MappingIdentity.Device/InodeID() lock ordering.
panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 663d 665d 26/26 663d 2b55090a5813 Do not crash when creating thread group with already-exceeded soft CPU limit.
panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 665d 673d 26/26 665d ae1d4ccf0298 mm: validate vseg before using it
no output from test machine (13) -1 syz, C 86992 668d 688d 26/26 668d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
panic: nested locking: tmpfs.filesystemRWMutex: (2) 2 syz, C 33 669d 671d 26/26 669d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
DATA RACE in buffer.(*View).Write -1 1 793d 793d 26/26 714d a446b45d4d05 Ensure views returned by PullUp are owned exclusively by their packet.
panic: runtime error: index out of range [ADDR] with length NUM (2) 2 syz, C 23 718d 719d 26/26 717d 9d41ac1ff0b2 Fix unsigned to signed integer conversion in syserr.getHostTranslation().
panic: unknown host errno "errno NUM" (NUM) (2) 2 syz, C 286 719d 744d 26/26 718d 3971ecbc6ccd Remove linuxerr.IsValid and use syserr.IsValid instead.
panic: nested locking: stack.bridgeRWMutex: 2 2 732d 725d 26/26 720d 5e8dd6482cb7 Disallow setting a coordinator for a coordinator device.
lost connection to test machine (10) -1 syz 11752 735d 791d 26/26 735d 2a413db73006 kvm: check CPL to find out if the Sentry is in VM
panic: unknown host errno "memory page has hardware error" (NUM) 2 10 742d 748d 26/26 741d 40bde6c617c7 Add EHWPOISON to host_linux.go
panic: unknown host errno "errno NUM" (NUM) 2 syz, C 397 752d 788d 26/26 751d 9ecb627726cf Fix syzkaller panic for unknown error 58.
panic: No file type specified in 'mode' for InodeAttrs.Init(): mode=NUM (2) 2 syz, C 454 762d 790d 26/26 762d 834bef599679 fuse: Error out in case of unsupported file type instead of panicking.
panic: unknown host errno "operation not possible due to RF-kill" (NUM) 2 1 764d 764d 26/26 763d e6cf09a18c7e Add ERFKILL errno to host_linux file.
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) 2 1 774d 774d 26/26 771d e30fa671774b FUSE: Only block with a task if it is the task goroutine.
panic: unknown host errno "errno ADDR" (ADDR) 2 syz, C 88 772d 790d 26/26 772d b1ade52f24be fuse: handle bad response errors
panic: runtime error: invalid memory address or nil pointer dereference (25) 2 1 775d 775d 26/26 773d 2ef09d3bddc7 FUSE: Avoid panic when opening unknown file type.
panic: unknown host errno "no XENIX semaphores available" (NUM) 2 7 776d 777d 26/26 776d 0184ec4aacbc Add ENAVAIL to host_linux.go.
DATA RACE in log.GoogleEmitter.Emit (4) -1 1 777d 776d 26/26 776d 742b914fcb82 Don't log mount.root because it leads to racy access.
panic: unknown host errno "is a named type file" (NUM) 2 7 777d 777d 26/26 776d ef1ca17e5842 Add EISNAM to linuxHostTranslations and fix error message for ENOTNAM.
SYZFAIL: mount(proc) failed -1 54326 807d 808d 26/26 790d e39ed91daaf9 sentry: support NULL mount source
gvisor test error: SYZFAIL: mount(proc) failed -1 58 807d 808d 26/26 790d e39ed91daaf9 sentry: support NULL mount source
lost connection to test machine (9) -1 syz 8441 791d 1130d 26/26 791d cd56935ddf77 runsc: pass the GLIBC_TUNABLES env to the sandbox process
DATA RACE in log.GoogleEmitter.Emit (3) -1 1 794d 794d 26/26 793d ddfbb50ecc2d Don't log the task in CgroupPrepareMigrate warning.
DATA RACE in binary.bigEndian.Uint16 -1 1 808d 808d 26/26 797d bd58900fba9e Change veth WritePackets to deep clone its list of packets.
DATA RACE in binary.bigEndian.PutUint16 (2) -1 3 799d 808d 26/26 797d bd58900fba9e Change veth WritePackets to deep clone its list of packets.
no output from test machine (11) -1 syz, C 50911 801d 922d 26/26 801d db9fab290c26 Fix a race condition in TCPDeferAcceptTimeout
panic: send on closed channel 2 1 810d 803d 26/26 801d 9d1849029e8e tcpip/link/veth: don't send any packets if another end has been closed
SYZFAIL: tun: ioctl(TUNSETIFF) failed (2) -1 15 807d 805d 26/26 805d c6d16988a984 Log endpoint type when SOL_IP options are not supported.
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.stackRWMutex: 2 syz, C 27 818d 820d 26/26 813d c4dc0321aa40 Do not hold BridgeEndpoint.mu during dispatcher.DeliverNetworkPacket().
init process did not start -1 2 827d 827d 26/26 822d 80a501d8cc23 Avoid redundant work in `bpf.optimizeJumpsToSmallestSetOfReturns`.
DATA RACE in futex.(*waiterList).Front -1 syz, C 1 834d 834d 26/26 826d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterEntry).SetNext -1 syz, C 3 834d 834d 26/26 826d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterList).PushBack -1 syz, C 3 834d 834d 26/26 826d b58e8a129d62 futex: add missing locking in lockBuckets()
gvisor test error: SYZFATAL: failed to connect to host: dial tcp: address stdin: missing port in address -1 1077 863d 867d 26/26 861d a5b10b7dd04c Fix some processes_test flakes.
panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 913d 918d 26/26 913d 5f5e01d186b2 Fix panic while setting TCP_CORK off.
no output from test machine (10) -1 syz, C 19806 938d 1861d 26/26 935d 16dba7fa7677 systrap: handle stub thread crashes
panic: stub thread ADDR failed: err 0x-ADDR line NUM: sysmsg.Msg{msg: ADDR state NUM err -ADDR line NUM debug NUM app st 2 syz, C 5 980d 980d 26/26 954d fe66cae2edc7 Enumerate known systrap stub failures to exit process cleanly.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (4) 2 syz, C 22 972d 979d 26/26 969d 7b151e25d076 Don't drop the mountpoint reference in already umounted dead mountpoints.
DATA RACE in safemem.Copy (7) -1 syz, C 4 997d 997d 26/26 994d de71aae89aed `seccomp`: Use dedicated input buffer for populating seccomp cache.
kvm: panic: Sentry detected stuck tasks (22) -1 syz, C 8 1018d 1028d 26/26 1011d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
fatal error: stack overflow (5) -1 syz, C 23 1014d 1031d 26/26 1011d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
panic: runtime error: invalid memory address or nil pointer dereference (22) 2 1 1023d 1023d 26/26 1022d 4733e050ebec Check that handshake.listenEP is non-nil.
panic: attempted to rewrite jump target to a different return instruction: from={pc=NUM: {NUM NUM NUM NUM}}, to={pc=NUM: 2 syz, C 8 1029d 1029d 26/26 1024d 7cf14b7c8b5e Add equality function for BPF instructions.
fatal error: stack overflow (4) -1 syz, C 12 1031d 1035d 26/26 1031d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
kvm: panic: Sentry detected stuck tasks (21) -1 syz, C 2 1033d 1035d 26/26 1031d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
fatal error: large allocation -1 syz, C 234 1044d 1047d 26/26 1032d 917bee5b6d91 Add a size limit to `outputQueueTransformer.transform`.
panic: runtime error: slice bounds out of range [12:LINE] 2 syz, C 63 1037d 1816d 26/26 1035d c96439ecd0b4 devpts: IterDirents has to check offset and return if it is out of range
kvm: panic: Sentry detected stuck tasks (20) -1 syz, C 2 1037d 1037d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
fatal error: stack overflow (3) -1 2 1037d 1037d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (3) 2 syz, C 16 1037d 1038d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by vfs.Filesystem 2 syz, C 152 1036d 1038d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: runtime error: invalid memory address or nil pointer dereference (21) 2 1 1038d 1038d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Incrementing non-positive count ADDR on tmpfs.inode (4) 2 syz, C 24 1036d 1038d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Incrementing non-positive count ADDR on vfs.Filesystem (3) 2 1 1037d 1037d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: tmpfs.inode.decLinksLocked() called with no existing links 2 1 1037d 1037d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: tmpfs.inode.incLinksLocked() called with no existing links 2 syz, C 1 1037d 1037d 26/26 1036d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
kvm: panic: Sentry detected stuck tasks (19) -1 3 1039d 1038d 26/26 1037d 3ab01aedb874 Refactor the umount algorithm.
kvm: panic: Sentry detected stuck tasks (18) -1 syz, C 3 1051d 1056d 26/26 1050d 429f7c439616 Move rootfs check to inside mountMu.
panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1051d 1058d 26/26 1051d 429f7c439616 Move rootfs check to inside mountMu.
panic: WARNING: circular locking detected: mm.activeRWMutex -> tmpfs.filesystemRWMutex: 2 1 1064d 1064d 26/26 1051d e1e7edcc1b67 Don't release unused RightsControlMessage in Recv.
panic: close of closed channel 2 syz, C 1192 1686d 1694d 26/26 1053d 2e3e5b606789 Create a new test dimension that mounts a FUSE fs on /tmp.
DATA RACE in vfs.(*Mount).setMountOptions -1 syz, C 5 1062d 1062d 26/26 1058d ea4f0073d4a1 Fix data race between getting mount options and updating mount options.
gvisor boot error: init process did not start (5) -1 41 1163d 1291d 26/26 1060d 2e8b96b4fd74 Automated rollback of changelist 514487900
panic: Sentry detected stuck tasks (24) 2 syz, C 13 1065d 1071d 26/26 1065d 1407fdf120ab Fix concurrent pivot_root bug.
panic: expected socket to exist at '!N 2 syz, C 23 1068d 1068d 26/26 1065d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '$N 2 syz, C 24 1069d 1070d 26/26 1065d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '#N 2 syz, C 23 1067d 1067d 26/26 1065d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at ' N 2 syz, C 20 1068d 1069d 26/26 1065d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: Sentry detected stuck tasks (23) 2 syz, C 23 1072d 1077d 26/26 1071d a8bc2e146626 Fix group id cleanup and tidy up some mount methods.
kvm: panic: Sentry detected stuck tasks (17) -1 14 1076d 1106d 26/26 1075d 44e0d6d07246 Unlock putOldMp before retrying the mount checks in pivot_root.
panic: Sentry detected stuck tasks (22) 2 5 1077d 1077d 26/26 1077d 44e0d6d07246 Unlock putOldMp before retrying the mount checks in pivot_root.
panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1080d 1094d 26/26 1078d f744f443dd7d Check before attempting to mount an anon mountpoint.
panic: nested locking: tmpfs.filesystemRWMutex: 2 1 1095d 1088d 26/26 1078d c74f5866cb75 Fix circular lock that can happen during unlink.
DATA RACE in kernel.(*Task).MemoryManager (3) -1 syz, C 12 1079d 1079d 26/26 1078d c39ecc4eb47a The local task in process_vm_read|writev is just the calling task.
DATA RACE in kernel.(*runExitMain).execute (2) -1 syz, C 143 1388d 1398d 26/26 1078d b66713079526 Clean up and re-enable process_vm_readv/writev
DATA RACE in binary.littleEndian.Uint64 (2) -1 syz, C 48 1388d 1398d 26/26 1078d b66713079526 Clean up and re-enable process_vm_readv/writev
panic: Sentry detected stuck tasks (21) 2 64 1078d 1126d 26/26 1078d 677d11f22fbe Chunkify tmpfs Allocate().
DATA RACE in vfs.(*VirtualFilesystem).connectLocked (2) -1 2 1091d 1092d 26/26 1078d de5271b36007 Fix small data race in mount.
DATA RACE in safemem.Copy (6) -1 syz, C 121 1388d 1389d 26/26 1078d b66713079526 Clean up and re-enable process_vm_readv/writev
panic: Unknown syscall NUM error: strconv.ParseInt: parsing "./file1": invalid syntax 2 syz, C 19 1101d 1094d 26/26 1087d 1910a4577f01 cgroupfs: do not return errors from strconv.ParseInt() to write()
panic: runtime error: invalid memory address or nil pointer dereference (18) 2 4 1105d 1105d 26/26 1101d bb4410f44e32 Rollback 6ceceae9385c and 206e88db3653.
gvisor test error: panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry -1 38 1106d 1107d 26/26 1105d 206e88db3653 Fix cwd/root update method during namespace cloning.
panic: nested locking: kernfs.filesystemRWMutex: (7) 2 4 1120d 1122d 26/26 1115d c80ab228d85b Make vfs.PopDelayedDecRefs() clear vfs.toDecRef.
panic: nested locking: kernfs.filesystemRWMutex: (6) 2 syz, C 8 1122d 1138d 26/26 1122d 755c1f242cd4 nsfs: mark inodes as anonymous
panic: Sentry detected stuck tasks (20) 2 syz, C 895 1127d 1129d 26/26 1126d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (15) -1 syz, C 186 1127d 1130d 26/26 1126d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (14) -1 syz 4 1142d 1147d 26/26 1137d 118a17d92dcf kernfs: set DenySpliceIn for DynamicBytesFD
panic: runtime error: invalid memory address or nil pointer dereference (17) 2 2 1141d 1141d 26/26 1141d 6f978d71856e kernel: GetMountNamespace has to check that mntns isn't nil
DATA RACE in udp.(*endpoint).Connect.func1 -1 syz, C 3 1156d 1149d 26/26 1141d 5babda534107 Lock around endpoint info access in UDP onICMPError.
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 48074 1143d 1561d 26/26 1142d 41bb04c14901 Implement mount namespaces
panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1144d 1151d 26/26 1142d ef95be6e1c10 kernel: check that a task has a network namespace
panic: kcov task work is registered, but no coverage data was found 2 6120 1157d 1162d 26/26 1155d f43a5fc63ac7 Remove panic in ConsumeCoverageData() when no coverage is observed.
panic: Sentry detected stuck tasks (18) 2 syz, C 625 1159d 1217d 26/26 1157d e54e3668b07c Impose default tmpfs size limits correctly.
gvisor test error: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3) -1 124 1162d 1163d 26/26 1162d ffcbc70b9a4a systrap: don't change an fpu state from the stub code
DATA RACE in pipefs.(*inode).UID -1 syz 2 1162d 1162d 26/26 1162d 02ed5839a762 Add a lock to pipefs's inode to protect a inode's attributes.
lost connection to test machine (8) -1 1964 1162d 1494d 26/26 1162d 8b57c2e7402f runsc/seccomp: allow sched_getaffinity if race is on
panic: runtime error: invalid memory address or nil pointer dereference (15) 2 1 1190d 1190d 26/26 1163d bb5ada8caffd Defer dec refing mounts in InvalidateDentry.
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> fasync.fileMutex: (2) 2 2 1186d 1187d 26/26 1180d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 1 1186d 1186d 26/26 1180d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 3 1186d 1186d 26/26 1180d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
kvm: lost connection to test machine (3) -1 8 1196d 1219d 26/26 1190d 52692c3647ea fdtable: avoid large arrays
panic: nested locking: kernfs.filesystemRWMutex: (5) 2 5 1191d 1192d 26/26 1190d bb5ada8caffd Defer dec refing mounts in InvalidateDentry.
panic: nested locking: kernfs.filesystemRWMutex: (4) 2 syz, C 31 1193d 1287d 26/26 1192d 084a5022563f Change InvalidateDentry to return a list of vds with an extra reference.
kvm: panic: Sentry detected stuck tasks (12) -1 193 1196d 1359d 26/26 1196d 52692c3647ea fdtable: avoid large arrays
panic: WARNING: circular locking detected: mm.activeRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 4 1229d 1229d 26/26 1197d 8c975e6e6e68 Mark some kernfs inode as Anonymous.
DATA RACE in fasync.(*FileAsync).SetOwnerTask -1 syz, C 11 1198d 1199d 26/26 1197d 5fed8c81b89a Fix data race by acquiring lock before accessing fields of FileAsync.
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: 2 syz, C 1 1200d 1200d 26/26 1197d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> fasync.fileMutex: 2 1 1200d 1200d 26/26 1197d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: 2 syz, C 3 1200d 1200d 26/26 1197d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.filesystemRWMutex: (2) 2 1 1219d 1219d 26/26 1197d ed528835f753 Small circular lock fix.
gvisor test error: SYZFATAL: BUG: got no fallback coverage: -1 132 1218d 1295d 26/26 1207d 83f4f485b4ad systrap: don't call Goyield() if the race detector is enabled
panic: Incrementing non-positive count ADDR on tmpfs.inode (3) 2 6 1226d 1249d 26/26 1211d 283b80a456aa Fix logic bug in attaching mounts.
DATA RACE in log.GoogleEmitter.Emit (2) -1 3 1215d 1217d 26/26 1212d 158636229e87 Avoid serializing the sharedContext struct in formatting directives.
DATA RACE in kernel.(*TaskImage).Fork -1 syz, C 8 1307d 1308d 26/26 1214d 028cf757bbef Clarify comment about copying Task.image in Task.Clone().
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: (2) 2 syz, C 17 1219d 1219d 26/26 1217d ed528835f753 Small circular lock fix.
panic: Sentry detected stuck tasks (17) 2 syz, C 822 1217d 1483d 26/26 1217d ed528835f753 Small circular lock fix.
gvisor build error (19) -1 110 1220d 1220d 26/26 1219d 74e63e9e296a Update packages
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (2) 2 syz, C 47 1226d 1231d 26/26 1220d 283b80a456aa Fix logic bug in attaching mounts.
gvisor test error: timed out (4) -1 548 1221d 1585d 26/26 1220d 83f4f485b4ad systrap: don't call Goyield() if the race detector is enabled
panic: WARNING: circular locking detected: stack.neighborEntryRWMutex -> stack.nicRWMutex: 2 1 1253d 1253d 26/26 1221d 38823be81914 Don't lock before accessing nic.networkEndpoints
panic: WARNING: circular locking detected: transport.streamQueueReceiverMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1229d 1229d 26/26 1221d 2044c3449153 Don't hold streamQueueReceiver.mu while calling RightsControlMessage.Release().
panic: WARNING: circular locking detected: transport.endpointMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1229d 1229d 26/26 1221d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: 2 syz, C 18 1342d 1417d 26/26 1221d e0b1585586c6 Remove stale `vdDentry` variable from VirtualFilesystem.connectMountAt().
panic: nested locking: transport.endpointMutex: 2 syz, C 1 1229d 1229d 26/26 1221d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
fatal error: unexpected signal during runtime execution (3) -1 9 1266d 1269d 26/26 1266d 96aa115516c8 systrap: simplify interrupt handling in syshandler
gvisor boot error: panic: prctl(PR_SET_NO_NEW_PRIVS) failed: invalid argument -1 12 1269d 1270d 26/26 1269d 6890e539c700 systrap: set all arguments of prctl(PR_SET_NO_NEW_PRIVS)
panic: interface conversion: *kernel.Kernel is not unimpl.Events: missing method EmitUnimplementedEvent 2 syz, C 5857 1274d 1275d 26/26 1273d f8b98248139c Update `unimpl.EmitUnimplementedEvent` interface to add the syscall number.
gvisor test error: SYZFATAL: BUG: program execution failed: executor NUM: not serving -1 137 1275d 1282d 26/26 1275d 08920d098b30 Fix systrap TLS handling on ARM.
gvisor build error (18) -1 313 1282d 1304d 26/26 1275d fedadb093205 Fix syzkaller systrap builds.
DATA RACE in systrap.(*subprocessPool).fetchAvailable -1 25 1285d 1296d 26/26 1275d f01bf248c19f Fix data race in subprocess pool.
panic: WARNING: circular locking detected: tmpfs.filesystemRWMutex -> kernel.taskSetRWMutex: 2 syz 14 1282d 1556d 26/26 1275d 758da469f7ed kernel: release kernel.taskSetRWMutex before calling TaskImage.Release
panic: runtime error: index out of range [ADDR] with length NUM 2 syz, C 17 1286d 1286d 26/26 1275d fc94225c333d Fix crash with large FD value
gvisor boot error: FATAL ERROR: overlay flag is incompatible with shared file access for rootfs -1 148 1289d 1290d 26/26 1280d 1b7a4e2a055c Prepare to make root overlay the default.
gvisor boot error: FATAL ERROR: overlay flag has been replaced with overlay2 flag -1 66 1288d 1290d 26/26 1280d 1b7a4e2a055c Prepare to make root overlay the default.
DATA RACE in vfs.(*VirtualFilesystem).PivotRoot -1 syz, C 1 1299d 1299d 26/26 1289d 807fd0fd27d0 Lock around accessing the mount namespace in pivot_root.
panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1298d 1299d 18/26 1298d 8a1845f8b850 Don't send a signal to a controlling thread group if one has not been set.
fatal error: stack overflow -1 1 1374d 1373d 18/26 1298d 426deb60fd25 lockdep: fix the TOCTTOU issue
panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1299d 1302d 18/26 1299d 8184fa1db0fa Clean up devpts code, and deduplicate the foreground process state.
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM (2) 2 syz, C 7 1304d 1305d 18/26 1302d 5817f4cc64e4 Fix FUSE how handles malformed INIT requests.
panic: nested locking: kernfs.filesystemRWMutex: (3) 2 syz 19 1310d 1335d 18/26 1308d 28472cc03fe1 don't take an unnecessary reference in proc.fdSymlink.Valid()
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry (2) 2 syz, C 13 1316d 1316d 18/26 1314d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry (2) 2 syz, C 65 1315d 1316d 18/26 1314d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry 2 syz, C 14 1318d 1321d 18/26 1316d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry 2 syz, C 390 1316d 1322d 18/26 1316d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *gofer.dentry, not *kernfs.Dentry 2 syz, C 13 1318d 1319d 18/26 1318d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: runtime error: index out of range [NUM] with length NUM (3) 2 syz, C 372 1334d 1337d 18/26 1334d fe562179fea1 Handle absolute symlink target '/' correctly in VFS layer.
panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1337d 1399d 18/26 1334d e08f204299df inet: each socket has to hold a reference to its network namespace
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.filesystemRWMutex: 2 1 1352d 1352d 18/26 1336d 492d7a98116b Decref target VirtualDentry outside the vfs mount lock during mount ops.
gvisor test error: panic: ptrace set regs (&{PtraceRegs:{Regs:[ADDR NUM ADDR NUM NUM NUM NUM ADDR ADDR NUM NUM ADDR ADDR NUM ADDR ADDR NUM -1 10 1340d 1340d 15/26 1338d 194029b95444 arm64: validate registers that come from user-space
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: (2) 2 syz, C 53 1372d 1374d 14/26 1372d bc440b67fce0 Don't hold nic.mu when calling n.linkResQueue.cancel.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.neighborCacheRWMutex: 2 syz, C 356 1374d 1380d 14/26 1373d 70be2fc8a772 Remove unsetting route's cached neighbor entry in link res callback.
gvisor build error (16) -1 12 1387d 1386d 14/26 1374d 20b2ec04d94d Update bazel packages
panic: WARNING: circular locking detected: stack.packetsPendingLinkResolutionMutex -> stack.routeRWMutex: 2 syz, C 2602 1374d 1380d 14/26 1374d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: 2 syz, C 1246 1374d 1380d 14/26 1374d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
gvisor boot error: FATAL ERROR: running container: creating container: failed to create an unnamed temporary file inside "/tmp" -1 24 1378d 1379d 14/26 1378d 368e85414697 overlay2: Do not use O_TMPFILE to create unnamed temporary file.
panic: WARNING: circular locking detected: kernel.signalHandlersMutex -> kernfs.filesystemRWMutex: 2 syz, C 351 1385d 1387d 14/26 1385d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 2320 1385d 1387d 14/26 1385d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: cgroupfs: pids controller attempted to remove pending charge for Task ADDR, but task didn't have pending charges, (2) 2 1 1418d 1418d 14/26 1387d 62ddad611979 cgroupfs: Fix several races with task migration.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode 2 syz, C 27 1387d 1388d 14/26 1387d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: Incrementing non-positive count ADDR on tmpfs.inode (2) 2 syz, C 56 1387d 1388d 14/26 1387d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: kernfs.Dentry.DecRef() called without holding a reference (2) 2 syz, C 61 1387d 1388d 14/26 1387d 1823b16fccf7 Clean up DecRefs in mount methods.
kvm: panic: Sentry detected stuck tasks (10) -1 3 1403d 1421d 14/26 1388d ece02b45b5b4 Add a maximum to the total number of mounts allowed in a namespace.
panic: Lock not held: transport.endpointMutex[e]: 2 syz, C 1191 1388d 1389d 14/26 1388d 1ceee8c31071 connectioned: Change nested lock name to only have a single nested lock.
DATA RACE in safemem.Copy (5) -1 syz, C 3153 1389d 1399d 14/26 1389d ae731e0394f5 Don't use other process's scratch buffer.
panic: unbalance unlock: mm.activeRWMutex:LINE: 2 2 1391d 1402d 14/26 1389d 445fa6f40c89 Lockdep: Print more info in the "unbalanced unlock" case.
panic: WARNING: circular locking detected: kernel.taskMutex -> kernel.taskSetRWMutex: 2 syz, C 1470 1399d 1400d 14/26 1397d 38a0512f13fa Fix circular lock in process_vm_(read|write)v
DATA RACE in binary.littleEndian.Uint64 -1 syz, C 29 1498d 1501d 14/26 1400d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR 2 syz, C 914 1400d 1417d 14/26 1400d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
DATA RACE in safemem.Copy (4) -1 syz, C 1019 1498d 1501d 14/26 1400d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [ADDR:NUM] 2 syz, C 13 1404d 1404d 14/26 1400d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM 2 syz, C 124 1400d 1416d 14/26 1400d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: integer divide by zero (3) 2 syz, C 443 1400d 1417d 14/26 1400d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: Unknown syscall -NUM error: EOF 2 syz, C 14 1404d 1406d 14/26 1400d f3aaf4326636 io_ring: Handle EOF on IORING_OP_READV
DATA RACE in tmpfs.GetSeals -1 1 1405d 1405d 14/26 1402d 374e716c7ce2 AddSeals has to take the write lock to modify seals
DATA RACE in tmpfs.AddSeals -1 syz, C 4 1405d 1405d 14/26 1402d 374e716c7ce2 AddSeals has to take the write lock to modify seals
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM 2 syz, C 196 1686d 1694d 14/26 1403d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: addresses IP and fe80::aa do not have the same length (2) 2 1 1409d 1409d 14/26 1404d 8756ebc3b406 Netstack: Check address matches the endpoint protocol for IP_DROP_MEMBERSHIP
panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1407d 1501d 14/26 1406d ae136df84998 Add nil-check for parent mount in umount(2) while handling mount propagation.
DATA RACE in vfs.(*VirtualFilesystem).setPropagation -1 syz, C 3 1420d 1420d 14/26 1407d 20ef2127a102 Lock around optional tag generation.
DATA RACE in bufferv2.newChunk -1 syz, C 68 1414d 1429d 14/26 1413d 6b3b5493d0ea Fix ipv6 header view ownership.
DATA RACE in vfs.(*VirtualFilesystem).GenerateProcMountInfo -1 syz, C 2 1418d 1420d 14/26 1417d 20ef2127a102 Lock around optional tag generation.
panic: runtime error: integer divide by zero (2) 2 syz, C 56 1417d 1417d 14/26 1417d d4b159ae93b5 iouring: Disallow zero, or less CQ entries than SQ entries
panic: nested locking: kernel.taskSetRWMutex: 2 syz, C 2 1476d 1476d 14/26 1423d c1427a04dfba Disable fasync for signalfd descriptors
gvisor test error: panic: WARNING: circular locking detected: mm.activeRWMutex -> kernel.taskSetRWMutex: -1 1 1444d 1444d 14/26 1437d 2e844f74fcdd Do not use ktime.Timer for CPU clock ticks.
panic: Decrementing non-positive ref count ADDR, owned by kernel.ProcessGroup (2) 2 syz, C 3 1441d 1475d 14/26 1441d 36ddd3050cc2 Check if ThreadGroup exists before executing JoinProcessGroup.
kvm: panic: Sentry detected stuck tasks (9) -1 2 1469d 1471d 14/26 1459d 48e2252b3bac fix panic caused by too-large buffer allocations
gvisor build error (15) -1 232 1466d 1465d 14/26 1463d d2827e5a9242 Don't require gcc-multilib to be installed to build BPF
panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: NUM, proposed charg 2 syz, C 97 1479d 1598d 14/26 1479d 46e08207b58f cgroupfs: Handle hierachy changes across charge/uncharge.
panic: addresses IP and fe80::aa do not have the same length 2 102 1498d 1528d 14/26 1493d b195ca54f311 Netstack: Check that the multicast address matches the endpoint protocol.
DATA RACE in fuse.newFUSEFilesystem -1 syz, C 384 1686d 1694d 14/26 1501d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: WARNING: circular locking detected: cgroupfs.pidsControllerMutex -> mm.mappingRWMutex: 2 3 1556d 1557d 14/26 1554d d5a04e338eef cgroupfs: Don't copy in with cgroups locks held.
panic: WARNING: circular locking detected: tmpfs.inodeMutex -> mm.activeRWMutex: 2 syz, C 8353 1557d 1557d 14/26 1554d 82498d087ef8 Don't hold MM.activeMu when calling MM.vmaMapsEntryLocked().
panic: Sentry detected stuck tasks (16) 2 5 1562d 1635d 14/26 1561d 8b41af93300c sync/lockdep: use RangeRepeatable instead of Range
kvm: panic: Sentry detected stuck tasks (7) -1 1 1580d 1573d 14/26 1561d 6fda48f50dcd tcpip/transport/raw: check MTU before copying a buffer from user memory
panic: invalid allocation length: 0x0 (4) 2 syz, C 4338 1562d 1564d 14/26 1562d 3290a054c5bd getdents: Test that size parameter is not zero before allocating PMAs.
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> mm.activeRWMutex: 2 2 1579d 1574d 14/26 1568d e47be0cfc06d Move Send/RecvNotify calls outside of CopyIn/Out, due to lock order.
panic: runtime error: index out of range [-NUM] 2 syz, C 13 1593d 1593d 14/26 1590d a7cad2b092de Tmpfs with size option enabled bug fix.
DATA RACE in fuse.(*connection).callFutureLocked -1 syz, C 2 1691d 1694d 14/26 1599d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Read -1 syz, C 238 1688d 1693d 14/26 1599d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.newFUSEConnection -1 syz, C 52 1688d 1694d 14/26 1599d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PWrite -1 syz, C 11 1691d 1694d 14/26 1599d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PRead -1 syz, C 9 1689d 1694d 14/26 1599d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Seek -1 syz, C 8 1693d 1694d 14/26 1599d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: unexpected tcp state in processor: BOUND 2 syz, C 36 1610d 1613d 14/26 1610d 3b917921d7fe Fix race in listen.
DATA RACE in cgroupfs.(*memsData).Write -1 syz, C 4 1621d 1621d 14/26 1613d 5f9bd8a53b20 cgroupfs: Synchronize access to cpuset controller bitmaps.
panic: unknown network protocol number NUM 2 syz, C 56 1702d 1714d 14/26 1632d 6a28dc7c5963 Correct fragmentation reference counting.
panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1638d 1644d 14/26 1638d 5835bc8c3a4b cgroupfs: Handle invalid PID/PGID on migration.
DATA RACE in kernfs.(*OrderedChildren).checkExistingLocked -1 syz, C 1 1660d 1660d 14/26 1639d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
panic: Inode doesn't match what kernfs thinks! OrderedChild: &{dir:{InodeNoopRefCount:{InodeTemporary:{}} InodeAlwaysVal 2 syz, C 12 1645d 1660d 14/26 1639d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
DATA RACE in bitmap.(*Bitmap).Maximum -1 syz, C 8 1652d 1661d 14/26 1652d 4503ba3f5efd Fix data race when using UNSHARE in close_range.
kvm: lost connection to test machine -1 364 1655d 2009d 14/26 1653d 81d384cfe9d3 Fix race between epoll readiness check and re-readying.
lost connection to test machine (6) -1 4341 1653d 1892d 14/26 1653d 81d384cfe9d3 Fix race between epoll readiness check and re-readying.
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 (2) -1 syz, C 4 1669d 1662d 14/26 1658d b1ceabc884c0 Hold baseEndpoint.mu when calling baseEndpoint.Connected()
kvm: panic: Sentry detected stuck tasks (6) -1 15 1662d 1672d 14/26 1661d f51097051ac5 tun: reject packets larger MTU
panic: Sentry detected stuck tasks (15) 2 syz, C 2582 1671d 1748d 14/26 1665d 510cc2f7fca9 Fix pivot_root lock inversion.
Invalid request partialResult in sendto (3) -1 syz, C 9 1669d 1669d 14/26 1667d 395c38be75d1 Add ECONNABORTED to the partial result error list.
kvm: panic: Sentry detected stuck tasks (5) -1 syz, C 65 1674d 1735d 14/26 1673d b413d78c27db sendfile: limit a buffer size
panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1686d 1682d 14/26 1681d b7ccfa5084e2 Fixes #7086,#6964,#3413,#7001.
DATA RACE in fuse.(*connection).callFuture (2) -1 3 1686d 1687d 14/26 1686d e219f75d8b3c Fuse: Cache `maxActiveRequests` in `connection` to avoid reading it from `fs`.
panic: Unknown syscall NUM error: payload too small. Minimum data lenth required: NUM, but got data length NUM 2 syz, C 79 1687d 1693d 14/26 1687d 55ef37166897 Return well-defined error on short payload in FUSE.
fatal error: sync: unlock of unlocked mutex -1 syz, C 26 1687d 1688d 14/26 1687d 10d1a49c5ba2 Fuse: `DeviceFD.Read`: Lock `DeviceFD` ahead of other locks.
DATA RACE in fuse.(*connection).callFuture -1 1 1691d 1691d 14/26 1688d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*connection).initProcessReply -1 syz, C 14 1688d 1693d 14/26 1688d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).writeLocked -1 syz, C 33 1688d 1693d 14/26 1688d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*connection).Call -1 syz, C 65 1688d 1692d 14/26 1688d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).Release -1 syz, C 404 1688d 1693d 14/26 1688d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in stack.(*PacketBuffer).reset (2) -1 syz 2 1714d 1714d 14/26 1689d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1689d 1714d 14/26 1689d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: Incrementing non-positive count ADDR on stack.PacketBuffer 2 syz, C 9 1700d 1700d 14/26 1689d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
DATA RACE in mqfs.FilesystemType.GetFilesystem -1 1 1704d 1704d 14/26 1690d d1dadc9c19a1 Remove dentry_cache_limit mount option from mqfs.
gvisor build error (13) -1 201 1695d 1702d 14/26 1695d c18ec0b53cf2 Fix race build error.
panic: runtime error: index out of range [NUM] with length NUM (2) 2 syz, C 21 1695d 1702d 14/26 1695d 5fb527632358 Handle 0 sized writes to /dev/net/tun.
panic: PullUp failed (2) 2 syz 4 1704d 1712d 14/26 1701d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
DATA RACE in transport.(*connectionedEndpoint).Listen -1 1 1732d 1732d 14/26 1717d 52bee5297caf unix: call Listening under the endpoint lock
DATA RACE in udp.(*endpoint).Connect (2) -1 syz, C 4 2122d 2127d 14/26 1725d 2485a4e2cb4a Make stack.Route safe to access concurrently
kvm: panic: Sentry detected stuck tasks (4) -1 syz, C 627 1742d 1770d 14/26 1742d 4d29819e13a1 pipe: have separate notifiers for readers and writers
panic: Sentry detected stuck tasks (14) 2 20 1751d 1797d 14/26 1751d b2f8b495ad73 cgroup/cpuset: handle the offset argument of write methods properly
DATA RACE in stack.(*PacketBuffer).reset -1 9 1772d 1772d 14/26 1772d bb1ae811f4eb Prevent PacketBuffers from being returned to the pool too early in nic.
panic: runtime error: makeslice: len out of range (4) 2 36 1773d 1776d 14/26 1773d 37792ee1e6e1 Validate ControlMessageHeader.Length
SYZFAIL: tun: can't open /dev/net/tun -1 syz 339 1781d 2034d 14/26 1781d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
kvm: no output from test machine (2) -1 syz, C 23 1782d 1859d 14/26 1781d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
DATA RACE in cgroupfs.(*cpusData).Generate -1 2 1786d 1791d 14/26 1786d 6078d26588c0 Sychronize access to cpuset controller bitmaps.
DATA RACE in cgroupfs.(*cpusData).Write -1 syz, C 6 1786d 1791d 14/26 1786d 6078d26588c0 Sychronize access to cpuset controller bitmaps.
panic: runtime error: index out of range [NUM] with length NUM 2 syz, C 12 1788d 1790d 14/26 1787d f54a25c1f03e Validate an icmp header before accessing it
panic: interface conversion: kernfs.Inode is nil, not *mqfs.rootInode 2 2 1788d 1791d 14/26 1787d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1787d 1816d 14/26 1787d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: kernfs.Dentry.DecRef() called without holding a reference 2 syz, C 87 1787d 1791d 14/26 1787d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: Only permission mask must be set: ADDR 2 syz, C 756 1788d 1791d 14/26 1788d 4d07fc952d6b Do not leak non-permission mode bits in mq_open(2).
gvisor build error (11) -1 386 1859d 1863d 14/26 1815d c2353e4055ac [op] Fix //debian:debian.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3) -1 syz, C 2034 1816d 1910d 14/26 1815d 0bdd79ccd469 kvm: trap mmap syscalls to map new regions to the guest
DATA RACE in safemem.Copy (3) -1 syz, C 3 1821d 1821d 14/26 1816d 1fe0a6691ff5 Prevent PacketData from being modified.
panic: runtime error: slice bounds out of range [:LINE] with capacity 0 2 2 1866d 1867d 14/26 1816d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
panic: Sentry detected stuck tasks (13) 2 1 1827d 1827d 14/26 1816d 4076153be684 Fix lock ordering violation
Invalid request partialResult in pwritev -1 syz, C 278 2009d 2027d 14/26 1819d 7fac7e32f3a8 Translate syserror when validating partial IO errors
kvm: panic: Watchdog goroutine is stuck (4) -1 18 1847d 1904d 14/26 1819d 14d6cb4436f1 platform/kvm: fix a race condition in vCPU.unlock()
panic: runtime error: slice bounds out of range [40:LINE] 2 3 1873d 1876d 14/26 1819d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
Invalid request partialResult in sendto (2) -1 syz, C 10 1855d 1929d 14/26 1819d e5fe488b2273 Wake up Writers when tcp socket is shutdown for writes.
kvm: panic: Sentry detected stuck tasks (2) -1 syz, C 66 1826d 1989d 14/26 1819d 1947c873423c Fix deadlock in /proc/[pid]/fd/[num]
panic: Sentry detected stuck tasks (12) 2 2 1828d 1827d 14/26 1827d 51b96514cd93 Limit most file mmaps to the range of an int64.
DATA RACE in msgqueue.(*Queue).pop -1 syz, C 2 1853d 1853d 14/26 1829d d6c99694bcb9 Fix race on msgrcv(MSG_COPY).
panic: Sentry detected stuck tasks (11) 2 syz, C 31 1843d 1970d 14/26 1841d 9149b2cefdb5 unix: avoid taking two endpoint locks
panic: runtime error: makeslice: len out of range (3) 2 syz, C 10 1843d 1843d 14/26 1842d 927ea16dd384 unix: handle a case when a buffer is overflowed
panic: unknown error: SIGBUS at ADDR 2 syz, C 17 1845d 1858d 14/26 1844d dfbcb8903ae8 [syserr] Fix SIGBUS on syserr.FromError
DATA RACE in safemem.Copy (2) -1 syz, C 9 1869d 1869d 14/26 1858d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
panic: runtime error: slice bounds out of range [2:LINE] 2 1 1885d 1885d 14/26 1858d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
DATA RACE in buffer.(*buffer).Remove -1 syz, C 2 1869d 1869d 14/26 1858d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
kvm: no output from test machine -1 1107 1869d 2019d 14/26 1869d 569f605f438d Correctly handle interruptions in blocking msgqueue syscalls.
no output from test machine (9) -1 syz, C 2298 1869d 2024d 14/26 1869d 569f605f438d Correctly handle interruptions in blocking msgqueue syscalls.
panic: unable to find an index for ID: 0 2 syz, C 1497 1882d 1882d 14/26 1882d 3d0a9300050a Don't panic on user-controlled state in semaphore syscalls.
DATA RACE in atomic.CompareAndSwapInt32 (4) -1 syz 4 1895d 1889d 14/26 1884d a89b2f005b71 Use atomics when checking for parent setgid in VFS2 tmpfs file creation.
panic: FIN segments must be the final segment in the write list. 2 2 1901d 1902d 14/26 1897d 1fc7a9eac2f2 Do not queue zero sized segments.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (2) -1 syz, C 2532 1910d 2522d 14/26 1910d d703340bc04a runsc: don't kill sandbox, let it stop properly
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup (2) 2 1 1920d 1920d 14/26 1911d 2e6195ffe0ad CreateProcessGroup has to check whether a target process stil exists or not
kvm: panic: Watchdog goroutine is stuck (3) -1 syz, C 48 1926d 1976d 14/26 1924d 3fcbad509300 Fix lock ordering issue when enumerating cgroup tasks.
panic: Watchdog goroutine is stuck (2) 2 1 1937d 1930d 14/26 1924d 3fcbad509300 Fix lock ordering issue when enumerating cgroup tasks.
panic: Incrementing non-positive count ADDR on vfs.Filesystem (2) 2 1 1948d 1948d 14/26 1946d af229f46a149 Fix cgroupfs mount racing with unmount.
panic: PullUp failed 2 syz, C 615 1952d 1953d 14/26 1952d 436148d68a50 Fix panic on consume in a mixed push/consume case
panic: Incrementing non-positive count ADDR on vfs.Filesystem 2 syz, C 2 1970d 1970d 14/26 1952d 78ae3db1a39c Fix cgroup hierarchy registration.
DATA RACE in cgroupfs.FilesystemType.GetFilesystem -1 syz, C 1 1970d 1963d 14/26 1952d 78ae3db1a39c Fix cgroup hierarchy registration.
panic: Sentry detected stuck tasks (10) 2 syz, C 264 1977d 2030d 14/26 1977d b0333d33a206 Optimize safemem.Zero
kvm: panic: Watchdog goroutine is stuck (2) -1 110 1984d 2001d 14/26 1983d f4f6ce337aa8 Don't grab TaskSet mu recursively when reading task state.
panic: Watchdog goroutine is stuck 2 syz, C 1831 1984d 2282d 14/26 1983d f4f6ce337aa8 Don't grab TaskSet mu recursively when reading task state.
panic: makechan: size out of range 2 syz, C 183 1987d 1991d 14/26 1987d dc8f6c691474 Move maxListenBacklog check to sentry
fatal error: unexpected signal during runtime execution -1 syz 272 2055d 2743d 14/26 1987d eb9b8e53a3ef platform/kvm/x86: restore mxcsr when switching from guest to sentry
kvm: panic: Watchdog goroutine is stuck -1 240 2002d 2012d 14/26 2002d 2f3dac78ca9a kvm: prefault a floating point state before restoring it
Invalid request partialResult in write (2) -1 syz, C 11628 2004d 2069d 14/26 2003d 7fac7e32f3a8 Translate syserror when validating partial IO errors
kvm: panic: Sentry detected stuck tasks -1 syz, C 152 2004d 2019d 14/26 2003d 2f3dac78ca9a kvm: prefault a floating point state before restoring it
panic: Sentry detected stuck tasks (9) 2 9 2030d 2030d 14/26 2030d 38c42bbf4ad2 Remove deadlock in raw.endpoint caused by recursive read locking
panic: Sentry detected stuck tasks (8) 2 syz, C 64 2031d 2032d 14/26 2030d f5692f7dcc48 Kernfs should not try to rename a file to itself.
no output from test machine (8) -1 syz, C 15268 2031d 2135d 14/26 2031d acd516cfe292 Add YAMA security module restrictions on ptrace(2).
panic: running on goroutine 582 (task goroutine for kernel.Task ADDR is 400) 2 syz, C 1 2036d 2036d 14/26 2032d 6e000d3424c0 Use async task context for async IO.
panic: unknown error *tcpip.ErrMalformedHeader 2 syz, C 5 2048d 2041d 14/26 2032d c39284f45738 Let sentry understand tcpip.ErrMalformedHeader
panic: Sentry detected stuck tasks (7) 2 syz 2567 2032d 2064d 14/26 2032d c5a4e100085c unix: sendmmsg and recvmsg have to cap a number of message to UIO_MAXIOV
panic: wd changed: "/tmp" -> "(unreachable)/" 2 syz 2534 2044d 2126d 14/26 2044d 97a36d169698 Don't allow to umount the namespace root mount
Invalid request partialResult in sendto -1 syz, C 236 2053d 2057d 14/26 2045d d6d169320cd4 Add ETIMEDOUT to partial result list
FATAL ERROR: executing processes for container: executing command "/syz-fuzzer -executor=/syz-executor -name=vm-1 -arch= -1 4 2052d 2054d 14/26 2045d 120c8e346871 Replace TaskFromContext(ctx).Kernel() with KernelFromContext(ctx)
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup 2 syz, C 12 2062d 2062d 14/26 2045d fe4f4789601d kernel: reparentLocked has to update children maps of old and new parents
panic: Child "." for parent Dentry &{vfsd:{mu:{m:{Mutex:{state:LINE sema:LINE}}} dead:false mounts:LINE impl:ADDR} refs: 2 syz, C 13 2046d 2056d 14/26 2045d 09afd6832689 [vfs] Handle `.` and `..` as last path component names in kernfs Rename.
panic: Start ADDR + offset ADDR overflows? 2 syz, C 19 2071d 2377d 14/26 2045d bf4968e17d7d exec: don't panic if an elf file is malformed
panic: Decrementing non-positive ref count ADDR, owned by vfs.FileDescription 2 syz, C 12 2076d 2071d 14/26 2060d abdff887483f Do not send SCM Rights more than once when message is truncated.
DATA RACE in safemem.Copy -1 syz, C 4 2064d 2064d 14/26 2061d 76da673a0dda Do not modify IGMP packets when verifying checksum
panic: Sentry detected stuck tasks (6) 2 syz 714 2064d 2116d 14/26 2064d e57ebcd37a7b Simplify the pipe implementation.
panic: IPv6 payload too large: NUM, must be <= NUM 2 syz, C 46 2072d 2105d 14/26 2070d ec9e263f213c Correctly return EMSGSIZE when packet is too big in raw socket.
panic: buffer too long by 8 bytes 2 syz, C 12 2084d 2102d 14/26 2081d ce7a4440cae8 Fix panic when parsing SO_TIMESTAMP cmsg
panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2082d 2126d 14/26 2081d 2a200811d4c9 fs/fuse: check that a task has a specified file descriptor
panic: invalid pipe flags: must be readable, writable, or both 2 1 2090d 2090d 14/26 2081d 807a080d9574 Add missing error checks for FileDescription.Init.
DATA RACE in stack.(*NIC).DeliverNetworkPacket -1 4 2105d 2113d 14/26 2088d 25ebddbddfbc Fix a data race in packetEPs
panic: runtime error: integer divide by zero 2 syz, C 116 2204d 2231d 14/26 2088d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
panic: error when reading RouterAlert option's data bytes: EOF 2 syz, C 35 2103d 2105d 14/26 2088d c55e5bda4d45 Validate router alert's data length
DATA RACE in raw.(*endpoint).HandlePacket -1 syz, C 5 2101d 2101d 14/26 2088d 981faa2c1229 RLock Endpoint in raw.Endpoint.HandlePacket
panic: header.ScopeForIPv6Address(172.20.20.170): bad address 2 syz, C 48 2109d 2115d 14/26 2088d b15acae9a6e2 Fix error code for connect in raw sockets.
panic: close of nil channel (2) 2 1 2112d 2111d 14/26 2088d f6407de6bafb [syzkaller] Avoid AIOContext from resurrecting after being marked dead.
panic: Unknown syscall 165 error: strconv.ParseInt: parsing "ADDR": invalid syntax 2 syz, C 51 2110d 2116d 14/26 2088d 9c198e5df421 Fix error handling on fusefs mount.
DATA RACE in header.ICMPv6Checksum -1 syz, C 1 2102d 2102d 14/26 2088d 946cb909e62e Don't modify a packet header when it can be used by other endpoints
panic: Unknown syscall 8 error: EOF 2 syz 22 2099d 2106d 14/26 2088d 1ea241e4cc95 Fix seek on /proc/pid/cmdline when task is zombie.
panic: Stack for running G's are skipped while panicking. 2 syz, C 2426 2387d 2641d 14/26 2089d ab7ecdd66d2a watchdog: print panic error message before other messages
panic: Sentry detected stuck tasks (5) 2 syz 83 2117d 2130d 0/26 2117d 79e2364933bb Fix deadlock in UDP handleControlPacket path.
DATA RACE in log.GoogleEmitter.Emit -1 syz, C 34 2128d 2134d 0/26 2127d 9c553f2d4e4b Remove racy stringification of socket fds from /proc/net/*.
panic: runtime error: slice bounds out of range [255:LINE] 2 syz, C 5 2131d 2132d 0/26 2127d 49adf36ed7d3 Fix possible panic due to bad data.
panic: cacheLocked called on a dentry which has already been destroyed: &{{{{0 0}} true 0 ADDR} -1 ADDR 1 ADDR NUM false 2 1 2132d 2132d 0/26 2127d 74bc6e56ccd9 [vfs] kernfs: Do not panic if destroyed dentry is cached.
gvisor boot error: FATAL ERROR: running container: creating container: open /sys/fs/cgroup/devices/ci-gvisor-kvm-proxy-overlay-sandbox-test -1 1 2129d 2129d 0/26 2129d 764504c38fb5 runsc: check whether cgroup exists or not for each controller
panic: Sentry detected stuck tasks (4) 2 syz, C 5 2130d 2130d 0/26 2130d 05d2a26f7a86 Fix possible deadlock in UDP.Write().
panic: Incrementing non-positive count ADDR on tmpfs.inode 2 syz 2 2133d 2133d 0/26 2130d 10ba578c0182 tmpfs: make sure that a dentry will not be destroyed before the open() call
panic: Sentry detected stuck tasks (3) 2 syz, C 180 2131d 2135d 0/26 2131d 267560d159b2 Reset watchdog timer between sendfile() iterations.
panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2142d 2160d 0/26 2135d 4e389c785779 Check for nil in kernel.FSContext functions.
panic: Decrementing non-positive ref count ADDR, owned by *mm.SpecialMappable 2 56 2135d 2165d 0/26 2135d dcc1b71f1ba4 Fix reference counting on kcov mappings.
panic: Sentry detected stuck tasks (2) 2 syz, C 951 2135d 2175d 0/26 2135d db36d948fa63 TCP Receive window advertisement fixes.
no output from test machine (7) -1 syz, C 184 2135d 2162d 0/26 2135d 34a6e9576a96 loader/elf: validate file offset
panic: runtime error: makeslice: len out of range (2) 2 syz, C 5 2135d 2162d 0/26 2135d cd108432a50e splice: return EINVAL is len is negative
panic: Incrementing non-positive ref count ADDR owned by *mm.SpecialMappable 2 45 2136d 2165d 0/26 2135d dcc1b71f1ba4 Fix reference counting on kcov mappings.
panic: Child "" for parent Dentry &{vfsd:{mu:{Mutex:{state:LINE sema:LINE}} dead:false mounts:LINE impl:ADDR} DentryRefs 2 syz, C 3 2140d 2148d 0/26 2135d 1321f837bd9f [vfs2] Refactor kernfs checkCreateLocked.
panic: unknown error: EOF 2 syz, C 68 2163d 2166d 0/26 2162d c002fc36f9bb sockets: ignore io.EOF from view.ReadAt
no output from test machine (6) -1 syz 1873 2169d 2175d 0/26 2169d 76a09f0cf599 syscalls: Don't leak a file on the error path
no output from test machine (5) -1 syz, C 86414 2176d 2291d 0/26 2176d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
panic: Sentry detected stuck tasks 2 syz, C 506 2176d 2196d 0/26 2176d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
DATA RACE in tcp.(*endpoint).bindLocked -1 syz 2 2206d 2206d 0/26 2199d 38cdb0579b69 Fix data race in tcp.GetSockOpt.
panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2208d 2743d 0/26 2200d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 -1 syz 21 2283d 2289d 0/26 2282d 70c45e09cfd1 socket/unix: (*connectionedEndpoint).State() has to take the endpoint lock
panic: Sentry detected 1 stuck task(s): 2 syz, C 6204 2293d 2379d 0/26 2290d 4950ccde75b3 Fix write hang bug found by syzkaller.
DATA RACE in atomic.LoadInt64 -1 1 2297d 2297d 0/26 2295d 7da69fe9719b Fix data race on f.offset.
DATA RACE in fs.(*File).offsetForAppend -1 syz 2 2297d 2297d 0/26 2295d 7da69fe9719b Fix data race on f.offset.
DATA RACE in kernel.(*Task).accountTaskGoroutineEnter -1 syz 2 2321d 2321d 0/26 2318d 8dd1d5b75a95 Don't call kernel.Task.Block() from netstack.SocketOperations.Write().
panic: D0415 01:LINE.ADDR 8857 transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 95} 2 1 2347d 2347d 0/26 2331d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: close of nil channel 2 syz 6 2340d 2344d 0/26 2337d 37f863f62813 tcp: handle listen after shutdown properly
panic: D0414 08:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2} 2 1 2348d 2348d 0/26 2346d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 11:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 95} 2 1 2348d 2348d 0/26 2346d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 14:LINE.ADDR NUM task_exit.go:LINE] [ 98] Transitioning from exit state TaskExitNone to TaskExitInitiate 2 1 2347d 2347d 0/26 2346d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 16:LINE.ADDR 5236 transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2} 2 1 2347d 2347d 0/26 2346d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: D0414 13:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2} 2 1 2347d 2347d 0/26 2346d 2dd6384de89a Fix cleanup around socketpair() failure to copy out FDs.
panic: interface conversion: context.Context is kernel.taskAsyncContext, not *kernel.Task 2 syz 16 2350d 2365d 0/26 2350d c9195349c9ac Replace type assertion with TaskFromContext.
panic: runtime error: makeslice: len out of range 2 syz 49 2351d 2374d 0/26 2351d a10389e783aa splice: cap splice calls to MAX_RW_COUNT
DATA RACE in tcp.(*endpoint).Readiness -1 syz 2 2372d 2372d 0/26 2366d d04adebaab86 Fix data-race in endpoint.Readiness
DATA RACE in netstack.(*SocketOperations).SetSockOpt -1 syz 2 2371d 2371d 0/26 2369d 369cf38bd718 Fix data race in SetSockOpt.
DATA RACE in tcp.(*endpoint).SetSockOpt -1 syz 26 2374d 2394d 0/26 2369d e9e399c25d4f Remove workMu from tcpip.Endpoint.
DATA RACE in udp.(*endpoint).SetSockOptBool -1 syz 2 2387d 2380d 0/26 2372d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
no output from test machine (3) -1 syz, C 11663 2375d 2463d 0/26 2375d b55f0e5d40c1 fdtable: don't try to zap fdtable entry if close is called for non-existing fd
panic: Watchdog goroutine is stuck: 2 12 2375d 2381d 0/26 2375d 1c0535297067 Fix oom_score_adj.
panic: Sentry detected 4 stuck task(s): 2 7 2375d 2386d 0/26 2375d b0f2c3e7646d Fix infinite loop in semaphore.sem.wakeWaiters().
fatal error: out of memory (3) -1 syz 3 2381d 2381d 0/26 2380d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: too many address space collisions for -race mode -1 syz 3 2381d 2381d 0/26 2380d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: concurrent map iteration and map write (2) -1 syz 1 2392d 2392d 0/26 2382d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).ListXattr -1 1 2392d 2392d 0/26 2382d 62bd3ca8a375 Take write lock when removing xattr
lost connection to test machine (4) -1 1025286 2382d 2555d 0/26 2382d 6b4d36e32532 Hide /dev/net/tun when using hostinet.
DATA RACE in udp.(*endpoint).Connect -1 syz 10 2388d 2394d 0/26 2382d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).RemoveXattr -1 syz 2 2392d 2392d 0/26 2382d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in tcp.(*endpoint).windowCrossedACKThreshold -1 syz 10 2394d 2395d 0/26 2382d 33101752501f Fix data-race when reading/writing e.amss.
DATA RACE in stack.(*TransportEndpointInfo).AddrNetProto -1 syz 148 2387d 2395d 0/26 2382d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
fatal error: concurrent map read and map write (2) -1 syz 2 2392d 2392d 0/26 2382d 62bd3ca8a375 Take write lock when removing xattr
panic: runtime error: index out of range [1] with length 0 2 syz, C 1518 2387d 2394d 0/26 2382d 43abb24657e7 Fix panic caused by invalid address for Bind in packet sockets.
DATA RACE in netstack.(*SocketOperations).fetchReadView -1 syz 12 2388d 2394d 0/26 2382d 42fb7d349137 socket: take readMu to access readView
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).GetXattr -1 syz 3 2392d 2392d 0/26 2382d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in fs.(*UnstableAttr).SetOwner (2) -1 syz 3 2428d 2421d 0/26 2394d 115898e368e4 Prevent DATA RACE in UnstableAttr.
DATA RACE in fs.mayDelete -1 1 2423d 2416d 0/26 2394d fba479b3c786 Fix DATA RACE in fs.MayDelete.
DATA RACE in fs.(*Dirent).IncRef -1 syz 1 2420d 2413d 0/26 2394d 53504e29ca27 Fix mount refcount issue.
panic: Incrementing non-positive ref count (4) 2 syz, C 5 2412d 2414d 0/26 2394d 53504e29ca27 Fix mount refcount issue.
panic: munmap(ADDR, NUM)) failed: function not implemented (3) 2 1 2465d 2458d 0/26 2395d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: munmap(0, ADDR)) failed: function not implemented (3) 2 1 2450d 2443d 0/26 2395d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: wait failed: the process NUM:NUM exited: 1f (err <nil>) (2) 2 17 2447d 2470d 0/26 2395d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: wait failed: the process 9793:LINE exited: 1f (err <nil>) 2 syz, C 1 2465d 2458d 0/26 2395d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: wait failed: the process 4877:LINE exited: 1f (err <nil>) 2 1 2465d 2458d 0/26 2395d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: runtime error: slice bounds out of range [:LINE] with capacity 16 2 syz 42 2446d 2457d 0/26 2395d b3ae8a62cfdf Fix slice bounds out of range panic in parsing socket control message.
panic: wait failed: the process NUM:LINE exited: 1f (err <nil>) (4) 2 2 2457d 2452d 0/26 2395d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
DATA RACE in refs.(*WeakRef).init (2) -1 1 2488d 2481d 0/26 2415d 3db317390b5c Remove epoll entry from map when dropping it.
DATA RACE in refs.(*AtomicRefCount).DecRefWithDestructor -1 1 2435d 2428d 0/26 2415d 3db317390b5c Remove epoll entry from map when dropping it.
panic: interface conversion: refs.RefCounter is *fs.File, not *fs.Dirent 2 3 2429d 2439d 0/26 2415d 3db317390b5c Remove epoll entry from map when dropping it.
Invalid request partialResult in splice (2) -1 syz 134 2424d 2460d 0/26 2421d f263801a74d4 fs/splice: don't report partial errors for special files
fatal error: out of memory (2) -1 1 2437d 2430d 0/26 2421d 4cb55a7a3b09 Prevent arbitrary size allocation when sending UDS messages.
panic: invalid allocation length: 0x0 (3) 2 syz 12 2425d 2425d 0/26 2421d ede8dfab3760 Enforce splice offset limits
DATA RACE in fs.Rename (3) -1 1 2436d 2436d 0/26 2434d f1a5178c589d Fix data race in MountNamespace.resolve.
DATA RACE in tty.(*queue).readableSize -1 syz 2 2436d 2436d 0/26 2434d 80d0f9304484 Fix data race in tty.queue.readableSize.
panic: Incrementing non-positive ref count (3) 2 2 2456d 2465d 0/26 2445d 6410387ff9b4 Cleanup Shm reference handling
panic: munmap(ADDR, 1000)) failed: function not implemented (3) 2 2 2482d 2483d 0/26 2445d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
DATA RACE in fs.(*UnstableAttr).SetOwner -1 1 2465d 2465d 0/26 2463d bb00438f36eb Make masterInodeOperations.Truncate take a pointer receiver.
DATA RACE in fsutil.(*InodeSimpleAttributes).SetPermissions -1 syz 3 2464d 2464d 0/26 2463d bb00438f36eb Make masterInodeOperations.Truncate take a pointer receiver.
no output from test machine (2) -1 syz, C 6325 2470d 2587d 0/26 2470d 378d6c1f3697 unix: allow to bind unix sockets only to AF_UNIX addresses
DATA RACE in fs.Rename (2) -1 syz, C 433 2721d 2743d 0/26 2477d 89cc8eef9ba6 DATA RACE in fs.(*Dirent).fullName
Invalid request partialResult in sendfile (2) -1 syz, C 1341 2543d 2743d 0/26 2541d db218fdfcf16 Don't report partialResult errors from sendfile
Invalid request partialResult in splice -1 syz, C 206 2544d 2593d 0/26 2544d 7a234f736fe0 splice: try another fallback option only if the previous one isn't supported
lost connection to test machine (3) -1 syz, C 30758 2594d 2743d 0/26 2591d af90e68623c7 netlink: return an error in nlmsgerr
panic: node.Readdir returned offset -ADDR less than input offset ADDR 2 syz, C 26 2660d 2743d 0/26 2591d ab6774cebf5c gvisor/fs: getdents returns 0 if offset is equal to FileMaxOffset
DATA RACE in ramfs.(*dirFileOperations).Readdir -1 syz 1 2792d 2743d 0/26 2592d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
no output from test machine -1 syz, C 27191 2594d 2743d 0/26 2594d af90e68623c7 netlink: return an error in nlmsgerr
DATA RACE in kernel.(*Kernel).EmitUnimplementedEvent -1 syz 3 2605d 2606d 0/26 2605d cf2b2d97d512 Initialize kernel.unimplementedSyscallEmitter with a sync.Once.
DATA RACE in atomic.AddInt32 -1 1 2620d 2620d 0/26 2618d 542fbd01a7ed Fix race in FDTable.GetFDs().
panic: Unknown syscall 85 error: link should be resolved via Readlink() 2 syz 64 2628d 2626d 0/26 2625d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 2 error: link should be resolved via Readlink() 2 syz 16 2629d 2625d 0/26 2625d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 257 error: link should be resolved via Readlink() 2 syz 14 2628d 2633d 0/26 2626d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Incrementing non-positive ref count (2) 2 syz, C 183 2633d 2640d 0/26 2632d 4f2f44320f9b Simplify (and fix) refcounts in createAt.
DATA RACE in atomic.AddInt64 -1 1 2662d 2655d 0/26 2638d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in fs.(*lockedReader).Read -1 1 2659d 2652d 0/26 2640d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in atomic.StoreInt64 -1 syz 2 2648d 2652d 0/26 2640d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in mm.(*MemoryManager).Brk -1 syz 14 2680d 2697d 0/26 2680d 14f0e7618e28 Ensure all uses of MM.brk occur under MM.mappingMu in MM.Brk().
panic: hashed child "stat\t\xe9\xdc\xdf\x02\x02\x98\xcc\xf3<\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q\nI\xf81U\ro}\xe 2 syz, C 7 2723d 2716d 0/26 2698d 2df64cd6d2c8 createAt should return all errors from FindInode except ENOENT.
DATA RACE in fs.(*Dirent).fullName -1 3 2727d 2743d 0/26 2716d 89cc8eef9ba6 DATA RACE in fs.(*Dirent).fullName
panic: hashed over a positive child "file0" 2 1 2725d 2725d 0/26 2723d 61d8c361c663 Don't release d.mu in checks for child-existence.
DATA RACE in tty.(*lineDiscipline).masterReadiness -1 1 2725d 2725d 0/26 2724d c79e81bd27cd Addresses data race in tty implementation.
DATA RACE in tty.(*queue).WriteFromBlocks -1 syz 7 2724d 2728d 0/26 2724d c79e81bd27cd Addresses data race in tty implementation.
panic: runtime error: index out of range (2) 2 syz, C 7191 2724d 2729d 0/26 2724d 82529becaee6 Fix index out of bounds in tty implementation.
DATA RACE in atomic.CompareAndSwapInt32 (2) -1 syz 2 2726d 2726d 0/26 2724d d14a7de65865 Fix more data races in shm debug messages.
DATA RACE in atomic.CompareAndSwapInt32 -1 syz, C 9 2731d 2743d 0/26 2727d cea1dd7d21b9 Remove racy access to shm fields.
DATA RACE in netlink.(*Socket).SetSockOpt -1 syz 2 2743d 2743d 0/26 2727d 7b33df68450b Fix data race in netlink send buffer size
DATA RACE in dev.(*randomDevice).GetFile -1 1 2732d 2732d 0/26 2727d 645af7cdd8a1 Dev device methods should take pointer receiver.
DATA RACE in fsutil.(*InodeSimpleAttributes).UnstableAttr -1 syz 8 2792d 2795d 0/26 2788d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
panic: invalid allocation length: 0x0 (2) 2 syz, C 4 2830d 2832d 0/26 2830d 3b3f02627870 Truncate ar before calling mm.breakCopyOnWriteLocked().
gvisor boot error (3) -1 4 2835d 2836d 0/26 2835d 1775a0e11e56 container.Destroy should clean up container metadata even if other cleanups fail
DATA RACE in shm.(*Registry).findByKey -1 syz, C 47 2941d 3008d 0/26 2836d f93c288dd708 Fix a data race on Shm.key.
gvisor test error (2) -1 2778 2852d 2988d 0/26 2836d 24c1158b9c21 Add "trace signal" option
panic: invalid type: int 2 syz, C 559 2856d 2957d 0/26 2837d 5560615c531b Return an int32 for netlink SO_RCVBUF
panic: ptrace set regs failed: input/output error 2 syz, C 712 2842d 2940d 0/26 2837d 99d595869332 Validate FS_BASE in Task.Clone
Invalid request partialResult in sendfile -1 syz, C 7399 2842d 2995d 0/26 2837d ffcbda0c8bd7 Partial writes should loop in rpcinet.
panic: Decrementing non-positive ref count 2 syz, C 4804 2932d 3009d 0/26 2837d 0e277a39c8b6 Prevent premature destruction of shm segments.
panic: ptrace status unexpected: got 9, wanted stopped (2) 2 syz 78 2842d 2995d 0/26 2837d e7191f058f55 Use TRAP to simplify vsyscall emulation.
panic: invalid allocation length: 0x0 2 syz, C 223 2842d 3009d 0/26 2837d 46603b569c3a Fix panic on creation of zero-len shm segments.
DATA RACE in fs.(*Dirent).getDotAttrs -1 1 2950d 2950d 0/26 2837d 54dd0d0dc5ee Fix data race caused by unlocked call of Dirent.descendantOf.
panic: runtime error: invalid memory address or nil pointer dereference (2) 2 syz, C 4493 2932d 2952d 0/26 2894d beac59b37a8b Fix panic if FIOASYNC callback is registered and triggered without target
gvisor boot error -1 1911 2913d 2990d 0/26 2894d 43e6aff50e23 Don't fail if Root is readonly and is not a mount point
DATA RACE in kernel.(*Task).setKUIDsUncheckedLocked -1 syz, C 15 2944d 3002d 0/26 2894d f8ccfbbed487 Document more task-goroutine-owned fields in kernel.Task.
DATA RACE in fs.(*Dirent).hashChildParentSet -1 syz 8 2947d 2950d 0/26 2894d 8d318aac5532 fs: Hold Dirent.mu when calling Dirent.flush().
DATA RACE in waiter.(*Entry).Prev -1 syz, C 3992 2956d 3009d 0/26 2952d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Entry).Next -1 syz, C 2418 2956d 3009d 0/26 2952d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
fatal error: concurrent map read and map write -1 66 2961d 2964d 0/26 2952d dbbe9ec91541 Protect PCIDs with a mutex.
DATA RACE in waiter.(*Entry).SetNext -1 syz, C 739 2956d 3009d 0/26 2952d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
fatal error: concurrent map writes -1 3 2962d 2962d 0/26 2952d dbbe9ec91541 Protect PCIDs with a mutex.
panic: runtime error: index out of range 2 syz, C 35 2968d 3004d 0/26 2952d e97717e29a1b Enforce Unix socket address length limit
DATA RACE in waiter.(*Entry).SetPrev -1 70 2956d 3009d 0/26 2952d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Queue).Notify -1 syz, C 72 2956d 3009d 0/26 2952d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in unix.(*connectionlessEndpoint).UnidirectionalConnect -1 syz, C 965 2962d 2993d 0/26 2952d 2a44362c0b99 Fix data race in unix.BoundEndpoint.UnidirectionalConnect.
panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2956d 3009d 0/26 2952d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in kernel.(*Task).exitNotifyLocked -1 syz, C 2 2981d 2981d 0/26 2962d c036da5dffdf Hold TaskSet.mu in Task.Parent.
panic: invalid segment range [ADDR, ADDR) 2 syz, C 255 2998d 3009d 0/26 2984d 06920b3d1bb6 Exit tmpfs.fileInodeOperations.Translate early if required.Start >= EOF.
DATA RACE in kernel.(*Task).Clone -1 3 2986d 2998d 0/26 2984d 41aeb680b188 Inherit parent in clone(CLONE_THREAD) under TaskSet.mu.
DATA RACE in fs.(*Watch).Notify -1 syz 2 2999d 2999d 0/26 2998d 34af9a61741f Fix data race on inotify.Watch.mask.
lost connection to test machine (2) -1 syz, C 1814 2998d 3009d 0/26 2998d 52ddb8571c46 Skip overlay on root when its readonly
DATA RACE in fs.Rename -1 syz, C 16 2998d 3008d 0/26 2998d 2821dfe6ce95 Hold d.parent.mu when reading d.name
panic: MountNamespace.FindInode: path is empty 2 syz, C 3443 2998d 3009d 0/26 2998d 062a6f6ec5f4 Handle NUL-only paths in exec
panic: runtime error: slice bounds out of range 2 syz, C 39 3002d 3009d 0/26 3002d 1ceed49ba94c Check for invalid offset when submitting an AIO read/write request.
DATA RACE in proc.forEachMountSource -1 syz, C 24 3003d 3009d 0/26 3002d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in kernel.(*Task).Value -1 1 3006d 3006d 0/26 3002d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in semaphore.(*Set).checkPerms -1 syz, C 21 3004d 3008d 0/26 3004d 6b6852bceb12 Fix semaphore data races
DATA RACE in semaphore.(*Registry).RemoveID -1 syz, C 15 3004d 3008d 0/26 3004d 6b6852bceb12 Fix semaphore data races
DATA RACE in queue.(*Queue).Enqueue -1 syz, C 7 3006d 3008d 0/26 3005d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in unix.(*queueReceiver).RecvQueuedSize -1 syz, C 5 3005d 3008d 0/26 3005d 5f7f78c1d7ee Fix data races in Unix sockets
panic: munmap(ADDR, c6000)) failed: function not implemented 2 1 3008d 3008d 0/26 3005d dc33d71f8cf1 Change SIGCHLD to SIGKILL in ptrace stubs.
DATA RACE in unix.(*streamQueueReceiver).RecvQueuedSize -1 syz, C 3 3006d 3007d 0/26 3005d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in kernel.(*FSContext).SetWorkingDirectory -1 1 3009d 3009d 0/26 3005d 4ac79312b093 Don't read cwd or root without holding mu
DATA RACE in proc.(*mountInfoFile).ReadSeqFileData.func1 -1 1 3008d 3008d 0/26 3005d 1a9917d14d66 MountSource.Root() should return a refernce on the dirent.
DATA RACE in kernel.(*FSContext).SetRootDirectory -1 syz, C 165 3005d 3009d 0/26 3005d 478f0ac0038a Don't read FSContext.root without holding FSContext.mu
panic: munmap(ADDR, 0)) failed: invalid argument 2 syz, C 5 3009d 3009d 0/26 3009d fe3fc44da3ca Handle mremap(old_size=0).