|
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (4)
|
-1 |
syz, C |
|
|
16071 |
12m |
1783d
|
24/26 |
never |
bd30d19d87ae
Add cos and ubuntu-gpu release agents
|
|
kvm: panic: Sentry detected stuck tasks (30)
|
-1 |
syz, C |
|
|
15 |
136d |
173d
|
0/26 |
never |
6a24f67cce95
Set clone propagation to MS_PRIVATE upon BindAt failure.
|
|
fatal error: stack overflow (6)
|
-1 |
syz, C |
|
|
3626 |
23d |
26d
|
26/26 |
11d |
a349c019667d
Add cycle detection and jump recursion depth limit for netfilter.
|
|
SYZFAIL: too much cover (2)
|
-1 |
|
|
|
1 |
55d |
48d
|
26/26 |
11d |
31a791793542
Split Landlock syscall tests by ABI version.
|
|
panic: UserChainTarget should never be called.
|
2 |
syz, C |
|
|
457 |
23d |
24d
|
26/26 |
11d |
9d9b0681e814
Fix panic in iptables UserChainTarget.Action().
|
|
panic: thread group not visible in its own or an ancestor PID namespace
|
2 |
syz, C |
|
|
17 |
29d |
29d
|
26/26 |
11d |
ca90691b284b
SO_PEERCRED: fix race against thread-group reap
|
|
panic: runtime error: invalid memory address or nil pointer dereference (32)
|
2 |
syz |
|
|
6 |
61d |
54d
|
26/26 |
52d |
35db98496ee1
clone: Deliver pidfd only after child init
|
|
SYZFAIL: posix_spawnp failed
|
-1 |
syz |
|
|
6361 |
84d |
617d
|
26/26 |
84d |
a7d0e52fa760
Use raw unix.Mount for rootfs self-bind-mount
|
|
panic: Incrementing non-positive count ADDR on nsfs.Inode
|
2 |
syz, C |
|
|
20 |
117d |
117d
|
26/26 |
112d |
e0b8f07fefe9
pidfds: Fix setns() race with a dying target pidns
|
|
DATA RACE in kernel.(*Task).waitParentLocked
|
-1 |
syz, C |
|
|
5 |
116d |
116d
|
26/26 |
112d |
79075c279368
clone3: Create pidfds before making new task visible
|
|
kvm: no output from test machine (6)
|
-1 |
syz, C |
|
|
5 |
116d |
117d
|
26/26 |
112d |
8c2aa261c278
pidfds: Disallow fasync on pidfds
|
|
panic: nested locking: kernel.taskSetRWMutex: (3)
|
2 |
syz, C |
|
|
8 |
116d |
116d
|
26/26 |
112d |
8c2aa261c278
pidfds: Disallow fasync on pidfds
|
|
panic: runtime error: invalid memory address or nil pointer dereference (31)
|
2 |
syz, C |
|
|
169 |
119d |
120d
|
26/26 |
119d |
b31f2afdec69
setns: Fix setns(nsfd, 0x0)
|
|
DATA RACE in kernel.(*Task).waitCollectZombieLocked
|
-1 |
syz |
|
|
5 |
134d |
167d
|
26/26 |
128d |
149ca746755e
wait: Prefer group exit status for non-consuming waits
|
|
panic: Sentry detected stuck tasks (35)
|
2 |
syz |
|
|
41 |
136d |
189d
|
26/26 |
136d |
c057198fd552
Resolve deadlock in /proc/[pid]/fdinfo/[fd].
|
|
DATA RACE in mm.(*MemoryManager).DecUsers
|
-1 |
syz, C |
|
|
4 |
165d |
165d
|
26/26 |
164d |
70fb1c0d2c45
Fix the data race for mm.(*MemoryManager).as.
|
|
DATA RACE in usertrap.(*State).PatchSyscall
|
-1 |
syz |
|
|
2 |
191d |
191d
|
26/26 |
190d |
c78d9e41a0b2
Ensure s.mu is locked before accessing nextTrap.
|
|
panic: ktime.SyntheticClock (time=ADDR) does not contain enqueued timer ADDR for time=ADDR with setting {Enabled:false N
|
2 |
syz, C |
|
|
11 |
212d |
212d
|
26/26 |
211d |
5f31525f7613
Catch negative values in `timer_settime(2)`.
|
|
panic: Sentry detected stuck tasks (34)
|
2 |
|
|
|
2 |
226d |
232d
|
26/26 |
226d |
534579b743fb
watchdog: Add a "stuck goroutines" suffix to the full stack dump at panic
|
|
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (3)
|
2 |
syz, C |
|
|
11 |
241d |
242d
|
26/26 |
226d |
2f5377660b6f
netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
|
|
panic: SampledTimer(ADDR).Set called in pause state NUM
|
2 |
syz, C |
|
|
11 |
242d |
242d
|
26/26 |
226d |
2f5377660b6f
netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
|
|
DATA RACE in netlink.(*Socket).SetSockOpt (2)
|
-1 |
syz, C |
|
|
6 |
257d |
258d
|
26/26 |
255d |
512aa34f81ab
netlink: Fix data race on socket.sendBufferSize
|
|
FATAL ERROR: running container: starting container: starting root container: urpc method "containerManager.StartRoot" fa
|
-1 |
|
|
|
127 |
291d |
296d
|
26/26 |
280d |
c0171a1ef32a
runsc: allow to build runsc-race with code coverage instrumentation
|
|
gvisor test error: FATAL ERROR: running container: starting container: starting root container: urpc method "containerManager.StartRoot" fa
|
-1 |
|
|
|
1 |
296d |
296d
|
26/26 |
280d |
c0171a1ef32a
runsc: allow to build runsc-race with code coverage instrumentation
|
|
gvisor test error: FATAL ERROR: error executing umounter: fork/exec /proc/self/exe: no such file or directory
|
-1 |
|
|
|
4 |
296d |
296d
|
26/26 |
280d |
c0171a1ef32a
runsc: allow to build runsc-race with code coverage instrumentation
|
|
kvm: panic: Sentry detected stuck tasks (29)
|
-1 |
syz, C |
|
|
3 |
284d |
285d
|
26/26 |
282d |
2d94e669ae96
Avoid netlink deadlock
|
|
panic: Sentry detected stuck tasks (33)
|
2 |
syz, C |
|
|
13 |
283d |
284d
|
26/26 |
282d |
2d94e669ae96
Avoid netlink deadlock
|
|
gvisor test error: SYZFATAL: image testing failed w/o kernel bug (4)
|
-1 |
|
|
|
1228 |
289d |
326d
|
26/26 |
288d |
ac46fb4b6126
coverage: call cfile.InitHook from InitCoverageData
|
|
DATA RACE in kernel.(*Task).MemoryManager (4)
|
-1 |
|
|
|
1 |
331d |
331d
|
26/26 |
289d |
849e1bd48cc9
kernel: lock Task.mu in Task.MaxRSS
|
|
panic: registering already registered file
|
2 |
syz, C |
|
|
164 |
318d |
336d
|
26/26 |
289d |
c7e2a2ab44b4
Check for EventRegister success before setting FileAsync.registered.
|
|
panic: Sentry detected stuck tasks (32)
|
2 |
|
|
|
5 |
291d |
330d
|
26/26 |
289d |
b3f000ac172f
Do not retry on invalid UDP send buffers
|
|
panic: unregistering unregistered file
|
2 |
syz, C |
|
|
641 |
329d |
330d
|
26/26 |
289d |
18edfee32572
Add async handler methods to FUSE DeviceFD.
|
|
panic: WARNING: circular locking detected: kernfs.ancestryRWMutex -> vfs.inotifyEventMutex: (2)
|
2 |
|
|
|
3 |
343d |
364d
|
26/26 |
289d |
9daae06f8ded
sentry/kernel: unshare atomically and without holding Task.mu unnecessarily
|
|
panic: runtime error: slice bounds out of range [NUM:NUM] (4)
|
2 |
syz, C |
|
|
78 |
306d |
309d
|
26/26 |
289d |
7532ec065ecc
Fix: Check for errors in FUSE Readlink response.
|
|
DATA RACE in transport.(*connectionedEndpoint).PeerCreds
|
-1 |
syz, C |
|
|
8 |
357d |
361d
|
26/26 |
289d |
6db745970118
Implement SO_PEERCRED socket option for UNIX sockets and its tests.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (30)
|
2 |
syz, C |
|
|
16194 |
336d |
337d
|
26/26 |
336d |
41a5b6c519ee
Check for connection in FUSE EventRegister.
|
|
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: (2)
|
2 |
syz, C |
|
|
15 |
339d |
342d
|
26/26 |
339d |
aba998b90aff
kernel: Defer DecRef in SetWorkingDirectory to break lock cycle
|
|
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.ancestryRWMutex:
|
2 |
|
|
|
1 |
345d |
345d
|
26/26 |
343d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
DATA RACE in transport.(*connectionedEndpoint).SetPeerCreds
|
-1 |
syz, C |
|
|
3958 |
357d |
365d
|
26/26 |
343d |
2f7f776a4464
Automated rollback of changelist 798788535
|
|
DATA RACE in transport.(*connectionedEndpoint).BidirectionalConnect
|
-1 |
syz, C |
|
|
11531 |
357d |
365d
|
26/26 |
343d |
2f7f776a4464
Automated rollback of changelist 798788535
|
|
panic: Sentry detected stuck tasks (31)
|
2 |
|
|
|
3 |
345d |
386d
|
26/26 |
343d |
6448dbe1b799
procfs: release the file system mutex on the error path
|
|
gvisor test error: init process did not start
|
-1 |
|
|
|
1 |
363d |
363d
|
26/26 |
343d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
DATA RACE in transport.(*connectionedEndpoint).swapPeerCreds
|
-1 |
syz, C |
|
|
2636 |
357d |
365d
|
26/26 |
343d |
2f7f776a4464
Automated rollback of changelist 798788535
|
|
panic: nested locking: kernfs.filesystemRWMutex: (10)
|
2 |
syz, C |
|
|
16 |
348d |
415d
|
26/26 |
343d |
6448dbe1b799
procfs: release the file system mutex on the error path
|
|
panic: runtime error: invalid memory address or nil pointer dereference (29)
|
2 |
syz, C |
|
|
7 |
358d |
361d
|
26/26 |
343d |
2f7f776a4464
Automated rollback of changelist 798788535
|
|
panic: WARNING: circular locking detected: kernel.fsContextMutex -> tmpfs.filesystemRWMutex:
|
2 |
|
|
|
4 |
347d |
350d
|
26/26 |
345d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
panic: WARNING: circular locking detected: mm.mappingRWMutex -> kernel.fsContextMutex:
|
2 |
|
|
|
5 |
345d |
349d
|
26/26 |
345d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
panic: WARNING: circular locking detected: vfs.inotifyEventMutex -> mm.mappingRWMutex: (2)
|
2 |
|
|
|
5 |
347d |
350d
|
26/26 |
345d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
10461 |
345d |
351d
|
26/26 |
345d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
panic: WARNING: circular locking detected: kernel.fsContextMutex -> vfs.inotifyEventMutex:
|
2 |
|
|
|
16 |
346d |
351d
|
26/26 |
345d |
2c49d9fd3897
kernel: fix circular locking in FSContext.destroy
|
|
panic: Decrementing non-positive ref count ADDR, owned by tun.tunEndpoint
|
2 |
syz, C |
|
|
19 |
346d |
347d
|
26/26 |
346d |
20452a237b48
net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.
|
|
kvm: panic: Watchdog goroutine is stuck (7)
|
-1 |
syz |
|
|
4 |
352d |
368d
|
26/26 |
351d |
973cf7601abe
Fix incorrect lock order in execve(2) around TaskSet.mu
|
|
panic: Watchdog goroutine is stuck (4)
|
2 |
syz |
|
|
250 |
351d |
436d
|
26/26 |
351d |
973cf7601abe
Fix incorrect lock order in execve(2) around TaskSet.mu
|
|
gvisor build error (25)
|
-1 |
|
|
|
624 |
365d |
372d
|
26/26 |
364d |
49a6cc35fab1
kvm: pagetables: Enable 5-level paging
|
|
DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
|
-1 |
syz |
|
|
3 |
367d |
371d
|
26/26 |
365d |
1941bc68e20d
Fix race between unshare(2) and execve(2).
|
|
DATA RACE in kernel.(*Task).Unshare
|
-1 |
syz, C |
|
|
6 |
370d |
371d
|
26/26 |
365d |
1941bc68e20d
Fix race between unshare(2) and execve(2).
|
|
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.packetEPsRWMutex:
|
2 |
|
|
|
1 |
408d |
408d
|
26/26 |
399d |
d48212e236c1
No need to lock packetEPsMu in newNIC.
|
|
kvm: panic: Sentry detected stuck tasks (28)
|
-1 |
syz, C |
|
|
11 |
438d |
443d
|
26/26 |
414d |
973b2f23e566
Check for fatal signals and reset watchdog during MM.mapASLocked().
|
|
panic: WARNING: circular locking detected: kernfs.ancestryRWMutex -> vfs.inotifyEventMutex:
|
2 |
|
|
|
1 |
439d |
432d
|
26/26 |
426d |
a2ad5774b434
Fix lock order inversion between taskMutex and kernfs.ancestryRWMutex.
|
|
DATA RACE in packetmmap.(*ringBuffer).internalMappingsForFrame (2)
|
-1 |
|
|
|
1 |
474d |
474d
|
26/26 |
469d |
a98032f6cc71
Add locking around ringbuffer fields and reserve in packetmmap endpoint.
|
|
DATA RACE in packetmmap.(*Endpoint).Init (5)
|
-1 |
syz |
|
|
2 |
472d |
473d
|
26/26 |
469d |
a98032f6cc71
Add locking around ringbuffer fields and reserve in packetmmap endpoint.
|
|
DATA RACE in packetmmap.(*ringBuffer).init (3)
|
-1 |
syz, C |
|
|
9 |
471d |
477d
|
26/26 |
470d |
a98032f6cc71
Add locking around ringbuffer fields and reserve in packetmmap endpoint.
|
|
DATA RACE in packetmmap.(*Endpoint).HandlePacket (5)
|
-1 |
syz, C |
|
|
19 |
471d |
477d
|
26/26 |
470d |
a98032f6cc71
Add locking around ringbuffer fields and reserve in packetmmap endpoint.
|
|
DATA RACE in packetmmap.(*Endpoint).HandlePacket (4)
|
-1 |
syz, C |
|
|
4 |
480d |
481d
|
26/26 |
478d |
f56929a6872c
Lock around grabbing the version and hdrLen in packetmmap.
|
|
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader (2)
|
-1 |
syz, C |
|
|
3 |
481d |
481d
|
26/26 |
478d |
f56929a6872c
Lock around grabbing the version and hdrLen in packetmmap.
|
|
DATA RACE in packetmmap.(*Endpoint).Init (4)
|
-1 |
syz, C |
|
|
9 |
480d |
485d
|
26/26 |
478d |
5790f690667a
lock around getting the current time from the stack.
|
|
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader
|
-1 |
syz, C |
|
|
6 |
485d |
485d
|
26/26 |
483d |
5790f690667a
lock around getting the current time from the stack.
|
|
kvm: panic: Sentry detected stuck tasks (27)
|
-1 |
syz, C |
|
|
5 |
487d |
489d
|
26/26 |
483d |
1a3d4f6eb7cc
Create a separate mutex for packet mmap fields in packet endpoints.
|
|
panic: Sentry detected stuck tasks (29)
|
2 |
syz, C |
|
|
51 |
486d |
490d
|
26/26 |
485d |
1a3d4f6eb7cc
Create a separate mutex for packet mmap fields in packet endpoints.
|
|
panic: runtime error: index out of range [NUM] with length NUM (6)
|
2 |
syz, C |
|
|
227 |
498d |
499d
|
26/26 |
491d |
cd8fcab3446c
Fix range check on socket option counter metric.
|
|
kvm: panic: Sentry detected stuck tasks (25)
|
-1 |
syz, C |
|
|
3409 |
499d |
595d
|
26/26 |
491d |
bc724d81d2f7
Avoid a deadlock in packet endpoint's Close method.
|
|
panic: runtime error: index out of range [-NUM] (2)
|
2 |
syz, C |
|
|
19 |
493d |
493d
|
26/26 |
491d |
49b9d83fc867
Consolidate helper functions around unimplemented socket option metrics
|
|
panic: Sentry detected stuck tasks (28)
|
2 |
syz, C |
|
|
11282 |
491d |
595d
|
26/26 |
491d |
45adb00f5086
fuse,vfs: don't FUSE_GETATTR for /proc/mountinfo
|
|
panic: invalid field value or did not reuse the same FieldValue pointer as passed in NewField
|
2 |
syz, C |
|
|
56 |
498d |
499d
|
26/26 |
491d |
3f22efe2ac35
Return ENOPROTOOPT from setsockopt syscalls as default.
|
|
DATA RACE in packetmmap.(*Endpoint).HandlePacket (3)
|
-1 |
syz, C |
|
|
4 |
505d |
505d
|
26/26 |
505d |
3b4f4acdf32c
Don't allow reinit of already mapped packet mmap endpoints.
|
|
DATA RACE in packetmmap.(*Endpoint).Init (3)
|
-1 |
syz |
|
|
3 |
505d |
505d
|
26/26 |
505d |
3b4f4acdf32c
Don't allow reinit of already mapped packet mmap endpoints.
|
|
panic: runtime error: slice bounds out of range [NUM:NUM] (3)
|
2 |
syz, C |
|
|
20 |
508d |
509d
|
26/26 |
505d |
e3ca602624c1
Check for bad values of the packet mmap reserve option.
|
|
DATA RACE in kernel.(*ThreadGroup).endGroupStopLocked
|
-1 |
syz |
|
|
6 |
520d |
520d
|
26/26 |
515d |
8221e477b5c4
Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (28)
|
2 |
syz, C |
|
|
21 |
563d |
563d
|
26/26 |
561d |
95ad423f8c05
Don't return empty translation in ring buffer during bus error.
|
|
panic: WARNING: circular locking detected: kernel.taskMutex -> mm.mappingRWMutex:
|
2 |
|
|
|
16 |
566d |
608d
|
26/26 |
563d |
d949e7177c2f
taskCopyContext should not require holding task.mu.
|
|
panic: runtime error: index out of range [NUM] with length NUM (5)
|
2 |
syz, C |
|
|
165 |
564d |
567d
|
26/26 |
563d |
d6454b486f82
Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
|
|
DATA RACE in packetmmap.(*Endpoint).HandlePacket (2)
|
-1 |
syz, C |
|
|
1 |
567d |
567d
|
26/26 |
563d |
d6454b486f82
Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
|
|
DATA RACE in packetmmap.(*ringBuffer).init (2)
|
-1 |
|
|
|
2 |
567d |
567d
|
26/26 |
567d |
25084ce9ed1e
Add locking around packetmmap initialization and mode.
|
|
DATA RACE in packetmmap.(*Endpoint).ConfigureMMap
|
-1 |
syz, C |
|
|
2 |
567d |
567d
|
26/26 |
567d |
25084ce9ed1e
Add locking around packetmmap initialization and mode.
|
|
DATA RACE in packetmmap.(*ringBuffer).internalMappingsForFrame
|
-1 |
|
|
|
1 |
567d |
567d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packetmmap.(*Endpoint).Init (2)
|
-1 |
syz, C |
|
|
9 |
567d |
567d
|
26/26 |
567d |
25084ce9ed1e
Add locking around packetmmap initialization and mode.
|
|
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus (2)
|
-1 |
syz, C |
|
|
19 |
567d |
567d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packet.(*endpoint).HandlePacket
|
-1 |
syz, C |
|
|
3 |
567d |
567d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packet.(*endpoint).GetPacketMMapOpts
|
-1 |
syz, C |
|
|
10 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packetmmap.(*Endpoint).Init
|
-1 |
syz, C |
|
|
7 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packetmmap.(*Endpoint).HandlePacket
|
-1 |
syz |
|
|
3 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packet.(*endpoint).GetPacketMMapEndpoint
|
-1 |
|
|
|
14 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus
|
-1 |
syz, C |
|
|
3 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packet.(*endpoint).SetSockOptInt
|
-1 |
syz, C |
|
|
10 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packet.(*endpoint).SetPacketMMapEndpoint
|
-1 |
syz, C |
|
|
25 |
567d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
DATA RACE in packetmmap.(*ringBuffer).init
|
-1 |
|
|
|
2 |
568d |
568d
|
26/26 |
567d |
da7cd03064d7
Lock around packet mmap fields.
|
|
panic: runtime error: integer divide by zero (4)
|
2 |
|
|
|
702 |
567d |
568d
|
26/26 |
567d |
213917f3eaf8
Don't switch to using the packet mmap endpoint for zero length requests.
|
|
panic: invalid allocation length: 0x0 (5)
|
2 |
|
|
|
32 |
567d |
568d
|
26/26 |
567d |
213917f3eaf8
Don't switch to using the packet mmap endpoint for zero length requests.
|
|
panic: runtime error: slice bounds out of range [NUM:NUM] (2)
|
2 |
syz, C |
|
|
606 |
568d |
568d
|
26/26 |
568d |
d8518f299131
Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
|
|
panic: runtime error: index out of range [NUM] with length NUM (4)
|
2 |
syz, C |
|
|
174 |
568d |
568d
|
26/26 |
568d |
d8518f299131
Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
|
|
panic: Sentry detected stuck tasks (27)
|
2 |
syz, C |
|
|
14 |
602d |
622d
|
26/26 |
598d |
679c77e4f05e
proc: Allow interrupting generation of /proc/pid/mount{s,info}
|
|
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (2)
|
2 |
syz, C |
|
|
9 |
623d |
623d
|
26/26 |
620d |
c27c9a02aef5
kernel: use the kernel context to run task destroy actions
|
|
DATA RACE in buffer.(*Buffer).PullUp
|
-1 |
syz, C |
|
|
2 |
645d |
638d
|
26/26 |
623d |
afa323bd3070
Replace most instances of IncRef with Clone.
|
|
DATA RACE in buffer.(*ViewList).Remove
|
-1 |
syz, C |
|
|
4 |
645d |
644d
|
26/26 |
623d |
afa323bd3070
Replace most instances of IncRef with Clone.
|
|
panic: PullUp failed (3)
|
2 |
syz, C |
|
|
19 |
624d |
644d
|
26/26 |
623d |
afa323bd3070
Replace most instances of IncRef with Clone.
|
|
panic: Sentry detected stuck tasks (26)
|
2 |
syz, C |
|
|
17 |
626d |
626d
|
26/26 |
625d |
c88ffa321eb9
Returns ENOBUFS when writing to a veth device whose buffer is full.
|
|
kvm: panic: Sentry detected stuck tasks (24)
|
-1 |
syz, C |
|
|
9 |
626d |
669d
|
26/26 |
625d |
c88ffa321eb9
Returns ENOBUFS when writing to a veth device whose buffer is full.
|
|
panic: Sentry detected stuck tasks (25)
|
2 |
syz, C |
|
|
78 |
627d |
656d
|
26/26 |
627d |
54eb79b6e80a
Acquire rlock when reading link address from the bridge.
|
|
panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
|
2 |
syz, C |
|
|
34 |
629d |
631d
|
26/26 |
627d |
ddaa99e5d4d2
Ignore the length field when processing the experiment extension header.
|
|
panic: nested locking: tmpfs.filesystemRWMutex: (3)
|
2 |
syz, C |
|
|
88 |
645d |
641d
|
26/26 |
641d |
f66f0e235a0b
Fix memmap.MappingIdentity.Device/InodeID() lock ordering.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (27)
|
2 |
syz, C |
|
|
1117 |
643d |
644d
|
26/26 |
643d |
2b55090a5813
Do not crash when creating thread group with already-exceeded soft CPU limit.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (26)
|
2 |
syz, C |
|
|
7905 |
644d |
653d
|
26/26 |
644d |
ae1d4ccf0298
mm: validate vseg before using it
|
|
no output from test machine (13)
|
-1 |
syz, C |
|
|
86992 |
648d |
667d
|
26/26 |
647d |
336dc8504327
vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
|
|
panic: nested locking: tmpfs.filesystemRWMutex: (2)
|
2 |
syz, C |
|
|
33 |
648d |
651d
|
26/26 |
648d |
336dc8504327
vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
|
|
DATA RACE in buffer.(*View).Write
|
-1 |
|
|
|
1 |
773d |
773d
|
26/26 |
693d |
a446b45d4d05
Ensure views returned by PullUp are owned exclusively by their packet.
|
|
panic: runtime error: index out of range [ADDR] with length NUM (2)
|
2 |
syz, C |
|
|
23 |
697d |
698d
|
26/26 |
697d |
9d41ac1ff0b2
Fix unsigned to signed integer conversion in syserr.getHostTranslation().
|
|
panic: unknown host errno "errno NUM" (NUM) (2)
|
2 |
syz, C |
|
|
286 |
699d |
724d
|
26/26 |
697d |
3971ecbc6ccd
Remove linuxerr.IsValid and use syserr.IsValid instead.
|
|
panic: nested locking: stack.bridgeRWMutex:
|
2 |
|
|
|
2 |
712d |
705d
|
26/26 |
699d |
5e8dd6482cb7
Disallow setting a coordinator for a coordinator device.
|
|
lost connection to test machine (10)
|
-1 |
syz |
|
|
11752 |
714d |
770d
|
26/26 |
714d |
2a413db73006
kvm: check CPL to find out if the Sentry is in VM
|
|
panic: unknown host errno "memory page has hardware error" (NUM)
|
2 |
|
|
|
10 |
721d |
728d
|
26/26 |
721d |
40bde6c617c7
Add EHWPOISON to host_linux.go
|
|
panic: unknown host errno "errno NUM" (NUM)
|
2 |
syz, C |
|
|
397 |
731d |
768d
|
26/26 |
731d |
9ecb627726cf
Fix syzkaller panic for unknown error 58.
|
|
panic: No file type specified in 'mode' for InodeAttrs.Init(): mode=NUM (2)
|
2 |
syz, C |
|
|
454 |
742d |
770d
|
26/26 |
742d |
834bef599679
fuse: Error out in case of unsupported file type instead of panicking.
|
|
panic: unknown host errno "operation not possible due to RF-kill" (NUM)
|
2 |
|
|
|
1 |
743d |
743d
|
26/26 |
742d |
e6cf09a18c7e
Add ERFKILL errno to host_linux file.
|
|
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
|
2 |
|
|
|
1 |
753d |
753d
|
26/26 |
751d |
e30fa671774b
FUSE: Only block with a task if it is the task goroutine.
|
|
panic: unknown host errno "errno ADDR" (ADDR)
|
2 |
syz, C |
|
|
88 |
751d |
769d
|
26/26 |
751d |
b1ade52f24be
fuse: handle bad response errors
|
|
panic: runtime error: invalid memory address or nil pointer dereference (25)
|
2 |
|
|
|
1 |
755d |
755d
|
26/26 |
752d |
2ef09d3bddc7
FUSE: Avoid panic when opening unknown file type.
|
|
panic: unknown host errno "no XENIX semaphores available" (NUM)
|
2 |
|
|
|
7 |
755d |
756d
|
26/26 |
755d |
0184ec4aacbc
Add ENAVAIL to host_linux.go.
|
|
DATA RACE in log.GoogleEmitter.Emit (4)
|
-1 |
|
|
|
1 |
756d |
756d
|
26/26 |
755d |
742b914fcb82
Don't log mount.root because it leads to racy access.
|
|
panic: unknown host errno "is a named type file" (NUM)
|
2 |
|
|
|
7 |
756d |
757d
|
26/26 |
756d |
ef1ca17e5842
Add EISNAM to linuxHostTranslations and fix error message for ENOTNAM.
|
|
SYZFAIL: mount(proc) failed
|
-1 |
|
|
|
54326 |
786d |
787d
|
26/26 |
770d |
e39ed91daaf9
sentry: support NULL mount source
|
|
gvisor test error: SYZFAIL: mount(proc) failed
|
-1 |
|
|
|
58 |
787d |
787d
|
26/26 |
770d |
e39ed91daaf9
sentry: support NULL mount source
|
|
lost connection to test machine (9)
|
-1 |
syz |
|
|
8441 |
771d |
1110d
|
26/26 |
771d |
cd56935ddf77
runsc: pass the GLIBC_TUNABLES env to the sandbox process
|
|
DATA RACE in log.GoogleEmitter.Emit (3)
|
-1 |
|
|
|
1 |
774d |
774d
|
26/26 |
772d |
ddfbb50ecc2d
Don't log the task in CgroupPrepareMigrate warning.
|
|
DATA RACE in binary.bigEndian.Uint16
|
-1 |
|
|
|
1 |
788d |
788d
|
26/26 |
777d |
bd58900fba9e
Change veth WritePackets to deep clone its list of packets.
|
|
DATA RACE in binary.bigEndian.PutUint16 (2)
|
-1 |
|
|
|
3 |
778d |
788d
|
26/26 |
777d |
bd58900fba9e
Change veth WritePackets to deep clone its list of packets.
|
|
no output from test machine (11)
|
-1 |
syz, C |
|
|
50911 |
780d |
902d
|
26/26 |
780d |
db9fab290c26
Fix a race condition in TCPDeferAcceptTimeout
|
|
panic: send on closed channel
|
2 |
|
|
|
1 |
789d |
782d
|
26/26 |
781d |
9d1849029e8e
tcpip/link/veth: don't send any packets if another end has been closed
|
|
SYZFAIL: tun: ioctl(TUNSETIFF) failed (2)
|
-1 |
|
|
|
15 |
786d |
785d
|
26/26 |
784d |
c6d16988a984
Log endpoint type when SOL_IP options are not supported.
|
|
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.stackRWMutex:
|
2 |
syz, C |
|
|
27 |
798d |
800d
|
26/26 |
793d |
c4dc0321aa40
Do not hold BridgeEndpoint.mu during dispatcher.DeliverNetworkPacket().
|
|
init process did not start
|
-1 |
|
|
|
2 |
806d |
806d
|
26/26 |
801d |
80a501d8cc23
Avoid redundant work in `bpf.optimizeJumpsToSmallestSetOfReturns`.
|
|
DATA RACE in futex.(*waiterList).Front
|
-1 |
syz, C |
|
|
1 |
813d |
813d
|
26/26 |
805d |
b58e8a129d62
futex: add missing locking in lockBuckets()
|
|
DATA RACE in futex.(*waiterEntry).SetNext
|
-1 |
syz, C |
|
|
3 |
813d |
813d
|
26/26 |
805d |
b58e8a129d62
futex: add missing locking in lockBuckets()
|
|
DATA RACE in futex.(*waiterList).PushBack
|
-1 |
syz, C |
|
|
3 |
813d |
813d
|
26/26 |
805d |
b58e8a129d62
futex: add missing locking in lockBuckets()
|
|
gvisor test error: SYZFATAL: failed to connect to host: dial tcp: address stdin: missing port in address
|
-1 |
|
|
|
1077 |
843d |
847d
|
26/26 |
840d |
a5b10b7dd04c
Fix some processes_test flakes.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (23)
|
2 |
syz, C |
|
|
4239 |
892d |
897d
|
26/26 |
892d |
5f5e01d186b2
Fix panic while setting TCP_CORK off.
|
|
no output from test machine (10)
|
-1 |
syz, C |
|
|
19806 |
917d |
1841d
|
26/26 |
914d |
16dba7fa7677
systrap: handle stub thread crashes
|
|
panic: stub thread ADDR failed: err 0x-ADDR line NUM: sysmsg.Msg{msg: ADDR state NUM err -ADDR line NUM debug NUM app st
|
2 |
syz, C |
|
|
5 |
960d |
960d
|
26/26 |
933d |
fe66cae2edc7
Enumerate known systrap stub failures to exit process cleanly.
|
|
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (4)
|
2 |
syz, C |
|
|
22 |
951d |
958d
|
26/26 |
949d |
7b151e25d076
Don't drop the mountpoint reference in already umounted dead mountpoints.
|
|
DATA RACE in safemem.Copy (7)
|
-1 |
syz, C |
|
|
4 |
976d |
976d
|
26/26 |
973d |
de71aae89aed
`seccomp`: Use dedicated input buffer for populating seccomp cache.
|
|
kvm: panic: Sentry detected stuck tasks (22)
|
-1 |
syz, C |
|
|
8 |
997d |
1008d
|
26/26 |
990d |
eaee2b213b2d
Add check to pivot_root that ensures the new root is underneath the old root.
|
|
fatal error: stack overflow (5)
|
-1 |
syz, C |
|
|
23 |
994d |
1010d
|
26/26 |
990d |
eaee2b213b2d
Add check to pivot_root that ensures the new root is underneath the old root.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (22)
|
2 |
|
|
|
1 |
1002d |
1002d
|
26/26 |
1001d |
4733e050ebec
Check that handshake.listenEP is non-nil.
|
|
panic: attempted to rewrite jump target to a different return instruction: from={pc=NUM: {NUM NUM NUM NUM}}, to={pc=NUM:
|
2 |
syz, C |
|
|
8 |
1008d |
1008d
|
26/26 |
1004d |
7cf14b7c8b5e
Add equality function for BPF instructions.
|
|
fatal error: stack overflow (4)
|
-1 |
syz, C |
|
|
12 |
1011d |
1014d
|
26/26 |
1011d |
c16916e7d780
Move lockMountpoint to the beginning of pivot_root.
|
|
kvm: panic: Sentry detected stuck tasks (21)
|
-1 |
syz, C |
|
|
2 |
1012d |
1014d
|
26/26 |
1011d |
c16916e7d780
Move lockMountpoint to the beginning of pivot_root.
|
|
fatal error: large allocation
|
-1 |
syz, C |
|
|
234 |
1023d |
1027d
|
26/26 |
1012d |
917bee5b6d91
Add a size limit to `outputQueueTransformer.transform`.
|
|
panic: runtime error: slice bounds out of range [12:LINE]
|
2 |
syz, C |
|
|
63 |
1017d |
1796d
|
26/26 |
1015d |
c96439ecd0b4
devpts: IterDirents has to check offset and return if it is out of range
|
|
kvm: panic: Sentry detected stuck tasks (20)
|
-1 |
syz, C |
|
|
2 |
1016d |
1016d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
fatal error: stack overflow (3)
|
-1 |
|
|
|
2 |
1016d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (3)
|
2 |
syz, C |
|
|
16 |
1017d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: Decrementing non-positive ref count ADDR, owned by vfs.Filesystem
|
2 |
syz, C |
|
|
152 |
1016d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (21)
|
2 |
|
|
|
1 |
1017d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: Incrementing non-positive count ADDR on tmpfs.inode (4)
|
2 |
syz, C |
|
|
24 |
1016d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: Incrementing non-positive count ADDR on vfs.Filesystem (3)
|
2 |
|
|
|
1 |
1017d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: tmpfs.inode.decLinksLocked() called with no existing links
|
2 |
|
|
|
1 |
1016d |
1016d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
panic: tmpfs.inode.incLinksLocked() called with no existing links
|
2 |
syz, C |
|
|
1 |
1017d |
1017d
|
26/26 |
1015d |
77b137ffd8ec
Fix umount not unmounting all the mounts it is supposed to.
|
|
kvm: panic: Sentry detected stuck tasks (19)
|
-1 |
|
|
|
3 |
1019d |
1017d
|
26/26 |
1017d |
3ab01aedb874
Refactor the umount algorithm.
|
|
kvm: panic: Sentry detected stuck tasks (18)
|
-1 |
syz, C |
|
|
3 |
1031d |
1036d
|
26/26 |
1029d |
429f7c439616
Move rootfs check to inside mountMu.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (20)
|
2 |
syz, C |
|
|
8 |
1030d |
1038d
|
26/26 |
1030d |
429f7c439616
Move rootfs check to inside mountMu.
|
|
panic: WARNING: circular locking detected: mm.activeRWMutex -> tmpfs.filesystemRWMutex:
|
2 |
|
|
|
1 |
1044d |
1044d
|
26/26 |
1030d |
e1e7edcc1b67
Don't release unused RightsControlMessage in Recv.
|
|
panic: close of closed channel
|
2 |
syz, C |
|
|
1192 |
1665d |
1673d
|
26/26 |
1033d |
2e3e5b606789
Create a new test dimension that mounts a FUSE fs on /tmp.
|
|
DATA RACE in vfs.(*Mount).setMountOptions
|
-1 |
syz, C |
|
|
5 |
1042d |
1042d
|
26/26 |
1038d |
ea4f0073d4a1
Fix data race between getting mount options and updating mount options.
|
|
gvisor boot error: init process did not start (5)
|
-1 |
|
|
|
41 |
1143d |
1271d
|
26/26 |
1040d |
2e8b96b4fd74
Automated rollback of changelist 514487900
|
|
panic: Sentry detected stuck tasks (24)
|
2 |
syz, C |
|
|
13 |
1044d |
1050d
|
26/26 |
1044d |
1407fdf120ab
Fix concurrent pivot_root bug.
|
|
panic: expected socket to exist at '!N
|
2 |
syz, C |
|
|
23 |
1047d |
1047d
|
26/26 |
1044d |
707ac55a05d7
inet: don't reuse names from the abstract socket namespace map
|
|
panic: expected socket to exist at '$N
|
2 |
syz, C |
|
|
24 |
1048d |
1049d
|
26/26 |
1044d |
707ac55a05d7
inet: don't reuse names from the abstract socket namespace map
|
|
panic: expected socket to exist at '#N
|
2 |
syz, C |
|
|
23 |
1046d |
1047d
|
26/26 |
1044d |
707ac55a05d7
inet: don't reuse names from the abstract socket namespace map
|
|
panic: expected socket to exist at ' N
|
2 |
syz, C |
|
|
20 |
1048d |
1048d
|
26/26 |
1044d |
707ac55a05d7
inet: don't reuse names from the abstract socket namespace map
|
|
panic: Sentry detected stuck tasks (23)
|
2 |
syz, C |
|
|
23 |
1051d |
1056d
|
26/26 |
1051d |
a8bc2e146626
Fix group id cleanup and tidy up some mount methods.
|
|
kvm: panic: Sentry detected stuck tasks (17)
|
-1 |
|
|
|
14 |
1055d |
1086d
|
26/26 |
1054d |
44e0d6d07246
Unlock putOldMp before retrying the mount checks in pivot_root.
|
|
panic: Sentry detected stuck tasks (22)
|
2 |
|
|
|
5 |
1056d |
1057d
|
26/26 |
1056d |
44e0d6d07246
Unlock putOldMp before retrying the mount checks in pivot_root.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (19)
|
2 |
syz, C |
|
|
79 |
1059d |
1073d
|
26/26 |
1058d |
f744f443dd7d
Check before attempting to mount an anon mountpoint.
|
|
panic: nested locking: tmpfs.filesystemRWMutex:
|
2 |
|
|
|
1 |
1074d |
1067d
|
26/26 |
1058d |
c74f5866cb75
Fix circular lock that can happen during unlink.
|
|
DATA RACE in kernel.(*Task).MemoryManager (3)
|
-1 |
syz, C |
|
|
12 |
1059d |
1059d
|
26/26 |
1058d |
c39ecc4eb47a
The local task in process_vm_read|writev is just the calling task.
|
|
DATA RACE in kernel.(*runExitMain).execute (2)
|
-1 |
syz, C |
|
|
143 |
1368d |
1378d
|
26/26 |
1058d |
b66713079526
Clean up and re-enable process_vm_readv/writev
|
|
DATA RACE in binary.littleEndian.Uint64 (2)
|
-1 |
syz, C |
|
|
48 |
1368d |
1378d
|
26/26 |
1058d |
b66713079526
Clean up and re-enable process_vm_readv/writev
|
|
panic: Sentry detected stuck tasks (21)
|
2 |
|
|
|
64 |
1058d |
1105d
|
26/26 |
1058d |
677d11f22fbe
Chunkify tmpfs Allocate().
|
|
DATA RACE in vfs.(*VirtualFilesystem).connectLocked (2)
|
-1 |
|
|
|
2 |
1071d |
1071d
|
26/26 |
1058d |
de5271b36007
Fix small data race in mount.
|
|
DATA RACE in safemem.Copy (6)
|
-1 |
syz, C |
|
|
121 |
1368d |
1368d
|
26/26 |
1058d |
b66713079526
Clean up and re-enable process_vm_readv/writev
|
|
panic: Unknown syscall NUM error: strconv.ParseInt: parsing "./file1": invalid syntax
|
2 |
syz, C |
|
|
19 |
1081d |
1074d
|
26/26 |
1066d |
1910a4577f01
cgroupfs: do not return errors from strconv.ParseInt() to write()
|
|
panic: runtime error: invalid memory address or nil pointer dereference (18)
|
2 |
|
|
|
4 |
1084d |
1085d
|
26/26 |
1081d |
bb4410f44e32
Rollback 6ceceae9385c and 206e88db3653.
|
|
gvisor test error: panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry
|
-1 |
|
|
|
38 |
1086d |
1086d
|
26/26 |
1085d |
206e88db3653
Fix cwd/root update method during namespace cloning.
|
|
panic: nested locking: kernfs.filesystemRWMutex: (7)
|
2 |
|
|
|
4 |
1099d |
1101d
|
26/26 |
1094d |
c80ab228d85b
Make vfs.PopDelayedDecRefs() clear vfs.toDecRef.
|
|
panic: nested locking: kernfs.filesystemRWMutex: (6)
|
2 |
syz, C |
|
|
8 |
1102d |
1118d
|
26/26 |
1101d |
755c1f242cd4
nsfs: mark inodes as anonymous
|
|
panic: Sentry detected stuck tasks (20)
|
2 |
syz, C |
|
|
895 |
1106d |
1109d
|
26/26 |
1105d |
960b564a6840
Fix small mount propagation bug.
|
|
kvm: panic: Sentry detected stuck tasks (15)
|
-1 |
syz, C |
|
|
186 |
1106d |
1109d
|
26/26 |
1105d |
960b564a6840
Fix small mount propagation bug.
|
|
kvm: panic: Sentry detected stuck tasks (14)
|
-1 |
syz |
|
|
4 |
1121d |
1127d
|
26/26 |
1116d |
118a17d92dcf
kernfs: set DenySpliceIn for DynamicBytesFD
|
|
panic: runtime error: invalid memory address or nil pointer dereference (17)
|
2 |
|
|
|
2 |
1121d |
1121d
|
26/26 |
1120d |
6f978d71856e
kernel: GetMountNamespace has to check that mntns isn't nil
|
|
DATA RACE in udp.(*endpoint).Connect.func1
|
-1 |
syz, C |
|
|
3 |
1136d |
1129d
|
26/26 |
1120d |
5babda534107
Lock around endpoint info access in UDP onICMPError.
|
|
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM
|
-1 |
syz |
|
|
48074 |
1122d |
1540d
|
26/26 |
1122d |
41bb04c14901
Implement mount namespaces
|
|
panic: runtime error: invalid memory address or nil pointer dereference (16)
|
2 |
syz, C |
|
|
48 |
1123d |
1130d
|
26/26 |
1122d |
ef95be6e1c10
kernel: check that a task has a network namespace
|
|
panic: kcov task work is registered, but no coverage data was found
|
2 |
|
|
|
6120 |
1136d |
1141d
|
26/26 |
1134d |
f43a5fc63ac7
Remove panic in ConsumeCoverageData() when no coverage is observed.
|
|
panic: Sentry detected stuck tasks (18)
|
2 |
syz, C |
|
|
625 |
1138d |
1197d
|
26/26 |
1136d |
e54e3668b07c
Impose default tmpfs size limits correctly.
|
|
gvisor test error: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3)
|
-1 |
|
|
|
124 |
1142d |
1143d
|
26/26 |
1141d |
ffcbc70b9a4a
systrap: don't change an fpu state from the stub code
|
|
DATA RACE in pipefs.(*inode).UID
|
-1 |
syz |
|
|
2 |
1142d |
1142d
|
26/26 |
1141d |
02ed5839a762
Add a lock to pipefs's inode to protect a inode's attributes.
|
|
lost connection to test machine (8)
|
-1 |
|
|
|
1964 |
1141d |
1474d
|
26/26 |
1141d |
8b57c2e7402f
runsc/seccomp: allow sched_getaffinity if race is on
|
|
panic: runtime error: invalid memory address or nil pointer dereference (15)
|
2 |
|
|
|
1 |
1170d |
1170d
|
26/26 |
1143d |
bb5ada8caffd
Defer dec refing mounts in InvalidateDentry.
|
|
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> fasync.fileMutex: (2)
|
2 |
|
|
|
2 |
1166d |
1166d
|
26/26 |
1159d |
fedbf08401fe
kernel: unshare a network namespace without taking Task.mu
|
|
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: (2)
|
2 |
syz, C |
|
|
1 |
1166d |
1166d
|
26/26 |
1159d |
fedbf08401fe
kernel: unshare a network namespace without taking Task.mu
|
|
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: (2)
|
2 |
syz, C |
|
|
3 |
1166d |
1166d
|
26/26 |
1159d |
fedbf08401fe
kernel: unshare a network namespace without taking Task.mu
|
|
kvm: lost connection to test machine (3)
|
-1 |
|
|
|
8 |
1176d |
1198d
|
26/26 |
1170d |
52692c3647ea
fdtable: avoid large arrays
|
|
panic: nested locking: kernfs.filesystemRWMutex: (5)
|
2 |
|
|
|
5 |
1170d |
1172d
|
26/26 |
1170d |
bb5ada8caffd
Defer dec refing mounts in InvalidateDentry.
|
|
panic: nested locking: kernfs.filesystemRWMutex: (4)
|
2 |
syz, C |
|
|
31 |
1172d |
1266d
|
26/26 |
1172d |
084a5022563f
Change InvalidateDentry to return a list of vds with an extra reference.
|
|
kvm: panic: Sentry detected stuck tasks (12)
|
-1 |
|
|
|
193 |
1176d |
1338d
|
26/26 |
1175d |
52692c3647ea
fdtable: avoid large arrays
|
|
panic: WARNING: circular locking detected: mm.activeRWMutex -> kernfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
4 |
1208d |
1208d
|
26/26 |
1176d |
8c975e6e6e68
Mark some kernfs inode as Anonymous.
|
|
DATA RACE in fasync.(*FileAsync).SetOwnerTask
|
-1 |
syz, C |
|
|
11 |
1177d |
1179d
|
26/26 |
1176d |
5fed8c81b89a
Fix data race by acquiring lock before accessing fields of FileAsync.
|
|
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex:
|
2 |
syz, C |
|
|
1 |
1180d |
1180d
|
26/26 |
1176d |
f3d87d3be121
fasync: release the FileAsync mutex before sending the signal
|
|
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> fasync.fileMutex:
|
2 |
|
|
|
1 |
1180d |
1180d
|
26/26 |
1176d |
f3d87d3be121
fasync: release the FileAsync mutex before sending the signal
|
|
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex:
|
2 |
syz, C |
|
|
3 |
1180d |
1180d
|
26/26 |
1176d |
f3d87d3be121
fasync: release the FileAsync mutex before sending the signal
|
|
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.filesystemRWMutex: (2)
|
2 |
|
|
|
1 |
1198d |
1198d
|
26/26 |
1176d |
ed528835f753
Small circular lock fix.
|
|
gvisor test error: SYZFATAL: BUG: got no fallback coverage:
|
-1 |
|
|
|
132 |
1198d |
1275d
|
26/26 |
1186d |
83f4f485b4ad
systrap: don't call Goyield() if the race detector is enabled
|
|
panic: Incrementing non-positive count ADDR on tmpfs.inode (3)
|
2 |
|
|
|
6 |
1206d |
1228d
|
26/26 |
1190d |
283b80a456aa
Fix logic bug in attaching mounts.
|
|
DATA RACE in log.GoogleEmitter.Emit (2)
|
-1 |
|
|
|
3 |
1194d |
1196d
|
26/26 |
1191d |
158636229e87
Avoid serializing the sharedContext struct in formatting directives.
|
|
DATA RACE in kernel.(*TaskImage).Fork
|
-1 |
syz, C |
|
|
8 |
1287d |
1287d
|
26/26 |
1194d |
028cf757bbef
Clarify comment about copying Task.image in Task.Clone().
|
|
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: (2)
|
2 |
syz, C |
|
|
17 |
1198d |
1199d
|
26/26 |
1197d |
ed528835f753
Small circular lock fix.
|
|
panic: Sentry detected stuck tasks (17)
|
2 |
syz, C |
|
|
822 |
1197d |
1463d
|
26/26 |
1197d |
ed528835f753
Small circular lock fix.
|
|
gvisor build error (19)
|
-1 |
|
|
|
110 |
1199d |
1200d
|
26/26 |
1199d |
74e63e9e296a
Update packages
|
|
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (2)
|
2 |
syz, C |
|
|
47 |
1206d |
1211d
|
26/26 |
1199d |
283b80a456aa
Fix logic bug in attaching mounts.
|
|
gvisor test error: timed out (4)
|
-1 |
|
|
|
548 |
1201d |
1565d
|
26/26 |
1200d |
83f4f485b4ad
systrap: don't call Goyield() if the race detector is enabled
|
|
panic: WARNING: circular locking detected: stack.neighborEntryRWMutex -> stack.nicRWMutex:
|
2 |
|
|
|
1 |
1232d |
1232d
|
26/26 |
1201d |
38823be81914
Don't lock before accessing nic.networkEndpoints
|
|
panic: WARNING: circular locking detected: transport.streamQueueReceiverMutex -> kernfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
1 |
1208d |
1208d
|
26/26 |
1201d |
2044c3449153
Don't hold streamQueueReceiver.mu while calling RightsControlMessage.Release().
|
|
panic: WARNING: circular locking detected: transport.endpointMutex -> kernfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
1 |
1208d |
1208d
|
26/26 |
1201d |
a7e1fe92f588
Don't hold baseEndpoint.mu when calling receiver.Recv.
|
|
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
18 |
1321d |
1396d
|
26/26 |
1201d |
e0b1585586c6
Remove stale `vdDentry` variable from VirtualFilesystem.connectMountAt().
|
|
panic: nested locking: transport.endpointMutex:
|
2 |
syz, C |
|
|
1 |
1208d |
1208d
|
26/26 |
1201d |
a7e1fe92f588
Don't hold baseEndpoint.mu when calling receiver.Recv.
|
|
fatal error: unexpected signal during runtime execution (3)
|
-1 |
|
|
|
9 |
1246d |
1249d
|
26/26 |
1246d |
96aa115516c8
systrap: simplify interrupt handling in syshandler
|
|
gvisor boot error: panic: prctl(PR_SET_NO_NEW_PRIVS) failed: invalid argument
|
-1 |
|
|
|
12 |
1249d |
1249d
|
26/26 |
1249d |
6890e539c700
systrap: set all arguments of prctl(PR_SET_NO_NEW_PRIVS)
|
|
panic: interface conversion: *kernel.Kernel is not unimpl.Events: missing method EmitUnimplementedEvent
|
2 |
syz, C |
|
|
5857 |
1253d |
1255d
|
26/26 |
1253d |
f8b98248139c
Update `unimpl.EmitUnimplementedEvent` interface to add the syscall number.
|
|
gvisor test error: SYZFATAL: BUG: program execution failed: executor NUM: not serving
|
-1 |
|
|
|
137 |
1255d |
1261d
|
26/26 |
1255d |
08920d098b30
Fix systrap TLS handling on ARM.
|
|
gvisor build error (18)
|
-1 |
|
|
|
313 |
1262d |
1284d
|
26/26 |
1255d |
fedadb093205
Fix syzkaller systrap builds.
|
|
DATA RACE in systrap.(*subprocessPool).fetchAvailable
|
-1 |
|
|
|
25 |
1265d |
1275d
|
26/26 |
1255d |
f01bf248c19f
Fix data race in subprocess pool.
|
|
panic: WARNING: circular locking detected: tmpfs.filesystemRWMutex -> kernel.taskSetRWMutex:
|
2 |
syz |
|
|
14 |
1261d |
1536d
|
26/26 |
1255d |
758da469f7ed
kernel: release kernel.taskSetRWMutex before calling TaskImage.Release
|
|
panic: runtime error: index out of range [ADDR] with length NUM
|
2 |
syz, C |
|
|
17 |
1266d |
1266d
|
26/26 |
1255d |
fc94225c333d
Fix crash with large FD value
|
|
gvisor boot error: FATAL ERROR: overlay flag is incompatible with shared file access for rootfs
|
-1 |
|
|
|
148 |
1268d |
1269d
|
26/26 |
1260d |
1b7a4e2a055c
Prepare to make root overlay the default.
|
|
gvisor boot error: FATAL ERROR: overlay flag has been replaced with overlay2 flag
|
-1 |
|
|
|
66 |
1267d |
1269d
|
26/26 |
1260d |
1b7a4e2a055c
Prepare to make root overlay the default.
|
|
DATA RACE in vfs.(*VirtualFilesystem).PivotRoot
|
-1 |
syz, C |
|
|
1 |
1278d |
1278d
|
26/26 |
1269d |
807fd0fd27d0
Lock around accessing the mount namespace in pivot_root.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (14)
|
2 |
syz, C |
|
|
753 |
1277d |
1278d
|
18/26 |
1277d |
8a1845f8b850
Don't send a signal to a controlling thread group if one has not been set.
|
|
fatal error: stack overflow
|
-1 |
|
|
|
1 |
1353d |
1353d
|
18/26 |
1278d |
426deb60fd25
lockdep: fix the TOCTTOU issue
|
|
panic: runtime error: invalid memory address or nil pointer dereference (13)
|
2 |
syz, C |
|
|
2752 |
1278d |
1281d
|
18/26 |
1278d |
8184fa1db0fa
Clean up devpts code, and deduplicate the foreground process state.
|
|
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM (2)
|
2 |
syz, C |
|
|
7 |
1283d |
1285d
|
18/26 |
1281d |
5817f4cc64e4
Fix FUSE how handles malformed INIT requests.
|
|
panic: nested locking: kernfs.filesystemRWMutex: (3)
|
2 |
syz |
|
|
19 |
1290d |
1315d
|
18/26 |
1288d |
28472cc03fe1
don't take an unnecessary reference in proc.fdSymlink.Valid()
|
|
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry (2)
|
2 |
syz, C |
|
|
13 |
1295d |
1295d
|
18/26 |
1294d |
1beb3e2b251d
Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
|
|
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry (2)
|
2 |
syz, C |
|
|
65 |
1294d |
1295d
|
18/26 |
1294d |
1beb3e2b251d
Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
|
|
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry
|
2 |
syz, C |
|
|
14 |
1297d |
1300d
|
18/26 |
1295d |
8373fb5db8c8
Check hard link target's mount compatibility before kernfs.Dentry cast.
|
|
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry
|
2 |
syz, C |
|
|
390 |
1295d |
1301d
|
18/26 |
1295d |
8373fb5db8c8
Check hard link target's mount compatibility before kernfs.Dentry cast.
|
|
panic: interface conversion: vfs.DentryImpl is *gofer.dentry, not *kernfs.Dentry
|
2 |
syz, C |
|
|
13 |
1298d |
1298d
|
18/26 |
1297d |
8373fb5db8c8
Check hard link target's mount compatibility before kernfs.Dentry cast.
|
|
panic: runtime error: index out of range [NUM] with length NUM (3)
|
2 |
syz, C |
|
|
372 |
1313d |
1317d
|
18/26 |
1313d |
fe562179fea1
Handle absolute symlink target '/' correctly in VFS layer.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (12)
|
2 |
syz, C |
|
|
31 |
1317d |
1378d
|
18/26 |
1313d |
e08f204299df
inet: each socket has to hold a reference to its network namespace
|
|
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> kernfs.filesystemRWMutex:
|
2 |
|
|
|
1 |
1332d |
1332d
|
18/26 |
1315d |
492d7a98116b
Decref target VirtualDentry outside the vfs mount lock during mount ops.
|
|
gvisor test error: panic: ptrace set regs (&{PtraceRegs:{Regs:[ADDR NUM ADDR NUM NUM NUM NUM ADDR ADDR NUM NUM ADDR ADDR NUM ADDR ADDR NUM
|
-1 |
|
|
|
10 |
1320d |
1320d
|
15/26 |
1318d |
194029b95444
arm64: validate registers that come from user-space
|
|
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: (2)
|
2 |
syz, C |
|
|
53 |
1351d |
1353d
|
14/26 |
1351d |
bc440b67fce0
Don't hold nic.mu when calling n.linkResQueue.cancel.
|
|
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.neighborCacheRWMutex:
|
2 |
syz, C |
|
|
356 |
1354d |
1359d
|
14/26 |
1353d |
70be2fc8a772
Remove unsetting route's cached neighbor entry in link res callback.
|
|
gvisor build error (16)
|
-1 |
|
|
|
12 |
1366d |
1366d
|
14/26 |
1354d |
20b2ec04d94d
Update bazel packages
|
|
panic: WARNING: circular locking detected: stack.packetsPendingLinkResolutionMutex -> stack.routeRWMutex:
|
2 |
syz, C |
|
|
2602 |
1354d |
1359d
|
14/26 |
1354d |
4f326de47636
Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
|
|
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex:
|
2 |
syz, C |
|
|
1246 |
1354d |
1359d
|
14/26 |
1354d |
4f326de47636
Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
|
|
gvisor boot error: FATAL ERROR: running container: creating container: failed to create an unnamed temporary file inside "/tmp"
|
-1 |
|
|
|
24 |
1358d |
1358d
|
14/26 |
1357d |
368e85414697
overlay2: Do not use O_TMPFILE to create unnamed temporary file.
|
|
panic: WARNING: circular locking detected: kernel.signalHandlersMutex -> kernfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
351 |
1364d |
1366d
|
14/26 |
1364d |
d0ae59368d8a
cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
|
|
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> kernfs.filesystemRWMutex:
|
2 |
syz, C |
|
|
2320 |
1364d |
1366d
|
14/26 |
1364d |
d0ae59368d8a
cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
|
|
panic: cgroupfs: pids controller attempted to remove pending charge for Task ADDR, but task didn't have pending charges, (2)
|
2 |
|
|
|
1 |
1397d |
1397d
|
14/26 |
1366d |
62ddad611979
cgroupfs: Fix several races with task migration.
|
|
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode
|
2 |
syz, C |
|
|
27 |
1366d |
1367d
|
14/26 |
1366d |
1823b16fccf7
Clean up DecRefs in mount methods.
|
|
panic: Incrementing non-positive count ADDR on tmpfs.inode (2)
|
2 |
syz, C |
|
|
56 |
1366d |
1367d
|
14/26 |
1366d |
1823b16fccf7
Clean up DecRefs in mount methods.
|
|
panic: kernfs.Dentry.DecRef() called without holding a reference (2)
|
2 |
syz, C |
|
|
61 |
1366d |
1367d
|
14/26 |
1366d |
1823b16fccf7
Clean up DecRefs in mount methods.
|
|
kvm: panic: Sentry detected stuck tasks (10)
|
-1 |
|
|
|
3 |
1383d |
1400d
|
14/26 |
1367d |
ece02b45b5b4
Add a maximum to the total number of mounts allowed in a namespace.
|
|
panic: Lock not held: transport.endpointMutex[e]:
|
2 |
syz, C |
|
|
1191 |
1368d |
1368d
|
14/26 |
1368d |
1ceee8c31071
connectioned: Change nested lock name to only have a single nested lock.
|
|
DATA RACE in safemem.Copy (5)
|
-1 |
syz, C |
|
|
3153 |
1368d |
1378d
|
14/26 |
1368d |
ae731e0394f5
Don't use other process's scratch buffer.
|
|
panic: unbalance unlock: mm.activeRWMutex:LINE:
|
2 |
|
|
|
2 |
1370d |
1381d
|
14/26 |
1368d |
445fa6f40c89
Lockdep: Print more info in the "unbalanced unlock" case.
|
|
panic: WARNING: circular locking detected: kernel.taskMutex -> kernel.taskSetRWMutex:
|
2 |
syz, C |
|
|
1470 |
1378d |
1379d
|
14/26 |
1376d |
38a0512f13fa
Fix circular lock in process_vm_(read|write)v
|
|
DATA RACE in binary.littleEndian.Uint64
|
-1 |
syz, C |
|
|
29 |
1477d |
1480d
|
14/26 |
1379d |
106f6ea96746
Re-enable process_vm_(read|write)v
|
|
panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
|
2 |
syz, C |
|
|
914 |
1379d |
1397d
|
14/26 |
1379d |
3c0e0a3746a3
io_uring: Fix several issues with shared ring buffers.
|
|
DATA RACE in safemem.Copy (4)
|
-1 |
syz, C |
|
|
1019 |
1477d |
1480d
|
14/26 |
1379d |
106f6ea96746
Re-enable process_vm_(read|write)v
|
|
panic: runtime error: slice bounds out of range [ADDR:NUM]
|
2 |
syz, C |
|
|
13 |
1383d |
1383d
|
14/26 |
1379d |
3c0e0a3746a3
io_uring: Fix several issues with shared ring buffers.
|
|
panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
|
2 |
syz, C |
|
|
124 |
1380d |
1396d
|
14/26 |
1379d |
3c0e0a3746a3
io_uring: Fix several issues with shared ring buffers.
|
|
panic: runtime error: integer divide by zero (3)
|
2 |
syz, C |
|
|
443 |
1379d |
1396d
|
14/26 |
1379d |
3c0e0a3746a3
io_uring: Fix several issues with shared ring buffers.
|
|
panic: Unknown syscall -NUM error: EOF
|
2 |
syz, C |
|
|
14 |
1384d |
1385d
|
14/26 |
1379d |
f3aaf4326636
io_ring: Handle EOF on IORING_OP_READV
|
|
DATA RACE in tmpfs.GetSeals
|
-1 |
|
|
|
1 |
1385d |
1385d
|
14/26 |
1381d |
374e716c7ce2
AddSeals has to take the write lock to modify seals
|
|
DATA RACE in tmpfs.AddSeals
|
-1 |
syz, C |
|
|
4 |
1384d |
1385d
|
14/26 |
1381d |
374e716c7ce2
AddSeals has to take the write lock to modify seals
|
|
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM
|
2 |
syz, C |
|
|
196 |
1665d |
1673d
|
14/26 |
1383d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
panic: addresses IP and fe80::aa do not have the same length (2)
|
2 |
|
|
|
1 |
1388d |
1388d
|
14/26 |
1384d |
8756ebc3b406
Netstack: Check address matches the endpoint protocol for IP_DROP_MEMBERSHIP
|
|
panic: runtime error: invalid memory address or nil pointer dereference (11)
|
2 |
syz, C |
|
|
2733 |
1387d |
1480d
|
14/26 |
1386d |
ae136df84998
Add nil-check for parent mount in umount(2) while handling mount propagation.
|
|
DATA RACE in vfs.(*VirtualFilesystem).setPropagation
|
-1 |
syz, C |
|
|
3 |
1399d |
1400d
|
14/26 |
1386d |
20ef2127a102
Lock around optional tag generation.
|
|
DATA RACE in bufferv2.newChunk
|
-1 |
syz, C |
|
|
68 |
1393d |
1409d
|
14/26 |
1392d |
6b3b5493d0ea
Fix ipv6 header view ownership.
|
|
DATA RACE in vfs.(*VirtualFilesystem).GenerateProcMountInfo
|
-1 |
syz, C |
|
|
2 |
1398d |
1399d
|
14/26 |
1396d |
20ef2127a102
Lock around optional tag generation.
|
|
panic: runtime error: integer divide by zero (2)
|
2 |
syz, C |
|
|
56 |
1396d |
1397d
|
14/26 |
1396d |
d4b159ae93b5
iouring: Disallow zero, or less CQ entries than SQ entries
|
|
panic: nested locking: kernel.taskSetRWMutex:
|
2 |
syz, C |
|
|
2 |
1455d |
1455d
|
14/26 |
1402d |
c1427a04dfba
Disable fasync for signalfd descriptors
|
|
gvisor test error: panic: WARNING: circular locking detected: mm.activeRWMutex -> kernel.taskSetRWMutex:
|
-1 |
|
|
|
1 |
1423d |
1423d
|
14/26 |
1416d |
2e844f74fcdd
Do not use ktime.Timer for CPU clock ticks.
|
|
panic: Decrementing non-positive ref count ADDR, owned by kernel.ProcessGroup (2)
|
2 |
syz, C |
|
|
3 |
1421d |
1455d
|
14/26 |
1421d |
36ddd3050cc2
Check if ThreadGroup exists before executing JoinProcessGroup.
|
|
kvm: panic: Sentry detected stuck tasks (9)
|
-1 |
|
|
|
2 |
1449d |
1450d
|
14/26 |
1438d |
48e2252b3bac
fix panic caused by too-large buffer allocations
|
|
gvisor build error (15)
|
-1 |
|
|
|
232 |
1445d |
1444d
|
14/26 |
1442d |
d2827e5a9242
Don't require gcc-multilib to be installed to build BPF
|
|
panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: NUM, proposed charg
|
2 |
syz, C |
|
|
97 |
1459d |
1578d
|
14/26 |
1458d |
46e08207b58f
cgroupfs: Handle hierachy changes across charge/uncharge.
|
|
panic: addresses IP and fe80::aa do not have the same length
|
2 |
|
|
|
102 |
1478d |
1507d
|
14/26 |
1472d |
b195ca54f311
Netstack: Check that the multicast address matches the endpoint protocol.
|
|
DATA RACE in fuse.newFUSEFilesystem
|
-1 |
syz, C |
|
|
384 |
1665d |
1673d
|
14/26 |
1481d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
panic: WARNING: circular locking detected: cgroupfs.pidsControllerMutex -> mm.mappingRWMutex:
|
2 |
|
|
|
3 |
1535d |
1536d
|
14/26 |
1533d |
d5a04e338eef
cgroupfs: Don't copy in with cgroups locks held.
|
|
panic: WARNING: circular locking detected: tmpfs.inodeMutex -> mm.activeRWMutex:
|
2 |
syz, C |
|
|
8353 |
1536d |
1536d
|
14/26 |
1533d |
82498d087ef8
Don't hold MM.activeMu when calling MM.vmaMapsEntryLocked().
|
|
panic: Sentry detected stuck tasks (16)
|
2 |
|
|
|
5 |
1541d |
1614d
|
14/26 |
1540d |
8b41af93300c
sync/lockdep: use RangeRepeatable instead of Range
|
|
kvm: panic: Sentry detected stuck tasks (7)
|
-1 |
|
|
|
1 |
1560d |
1553d
|
14/26 |
1541d |
6fda48f50dcd
tcpip/transport/raw: check MTU before copying a buffer from user memory
|
|
panic: invalid allocation length: 0x0 (4)
|
2 |
syz, C |
|
|
4338 |
1541d |
1544d
|
14/26 |
1541d |
3290a054c5bd
getdents: Test that size parameter is not zero before allocating PMAs.
|
|
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> mm.activeRWMutex:
|
2 |
|
|
|
2 |
1558d |
1554d
|
14/26 |
1547d |
e47be0cfc06d
Move Send/RecvNotify calls outside of CopyIn/Out, due to lock order.
|
|
panic: runtime error: index out of range [-NUM]
|
2 |
syz, C |
|
|
13 |
1572d |
1572d
|
14/26 |
1569d |
a7cad2b092de
Tmpfs with size option enabled bug fix.
|
|
DATA RACE in fuse.(*connection).callFutureLocked
|
-1 |
syz, C |
|
|
2 |
1670d |
1673d
|
14/26 |
1578d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
DATA RACE in fuse.(*DeviceFD).Read
|
-1 |
syz, C |
|
|
238 |
1667d |
1673d
|
14/26 |
1578d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
DATA RACE in fuse.newFUSEConnection
|
-1 |
syz, C |
|
|
52 |
1667d |
1673d
|
14/26 |
1578d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
DATA RACE in fuse.(*DeviceFD).PWrite
|
-1 |
syz, C |
|
|
11 |
1670d |
1673d
|
14/26 |
1578d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
DATA RACE in fuse.(*DeviceFD).PRead
|
-1 |
syz, C |
|
|
9 |
1669d |
1673d
|
14/26 |
1578d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
DATA RACE in fuse.(*DeviceFD).Seek
|
-1 |
syz, C |
|
|
8 |
1672d |
1673d
|
14/26 |
1578d |
32c474d82f65
Allow multiple FUSE filesystems to share a connection.
|
|
panic: unexpected tcp state in processor: BOUND
|
2 |
syz, C |
|
|
36 |
1589d |
1592d
|
14/26 |
1589d |
3b917921d7fe
Fix race in listen.
|
|
DATA RACE in cgroupfs.(*memsData).Write
|
-1 |
syz, C |
|
|
4 |
1601d |
1601d
|
14/26 |
1592d |
5f9bd8a53b20
cgroupfs: Synchronize access to cpuset controller bitmaps.
|
|
panic: unknown network protocol number NUM
|
2 |
syz, C |
|
|
56 |
1682d |
1694d
|
14/26 |
1612d |
6a28dc7c5963
Correct fragmentation reference counting.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (10)
|
2 |
syz, C |
|
|
11 |
1618d |
1624d
|
14/26 |
1617d |
5835bc8c3a4b
cgroupfs: Handle invalid PID/PGID on migration.
|
|
DATA RACE in kernfs.(*OrderedChildren).checkExistingLocked
|
-1 |
syz, C |
|
|
1 |
1640d |
1640d
|
14/26 |
1618d |
9085d334deed
kernfs: Handle duplicate unlink on orphaned directories.
|
|
panic: Inode doesn't match what kernfs thinks! OrderedChild: &{dir:{InodeNoopRefCount:{InodeTemporary:{}} InodeAlwaysVal
|
2 |
syz, C |
|
|
12 |
1625d |
1640d
|
14/26 |
1618d |
9085d334deed
kernfs: Handle duplicate unlink on orphaned directories.
|
|
DATA RACE in bitmap.(*Bitmap).Maximum
|
-1 |
syz, C |
|
|
8 |
1632d |
1640d
|
14/26 |
1631d |
4503ba3f5efd
Fix data race when using UNSHARE in close_range.
|
|
kvm: lost connection to test machine
|
-1 |
|
|
|
364 |
1635d |
1988d
|
14/26 |
1632d |
81d384cfe9d3
Fix race between epoll readiness check and re-readying.
|
|
lost connection to test machine (6)
|
-1 |
|
|
|
4341 |
1633d |
1872d
|
14/26 |
1633d |
81d384cfe9d3
Fix race between epoll readiness check and re-readying.
|
|
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 (2)
|
-1 |
syz, C |
|
|
4 |
1649d |
1642d
|
14/26 |
1637d |
b1ceabc884c0
Hold baseEndpoint.mu when calling baseEndpoint.Connected()
|
|
kvm: panic: Sentry detected stuck tasks (6)
|
-1 |
|
|
|
15 |
1641d |
1652d
|
14/26 |
1641d |
f51097051ac5
tun: reject packets larger MTU
|
|
panic: Sentry detected stuck tasks (15)
|
2 |
syz, C |
|
|
2582 |
1650d |
1727d
|
14/26 |
1645d |
510cc2f7fca9
Fix pivot_root lock inversion.
|
|
Invalid request partialResult in sendto (3)
|
-1 |
syz, C |
|
|
9 |
1648d |
1648d
|
14/26 |
1646d |
395c38be75d1
Add ECONNABORTED to the partial result error list.
|
|
kvm: panic: Sentry detected stuck tasks (5)
|
-1 |
syz, C |
|
|
65 |
1653d |
1715d
|
14/26 |
1652d |
b413d78c27db
sendfile: limit a buffer size
|
|
panic: runtime error: invalid memory address or nil pointer dereference (9)
|
2 |
syz, C |
|
|
262 |
1665d |
1661d
|
14/26 |
1660d |
b7ccfa5084e2
Fixes #7086,#6964,#3413,#7001.
|
|
DATA RACE in fuse.(*connection).callFuture (2)
|
-1 |
|
|
|
3 |
1666d |
1666d
|
14/26 |
1665d |
e219f75d8b3c
Fuse: Cache `maxActiveRequests` in `connection` to avoid reading it from `fs`.
|
|
panic: Unknown syscall NUM error: payload too small. Minimum data lenth required: NUM, but got data length NUM
|
2 |
syz, C |
|
|
79 |
1666d |
1672d
|
14/26 |
1666d |
55ef37166897
Return well-defined error on short payload in FUSE.
|
|
fatal error: sync: unlock of unlocked mutex
|
-1 |
syz, C |
|
|
26 |
1666d |
1667d
|
14/26 |
1666d |
10d1a49c5ba2
Fuse: `DeviceFD.Read`: Lock `DeviceFD` ahead of other locks.
|
|
DATA RACE in fuse.(*connection).callFuture
|
-1 |
|
|
|
1 |
1670d |
1670d
|
14/26 |
1667d |
a5ce865145c7
fuse: Attempt to fix five data races.
|
|
DATA RACE in fuse.(*connection).initProcessReply
|
-1 |
syz, C |
|
|
14 |
1668d |
1672d
|
14/26 |
1667d |
a5ce865145c7
fuse: Attempt to fix five data races.
|
|
DATA RACE in fuse.(*DeviceFD).writeLocked
|
-1 |
syz, C |
|
|
33 |
1668d |
1672d
|
14/26 |
1667d |
a5ce865145c7
fuse: Attempt to fix five data races.
|
|
DATA RACE in fuse.(*connection).Call
|
-1 |
syz, C |
|
|
65 |
1667d |
1671d
|
14/26 |
1667d |
a5ce865145c7
fuse: Attempt to fix five data races.
|
|
DATA RACE in fuse.(*DeviceFD).Release
|
-1 |
syz, C |
|
|
404 |
1667d |
1672d
|
14/26 |
1667d |
a5ce865145c7
fuse: Attempt to fix five data races.
|
|
DATA RACE in stack.(*PacketBuffer).reset (2)
|
-1 |
syz |
|
|
2 |
1693d |
1693d
|
14/26 |
1669d |
6d15b0ee64f1
Fix packet buffer reference counting in IP fragmentation/reassembly.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (8)
|
2 |
syz, C |
|
|
214 |
1669d |
1694d
|
14/26 |
1669d |
6d15b0ee64f1
Fix packet buffer reference counting in IP fragmentation/reassembly.
|
|
panic: Incrementing non-positive count ADDR on stack.PacketBuffer
|
2 |
syz, C |
|
|
9 |
1680d |
1680d
|
14/26 |
1669d |
6d15b0ee64f1
Fix packet buffer reference counting in IP fragmentation/reassembly.
|
|
DATA RACE in mqfs.FilesystemType.GetFilesystem
|
-1 |
|
|
|
1 |
1684d |
1684d
|
14/26 |
1669d |
d1dadc9c19a1
Remove dentry_cache_limit mount option from mqfs.
|
|
gvisor build error (13)
|
-1 |
|
|
|
201 |
1675d |
1682d
|
14/26 |
1674d |
c18ec0b53cf2
Fix race build error.
|
|
panic: runtime error: index out of range [NUM] with length NUM (2)
|
2 |
syz, C |
|
|
21 |
1675d |
1682d
|
14/26 |
1675d |
5fb527632358
Handle 0 sized writes to /dev/net/tun.
|
|
panic: PullUp failed (2)
|
2 |
syz |
|
|
4 |
1683d |
1692d
|
14/26 |
1680d |
6d15b0ee64f1
Fix packet buffer reference counting in IP fragmentation/reassembly.
|
|
DATA RACE in transport.(*connectionedEndpoint).Listen
|
-1 |
|
|
|
1 |
1711d |
1711d
|
14/26 |
1696d |
52bee5297caf
unix: call Listening under the endpoint lock
|
|
DATA RACE in udp.(*endpoint).Connect (2)
|
-1 |
syz, C |
|
|
4 |
2101d |
2107d
|
14/26 |
1705d |
2485a4e2cb4a
Make stack.Route safe to access concurrently
|
|
kvm: panic: Sentry detected stuck tasks (4)
|
-1 |
syz, C |
|
|
627 |
1722d |
1749d
|
14/26 |
1722d |
4d29819e13a1
pipe: have separate notifiers for readers and writers
|
|
panic: Sentry detected stuck tasks (14)
|
2 |
|
|
|
20 |
1731d |
1776d
|
14/26 |
1730d |
b2f8b495ad73
cgroup/cpuset: handle the offset argument of write methods properly
|
|
DATA RACE in stack.(*PacketBuffer).reset
|
-1 |
|
|
|
9 |
1751d |
1752d
|
14/26 |
1751d |
bb1ae811f4eb
Prevent PacketBuffers from being returned to the pool too early in nic.
|
|
panic: runtime error: makeslice: len out of range (4)
|
2 |
|
|
|
36 |
1752d |
1756d
|
14/26 |
1752d |
37792ee1e6e1
Validate ControlMessageHeader.Length
|
|
SYZFAIL: tun: can't open /dev/net/tun
|
-1 |
syz |
|
|
339 |
1760d |
2013d
|
14/26 |
1760d |
58017e655399
Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
|
|
kvm: no output from test machine (2)
|
-1 |
syz, C |
|
|
23 |
1761d |
1839d
|
14/26 |
1760d |
58017e655399
Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
|
|
DATA RACE in cgroupfs.(*cpusData).Generate
|
-1 |
|
|
|
2 |
1766d |
1770d
|
14/26 |
1765d |
6078d26588c0
Sychronize access to cpuset controller bitmaps.
|
|
DATA RACE in cgroupfs.(*cpusData).Write
|
-1 |
syz, C |
|
|
6 |
1765d |
1770d
|
14/26 |
1765d |
6078d26588c0
Sychronize access to cpuset controller bitmaps.
|
|
panic: runtime error: index out of range [NUM] with length NUM
|
2 |
syz, C |
|
|
12 |
1767d |
1769d
|
14/26 |
1766d |
f54a25c1f03e
Validate an icmp header before accessing it
|
|
panic: interface conversion: kernfs.Inode is nil, not *mqfs.rootInode
|
2 |
|
|
|
2 |
1768d |
1770d
|
14/26 |
1766d |
763d7e6e396d
Obtain ref on root dentry in mqfs.GetFilesystem.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (7)
|
2 |
syz, C |
|
|
45305 |
1767d |
1796d
|
14/26 |
1766d |
763d7e6e396d
Obtain ref on root dentry in mqfs.GetFilesystem.
|
|
panic: kernfs.Dentry.DecRef() called without holding a reference
|
2 |
syz, C |
|
|
87 |
1767d |
1771d
|
14/26 |
1766d |
763d7e6e396d
Obtain ref on root dentry in mqfs.GetFilesystem.
|
|
panic: Only permission mask must be set: ADDR
|
2 |
syz, C |
|
|
756 |
1767d |
1771d
|
14/26 |
1767d |
4d07fc952d6b
Do not leak non-permission mode bits in mq_open(2).
|
|
gvisor build error (11)
|
-1 |
|
|
|
386 |
1838d |
1843d
|
14/26 |
1794d |
c2353e4055ac
[op] Fix //debian:debian.
|
|
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3)
|
-1 |
syz, C |
|
|
2034 |
1795d |
1889d
|
14/26 |
1794d |
0bdd79ccd469
kvm: trap mmap syscalls to map new regions to the guest
|
|
DATA RACE in safemem.Copy (3)
|
-1 |
syz, C |
|
|
3 |
1801d |
1801d
|
14/26 |
1795d |
1fe0a6691ff5
Prevent PacketData from being modified.
|
|
panic: runtime error: slice bounds out of range [:LINE] with capacity 0
|
2 |
|
|
|
2 |
1845d |
1846d
|
14/26 |
1796d |
6d0b40b1d159
[op] Make PacketBuffer Clone() do a deeper copy.
|
|
panic: Sentry detected stuck tasks (13)
|
2 |
|
|
|
1 |
1806d |
1806d
|
14/26 |
1796d |
4076153be684
Fix lock ordering violation
|
|
Invalid request partialResult in pwritev
|
-1 |
syz, C |
|
|
278 |
1988d |
2007d
|
14/26 |
1798d |
7fac7e32f3a8
Translate syserror when validating partial IO errors
|
|
kvm: panic: Watchdog goroutine is stuck (4)
|
-1 |
|
|
|
18 |
1826d |
1884d
|
14/26 |
1798d |
14d6cb4436f1
platform/kvm: fix a race condition in vCPU.unlock()
|
|
panic: runtime error: slice bounds out of range [40:LINE]
|
2 |
|
|
|
3 |
1852d |
1855d
|
14/26 |
1798d |
6d0b40b1d159
[op] Make PacketBuffer Clone() do a deeper copy.
|
|
Invalid request partialResult in sendto (2)
|
-1 |
syz, C |
|
|
10 |
1834d |
1909d
|
14/26 |
1798d |
e5fe488b2273
Wake up Writers when tcp socket is shutdown for writes.
|
|
kvm: panic: Sentry detected stuck tasks (2)
|
-1 |
syz, C |
|
|
66 |
1805d |
1968d
|
14/26 |
1798d |
1947c873423c
Fix deadlock in /proc/[pid]/fd/[num]
|
|
panic: Sentry detected stuck tasks (12)
|
2 |
|
|
|
2 |
1807d |
1807d
|
14/26 |
1806d |
51b96514cd93
Limit most file mmaps to the range of an int64.
|
|
DATA RACE in msgqueue.(*Queue).pop
|
-1 |
syz, C |
|
|
2 |
1832d |
1832d
|
14/26 |
1808d |
d6c99694bcb9
Fix race on msgrcv(MSG_COPY).
|
|
panic: Sentry detected stuck tasks (11)
|
2 |
syz, C |
|
|
31 |
1823d |
1950d
|
14/26 |
1820d |
9149b2cefdb5
unix: avoid taking two endpoint locks
|
|
panic: runtime error: makeslice: len out of range (3)
|
2 |
syz, C |
|
|
10 |
1822d |
1822d
|
14/26 |
1822d |
927ea16dd384
unix: handle a case when a buffer is overflowed
|
|
panic: unknown error: SIGBUS at ADDR
|
2 |
syz, C |
|
|
17 |
1824d |
1838d
|
14/26 |
1823d |
dfbcb8903ae8
[syserr] Fix SIGBUS on syserr.FromError
|
|
DATA RACE in safemem.Copy (2)
|
-1 |
syz, C |
|
|
9 |
1848d |
1848d
|
14/26 |
1838d |
6d0b40b1d159
[op] Make PacketBuffer Clone() do a deeper copy.
|
|
panic: runtime error: slice bounds out of range [2:LINE]
|
2 |
|
|
|
1 |
1865d |
1865d
|
14/26 |
1838d |
6d0b40b1d159
[op] Make PacketBuffer Clone() do a deeper copy.
|
|
DATA RACE in buffer.(*buffer).Remove
|
-1 |
syz, C |
|
|
2 |
1848d |
1848d
|
14/26 |
1838d |
6d0b40b1d159
[op] Make PacketBuffer Clone() do a deeper copy.
|
|
kvm: no output from test machine
|
-1 |
|
|
|
1107 |
1848d |
1999d
|
14/26 |
1848d |
569f605f438d
Correctly handle interruptions in blocking msgqueue syscalls.
|
|
no output from test machine (9)
|
-1 |
syz, C |
|
|
2298 |
1848d |
2003d
|
14/26 |
1848d |
569f605f438d
Correctly handle interruptions in blocking msgqueue syscalls.
|
|
panic: unable to find an index for ID: 0
|
2 |
syz, C |
|
|
1497 |
1861d |
1862d
|
14/26 |
1861d |
3d0a9300050a
Don't panic on user-controlled state in semaphore syscalls.
|
|
DATA RACE in atomic.CompareAndSwapInt32 (4)
|
-1 |
syz |
|
|
4 |
1875d |
1868d
|
14/26 |
1863d |
a89b2f005b71
Use atomics when checking for parent setgid in VFS2 tmpfs file creation.
|
|
panic: FIN segments must be the final segment in the write list.
|
2 |
|
|
|
2 |
1881d |
1881d
|
14/26 |
1877d |
1fc7a9eac2f2
Do not queue zero sized segments.
|
|
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (2)
|
-1 |
syz, C |
|
|
2532 |
1889d |
2502d
|
14/26 |
1889d |
d703340bc04a
runsc: don't kill sandbox, let it stop properly
|
|
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup (2)
|
2 |
|
|
|
1 |
1899d |
1899d
|
14/26 |
1890d |
2e6195ffe0ad
CreateProcessGroup has to check whether a target process stil exists or not
|
|
kvm: panic: Watchdog goroutine is stuck (3)
|
-1 |
syz, C |
|
|
48 |
1905d |
1956d
|
14/26 |
1903d |
3fcbad509300
Fix lock ordering issue when enumerating cgroup tasks.
|
|
panic: Watchdog goroutine is stuck (2)
|
2 |
|
|
|
1 |
1916d |
1909d
|
14/26 |
1904d |
3fcbad509300
Fix lock ordering issue when enumerating cgroup tasks.
|
|
panic: Incrementing non-positive count ADDR on vfs.Filesystem (2)
|
2 |
|
|
|
1 |
1928d |
1927d
|
14/26 |
1926d |
af229f46a149
Fix cgroupfs mount racing with unmount.
|
|
panic: PullUp failed
|
2 |
syz, C |
|
|
615 |
1931d |
1932d
|
14/26 |
1931d |
436148d68a50
Fix panic on consume in a mixed push/consume case
|
|
panic: Incrementing non-positive count ADDR on vfs.Filesystem
|
2 |
syz, C |
|
|
2 |
1949d |
1949d
|
14/26 |
1931d |
78ae3db1a39c
Fix cgroup hierarchy registration.
|
|
DATA RACE in cgroupfs.FilesystemType.GetFilesystem
|
-1 |
syz, C |
|
|
1 |
1949d |
1942d
|
14/26 |
1931d |
78ae3db1a39c
Fix cgroup hierarchy registration.
|
|
panic: Sentry detected stuck tasks (10)
|
2 |
syz, C |
|
|
264 |
1957d |
2009d
|
14/26 |
1957d |
b0333d33a206
Optimize safemem.Zero
|
|
kvm: panic: Watchdog goroutine is stuck (2)
|
-1 |
|
|
|
110 |
1963d |
1980d
|
14/26 |
1963d |
f4f6ce337aa8
Don't grab TaskSet mu recursively when reading task state.
|
|
panic: Watchdog goroutine is stuck
|
2 |
syz, C |
|
|
1831 |
1964d |
2262d
|
14/26 |
1963d |
f4f6ce337aa8
Don't grab TaskSet mu recursively when reading task state.
|
|
panic: makechan: size out of range
|
2 |
syz, C |
|
|
183 |
1966d |
1970d
|
14/26 |
1966d |
dc8f6c691474
Move maxListenBacklog check to sentry
|
|
fatal error: unexpected signal during runtime execution
|
-1 |
syz |
|
|
272 |
2034d |
2723d
|
14/26 |
1966d |
eb9b8e53a3ef
platform/kvm/x86: restore mxcsr when switching from guest to sentry
|
|
kvm: panic: Watchdog goroutine is stuck
|
-1 |
|
|
|
240 |
1982d |
1992d
|
14/26 |
1981d |
2f3dac78ca9a
kvm: prefault a floating point state before restoring it
|
|
Invalid request partialResult in write (2)
|
-1 |
syz, C |
|
|
11628 |
1984d |
2049d
|
14/26 |
1983d |
7fac7e32f3a8
Translate syserror when validating partial IO errors
|
|
kvm: panic: Sentry detected stuck tasks
|
-1 |
syz, C |
|
|
152 |
1983d |
1999d
|
14/26 |
1983d |
2f3dac78ca9a
kvm: prefault a floating point state before restoring it
|
|
panic: Sentry detected stuck tasks (9)
|
2 |
|
|
|
9 |
2009d |
2010d
|
14/26 |
2009d |
38c42bbf4ad2
Remove deadlock in raw.endpoint caused by recursive read locking
|
|
panic: Sentry detected stuck tasks (8)
|
2 |
syz, C |
|
|
64 |
2010d |
2012d
|
14/26 |
2010d |
f5692f7dcc48
Kernfs should not try to rename a file to itself.
|
|
no output from test machine (8)
|
-1 |
syz, C |
|
|
15268 |
2011d |
2114d
|
14/26 |
2011d |
acd516cfe292
Add YAMA security module restrictions on ptrace(2).
|
|
panic: running on goroutine 582 (task goroutine for kernel.Task ADDR is 400)
|
2 |
syz, C |
|
|
1 |
2015d |
2015d
|
14/26 |
2011d |
6e000d3424c0
Use async task context for async IO.
|
|
panic: unknown error *tcpip.ErrMalformedHeader
|
2 |
syz, C |
|
|
5 |
2027d |
2020d
|
14/26 |
2011d |
c39284f45738
Let sentry understand tcpip.ErrMalformedHeader
|
|
panic: Sentry detected stuck tasks (7)
|
2 |
syz |
|
|
2567 |
2012d |
2043d
|
14/26 |
2012d |
c5a4e100085c
unix: sendmmsg and recvmsg have to cap a number of message to UIO_MAXIOV
|
|
panic: wd changed: "/tmp" -> "(unreachable)/"
|
2 |
syz |
|
|
2534 |
2024d |
2105d
|
14/26 |
2024d |
97a36d169698
Don't allow to umount the namespace root mount
|
|
Invalid request partialResult in sendto
|
-1 |
syz, C |
|
|
236 |
2033d |
2036d
|
14/26 |
2025d |
d6d169320cd4
Add ETIMEDOUT to partial result list
|
|
FATAL ERROR: executing processes for container: executing command "/syz-fuzzer -executor=/syz-executor -name=vm-1 -arch=
|
-1 |
|
|
|
4 |
2031d |
2033d
|
14/26 |
2025d |
120c8e346871
Replace TaskFromContext(ctx).Kernel() with KernelFromContext(ctx)
|
|
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup
|
2 |
syz, C |
|
|
12 |
2042d |
2042d
|
14/26 |
2025d |
fe4f4789601d
kernel: reparentLocked has to update children maps of old and new parents
|
|
panic: Child "." for parent Dentry &{vfsd:{mu:{m:{Mutex:{state:LINE sema:LINE}}} dead:false mounts:LINE impl:ADDR} refs:
|
2 |
syz, C |
|
|
13 |
2025d |
2035d
|
14/26 |
2025d |
09afd6832689
[vfs] Handle `.` and `..` as last path component names in kernfs Rename.
|
|
panic: Start ADDR + offset ADDR overflows?
|
2 |
syz, C |
|
|
19 |
2050d |
2356d
|
14/26 |
2025d |
bf4968e17d7d
exec: don't panic if an elf file is malformed
|
|
panic: Decrementing non-positive ref count ADDR, owned by vfs.FileDescription
|
2 |
syz, C |
|
|
12 |
2056d |
2051d
|
14/26 |
2039d |
abdff887483f
Do not send SCM Rights more than once when message is truncated.
|
|
DATA RACE in safemem.Copy
|
-1 |
syz, C |
|
|
4 |
2044d |
2044d
|
14/26 |
2040d |
76da673a0dda
Do not modify IGMP packets when verifying checksum
|
|
panic: Sentry detected stuck tasks (6)
|
2 |
syz |
|
|
714 |
2044d |
2096d
|
14/26 |
2044d |
e57ebcd37a7b
Simplify the pipe implementation.
|
|
panic: IPv6 payload too large: NUM, must be <= NUM
|
2 |
syz, C |
|
|
46 |
2052d |
2084d
|
14/26 |
2049d |
ec9e263f213c
Correctly return EMSGSIZE when packet is too big in raw socket.
|
|
panic: buffer too long by 8 bytes
|
2 |
syz, C |
|
|
12 |
2064d |
2082d
|
14/26 |
2060d |
ce7a4440cae8
Fix panic when parsing SO_TIMESTAMP cmsg
|
|
panic: runtime error: invalid memory address or nil pointer dereference (5)
|
2 |
syz |
|
|
62 |
2061d |
2105d
|
14/26 |
2060d |
2a200811d4c9
fs/fuse: check that a task has a specified file descriptor
|
|
panic: invalid pipe flags: must be readable, writable, or both
|
2 |
|
|
|
1 |
2070d |
2070d
|
14/26 |
2060d |
807a080d9574
Add missing error checks for FileDescription.Init.
|
|
DATA RACE in stack.(*NIC).DeliverNetworkPacket
|
-1 |
|
|
|
4 |
2084d |
2093d
|
14/26 |
2067d |
25ebddbddfbc
Fix a data race in packetEPs
|
|
panic: runtime error: integer divide by zero
|
2 |
syz, C |
|
|
116 |
2184d |
2210d
|
14/26 |
2067d |
b3ff31d041c9
fix panic when calling SO_ORIGINAL_DST without initializing iptables
|
|
panic: error when reading RouterAlert option's data bytes: EOF
|
2 |
syz, C |
|
|
35 |
2082d |
2084d
|
14/26 |
2067d |
c55e5bda4d45
Validate router alert's data length
|
|
DATA RACE in raw.(*endpoint).HandlePacket
|
-1 |
syz, C |
|
|
5 |
2080d |
2080d
|
14/26 |
2067d |
981faa2c1229
RLock Endpoint in raw.Endpoint.HandlePacket
|
|
panic: header.ScopeForIPv6Address(172.20.20.170): bad address
|
2 |
syz, C |
|
|
48 |
2089d |
2095d
|
14/26 |
2067d |
b15acae9a6e2
Fix error code for connect in raw sockets.
|
|
panic: close of nil channel (2)
|
2 |
|
|
|
1 |
2091d |
2090d
|
14/26 |
2067d |
f6407de6bafb
[syzkaller] Avoid AIOContext from resurrecting after being marked dead.
|
|
panic: Unknown syscall 165 error: strconv.ParseInt: parsing "ADDR": invalid syntax
|
2 |
syz, C |
|
|
51 |
2090d |
2095d
|
14/26 |
2067d |
9c198e5df421
Fix error handling on fusefs mount.
|
|
DATA RACE in header.ICMPv6Checksum
|
-1 |
syz, C |
|
|
1 |
2082d |
2082d
|
14/26 |
2067d |
946cb909e62e
Don't modify a packet header when it can be used by other endpoints
|
|
panic: Unknown syscall 8 error: EOF
|
2 |
syz |
|
|
22 |
2078d |
2085d
|
14/26 |
2067d |
1ea241e4cc95
Fix seek on /proc/pid/cmdline when task is zombie.
|
|
panic: Stack for running G's are skipped while panicking.
|
2 |
syz, C |
|
|
2426 |
2367d |
2620d
|
14/26 |
2069d |
ab7ecdd66d2a
watchdog: print panic error message before other messages
|
|
panic: Sentry detected stuck tasks (5)
|
2 |
syz |
|
|
83 |
2096d |
2109d
|
0/26 |
2096d |
79e2364933bb
Fix deadlock in UDP handleControlPacket path.
|
|
DATA RACE in log.GoogleEmitter.Emit
|
-1 |
syz, C |
|
|
34 |
2107d |
2113d
|
0/26 |
2106d |
9c553f2d4e4b
Remove racy stringification of socket fds from /proc/net/*.
|
|
panic: runtime error: slice bounds out of range [255:LINE]
|
2 |
syz, C |
|
|
5 |
2111d |
2111d
|
0/26 |
2107d |
49adf36ed7d3
Fix possible panic due to bad data.
|
|
panic: cacheLocked called on a dentry which has already been destroyed: &{{{{0 0}} true 0 ADDR} -1 ADDR 1 ADDR NUM false
|
2 |
|
|
|
1 |
2112d |
2112d
|
0/26 |
2107d |
74bc6e56ccd9
[vfs] kernfs: Do not panic if destroyed dentry is cached.
|
|
gvisor boot error: FATAL ERROR: running container: creating container: open /sys/fs/cgroup/devices/ci-gvisor-kvm-proxy-overlay-sandbox-test
|
-1 |
|
|
|
1 |
2109d |
2109d
|
0/26 |
2108d |
764504c38fb5
runsc: check whether cgroup exists or not for each controller
|
|
panic: Sentry detected stuck tasks (4)
|
2 |
syz, C |
|
|
5 |
2109d |
2110d
|
0/26 |
2109d |
05d2a26f7a86
Fix possible deadlock in UDP.Write().
|
|
panic: Incrementing non-positive count ADDR on tmpfs.inode
|
2 |
syz |
|
|
2 |
2113d |
2113d
|
0/26 |
2109d |
10ba578c0182
tmpfs: make sure that a dentry will not be destroyed before the open() call
|
|
panic: Sentry detected stuck tasks (3)
|
2 |
syz, C |
|
|
180 |
2110d |
2114d
|
0/26 |
2110d |
267560d159b2
Reset watchdog timer between sendfile() iterations.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (4)
|
2 |
syz, C |
|
|
4 |
2122d |
2140d
|
0/26 |
2114d |
4e389c785779
Check for nil in kernel.FSContext functions.
|
|
panic: Decrementing non-positive ref count ADDR, owned by *mm.SpecialMappable
|
2 |
|
|
|
56 |
2114d |
2144d
|
0/26 |
2114d |
dcc1b71f1ba4
Fix reference counting on kcov mappings.
|
|
panic: Sentry detected stuck tasks (2)
|
2 |
syz, C |
|
|
951 |
2114d |
2155d
|
0/26 |
2114d |
db36d948fa63
TCP Receive window advertisement fixes.
|
|
no output from test machine (7)
|
-1 |
syz, C |
|
|
184 |
2114d |
2141d
|
0/26 |
2114d |
34a6e9576a96
loader/elf: validate file offset
|
|
panic: runtime error: makeslice: len out of range (2)
|
2 |
syz, C |
|
|
5 |
2114d |
2142d
|
0/26 |
2114d |
cd108432a50e
splice: return EINVAL is len is negative
|
|
panic: Incrementing non-positive ref count ADDR owned by *mm.SpecialMappable
|
2 |
|
|
|
45 |
2116d |
2144d
|
0/26 |
2114d |
dcc1b71f1ba4
Fix reference counting on kcov mappings.
|
|
panic: Child "" for parent Dentry &{vfsd:{mu:{Mutex:{state:LINE sema:LINE}} dead:false mounts:LINE impl:ADDR} DentryRefs
|
2 |
syz, C |
|
|
3 |
2119d |
2128d
|
0/26 |
2114d |
1321f837bd9f
[vfs2] Refactor kernfs checkCreateLocked.
|
|
panic: unknown error: EOF
|
2 |
syz, C |
|
|
68 |
2142d |
2145d
|
0/26 |
2141d |
c002fc36f9bb
sockets: ignore io.EOF from view.ReadAt
|
|
no output from test machine (6)
|
-1 |
syz |
|
|
1873 |
2149d |
2155d
|
0/26 |
2149d |
76a09f0cf599
syscalls: Don't leak a file on the error path
|
|
no output from test machine (5)
|
-1 |
syz, C |
|
|
86414 |
2155d |
2270d
|
0/26 |
2155d |
de85b045d42f
kvm/x86: handle a case when interrupts are enabled in the kernel space
|
|
panic: Sentry detected stuck tasks
|
2 |
syz, C |
|
|
506 |
2155d |
2175d
|
0/26 |
2155d |
de85b045d42f
kvm/x86: handle a case when interrupts are enabled in the kernel space
|
|
DATA RACE in tcp.(*endpoint).bindLocked
|
-1 |
syz |
|
|
2 |
2186d |
2186d
|
0/26 |
2179d |
38cdb0579b69
Fix data race in tcp.GetSockOpt.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (3)
|
2 |
syz, C |
|
|
20051 |
2188d |
2723d
|
0/26 |
2179d |
b3ff31d041c9
fix panic when calling SO_ORIGINAL_DST without initializing iptables
|
|
DATA RACE in transport.(*connectionedEndpoint).Connect.func1
|
-1 |
syz |
|
|
21 |
2262d |
2269d
|
0/26 |
2261d |
70c45e09cfd1
socket/unix: (*connectionedEndpoint).State() has to take the endpoint lock
|
|
panic: Sentry detected 1 stuck task(s):
|
2 |
syz, C |
|
|
6204 |
2272d |
2359d
|
0/26 |
2269d |
4950ccde75b3
Fix write hang bug found by syzkaller.
|
|
DATA RACE in atomic.LoadInt64
|
-1 |
|
|
|
1 |
2277d |
2277d
|
0/26 |
2275d |
7da69fe9719b
Fix data race on f.offset.
|
|
DATA RACE in fs.(*File).offsetForAppend
|
-1 |
syz |
|
|
2 |
2277d |
2277d
|
0/26 |
2275d |
7da69fe9719b
Fix data race on f.offset.
|
|
DATA RACE in kernel.(*Task).accountTaskGoroutineEnter
|
-1 |
syz |
|
|
2 |
2300d |
2300d
|
0/26 |
2298d |
8dd1d5b75a95
Don't call kernel.Task.Block() from netstack.SocketOperations.Write().
|
|
panic: D0415 01:LINE.ADDR 8857 transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 95}
|
2 |
|
|
|
1 |
2326d |
2326d
|
0/26 |
2310d |
2dd6384de89a
Fix cleanup around socketpair() failure to copy out FDs.
|
|
panic: close of nil channel
|
2 |
syz |
|
|
6 |
2319d |
2324d
|
0/26 |
2317d |
37f863f62813
tcp: handle listen after shutdown properly
|
|
panic: D0414 08:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2}
|
2 |
|
|
|
1 |
2327d |
2327d
|
0/26 |
2325d |
2dd6384de89a
Fix cleanup around socketpair() failure to copy out FDs.
|
|
panic: D0414 11:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 95}
|
2 |
|
|
|
1 |
2327d |
2327d
|
0/26 |
2325d |
2dd6384de89a
Fix cleanup around socketpair() failure to copy out FDs.
|
|
panic: D0414 14:LINE.ADDR NUM task_exit.go:LINE] [ 98] Transitioning from exit state TaskExitNone to TaskExitInitiate
|
2 |
|
|
|
1 |
2327d |
2327d
|
0/26 |
2325d |
2dd6384de89a
Fix cleanup around socketpair() failure to copy out FDs.
|
|
panic: D0414 16:LINE.ADDR 5236 transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2}
|
2 |
|
|
|
1 |
2327d |
2327d
|
0/26 |
2325d |
2dd6384de89a
Fix cleanup around socketpair() failure to copy out FDs.
|
|
panic: D0414 13:LINE.ADDR NUM transport_flipcall.go:LINE] recv [channel @ADDR] Rlerror{Error: 2}
|
2 |
|
|
|
1 |
2327d |
2327d
|
0/26 |
2325d |
2dd6384de89a
Fix cleanup around socketpair() failure to copy out FDs.
|
|
panic: interface conversion: context.Context is kernel.taskAsyncContext, not *kernel.Task
|
2 |
syz |
|
|
16 |
2329d |
2345d
|
0/26 |
2329d |
c9195349c9ac
Replace type assertion with TaskFromContext.
|
|
panic: runtime error: makeslice: len out of range
|
2 |
syz |
|
|
49 |
2331d |
2353d
|
0/26 |
2331d |
a10389e783aa
splice: cap splice calls to MAX_RW_COUNT
|
|
DATA RACE in tcp.(*endpoint).Readiness
|
-1 |
syz |
|
|
2 |
2351d |
2351d
|
0/26 |
2345d |
d04adebaab86
Fix data-race in endpoint.Readiness
|
|
DATA RACE in netstack.(*SocketOperations).SetSockOpt
|
-1 |
syz |
|
|
2 |
2350d |
2350d
|
0/26 |
2348d |
369cf38bd718
Fix data race in SetSockOpt.
|
|
DATA RACE in tcp.(*endpoint).SetSockOpt
|
-1 |
syz |
|
|
26 |
2353d |
2373d
|
0/26 |
2348d |
e9e399c25d4f
Remove workMu from tcpip.Endpoint.
|
|
DATA RACE in udp.(*endpoint).SetSockOptBool
|
-1 |
syz |
|
|
2 |
2367d |
2360d
|
0/26 |
2351d |
c15b8515eb4a
Fix datarace on TransportEndpointInfo.ID and clean up semantics.
|
|
no output from test machine (3)
|
-1 |
syz, C |
|
|
11663 |
2354d |
2443d
|
0/26 |
2354d |
b55f0e5d40c1
fdtable: don't try to zap fdtable entry if close is called for non-existing fd
|
|
panic: Watchdog goroutine is stuck:
|
2 |
|
|
|
12 |
2355d |
2361d
|
0/26 |
2355d |
1c0535297067
Fix oom_score_adj.
|
|
panic: Sentry detected 4 stuck task(s):
|
2 |
|
|
|
7 |
2355d |
2365d
|
0/26 |
2355d |
b0f2c3e7646d
Fix infinite loop in semaphore.sem.wakeWaiters().
|
|
fatal error: out of memory (3)
|
-1 |
syz |
|
|
3 |
2360d |
2360d
|
0/26 |
2360d |
81675b850e27
Fix memory leak in danglingEndpoints.
|
|
fatal error: too many address space collisions for -race mode
|
-1 |
syz |
|
|
3 |
2360d |
2360d
|
0/26 |
2360d |
81675b850e27
Fix memory leak in danglingEndpoints.
|
|
fatal error: concurrent map iteration and map write (2)
|
-1 |
syz |
|
|
1 |
2371d |
2371d
|
0/26 |
2362d |
62bd3ca8a375
Take write lock when removing xattr
|
|
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).ListXattr
|
-1 |
|
|
|
1 |
2371d |
2371d
|
0/26 |
2362d |
62bd3ca8a375
Take write lock when removing xattr
|
|
lost connection to test machine (4)
|
-1 |
|
|
|
1025286 |
2362d |
2534d
|
0/26 |
2362d |
6b4d36e32532
Hide /dev/net/tun when using hostinet.
|
|
DATA RACE in udp.(*endpoint).Connect
|
-1 |
syz |
|
|
10 |
2367d |
2374d
|
0/26 |
2362d |
c15b8515eb4a
Fix datarace on TransportEndpointInfo.ID and clean up semantics.
|
|
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).RemoveXattr
|
-1 |
syz |
|
|
2 |
2371d |
2371d
|
0/26 |
2362d |
62bd3ca8a375
Take write lock when removing xattr
|
|
DATA RACE in tcp.(*endpoint).windowCrossedACKThreshold
|
-1 |
syz |
|
|
10 |
2373d |
2374d
|
0/26 |
2362d |
33101752501f
Fix data-race when reading/writing e.amss.
|
|
DATA RACE in stack.(*TransportEndpointInfo).AddrNetProto
|
-1 |
syz |
|
|
148 |
2367d |
2374d
|
0/26 |
2362d |
c15b8515eb4a
Fix datarace on TransportEndpointInfo.ID and clean up semantics.
|
|
fatal error: concurrent map read and map write (2)
|
-1 |
syz |
|
|
2 |
2371d |
2371d
|
0/26 |
2362d |
62bd3ca8a375
Take write lock when removing xattr
|
|
panic: runtime error: index out of range [1] with length 0
|
2 |
syz, C |
|
|
1518 |
2367d |
2374d
|
0/26 |
2362d |
43abb24657e7
Fix panic caused by invalid address for Bind in packet sockets.
|
|
DATA RACE in netstack.(*SocketOperations).fetchReadView
|
-1 |
syz |
|
|
12 |
2367d |
2374d
|
0/26 |
2362d |
42fb7d349137
socket: take readMu to access readView
|
|
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).GetXattr
|
-1 |
syz |
|
|
3 |
2371d |
2371d
|
0/26 |
2362d |
62bd3ca8a375
Take write lock when removing xattr
|
|
DATA RACE in fs.(*UnstableAttr).SetOwner (2)
|
-1 |
syz |
|
|
3 |
2407d |
2400d
|
0/26 |
2374d |
115898e368e4
Prevent DATA RACE in UnstableAttr.
|
|
DATA RACE in fs.mayDelete
|
-1 |
|
|
|
1 |
2403d |
2396d
|
0/26 |
2374d |
fba479b3c786
Fix DATA RACE in fs.MayDelete.
|
|
DATA RACE in fs.(*Dirent).IncRef
|
-1 |
syz |
|
|
1 |
2400d |
2393d
|
0/26 |
2374d |
53504e29ca27
Fix mount refcount issue.
|
|
panic: Incrementing non-positive ref count (4)
|
2 |
syz, C |
|
|
5 |
2391d |
2393d
|
0/26 |
2374d |
53504e29ca27
Fix mount refcount issue.
|
|
panic: munmap(ADDR, NUM)) failed: function not implemented (3)
|
2 |
|
|
|
1 |
2444d |
2437d
|
0/26 |
2374d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
panic: munmap(0, ADDR)) failed: function not implemented (3)
|
2 |
|
|
|
1 |
2429d |
2422d
|
0/26 |
2374d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
panic: wait failed: the process NUM:NUM exited: 1f (err <nil>) (2)
|
2 |
|
|
|
17 |
2427d |
2449d
|
0/26 |
2374d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
panic: wait failed: the process 9793:LINE exited: 1f (err <nil>)
|
2 |
syz, C |
|
|
1 |
2445d |
2438d
|
0/26 |
2374d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
panic: wait failed: the process 4877:LINE exited: 1f (err <nil>)
|
2 |
|
|
|
1 |
2444d |
2437d
|
0/26 |
2374d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
panic: runtime error: slice bounds out of range [:LINE] with capacity 16
|
2 |
syz |
|
|
42 |
2425d |
2437d
|
0/26 |
2374d |
b3ae8a62cfdf
Fix slice bounds out of range panic in parsing socket control message.
|
|
panic: wait failed: the process NUM:LINE exited: 1f (err <nil>) (4)
|
2 |
|
|
|
2 |
2437d |
2431d
|
0/26 |
2374d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
DATA RACE in refs.(*WeakRef).init (2)
|
-1 |
|
|
|
1 |
2467d |
2460d
|
0/26 |
2395d |
3db317390b5c
Remove epoll entry from map when dropping it.
|
|
DATA RACE in refs.(*AtomicRefCount).DecRefWithDestructor
|
-1 |
|
|
|
1 |
2414d |
2407d
|
0/26 |
2395d |
3db317390b5c
Remove epoll entry from map when dropping it.
|
|
panic: interface conversion: refs.RefCounter is *fs.File, not *fs.Dirent
|
2 |
|
|
|
3 |
2408d |
2418d
|
0/26 |
2395d |
3db317390b5c
Remove epoll entry from map when dropping it.
|
|
Invalid request partialResult in splice (2)
|
-1 |
syz |
|
|
134 |
2403d |
2440d
|
0/26 |
2401d |
f263801a74d4
fs/splice: don't report partial errors for special files
|
|
fatal error: out of memory (2)
|
-1 |
|
|
|
1 |
2417d |
2410d
|
0/26 |
2401d |
4cb55a7a3b09
Prevent arbitrary size allocation when sending UDS messages.
|
|
panic: invalid allocation length: 0x0 (3)
|
2 |
syz |
|
|
12 |
2404d |
2404d
|
0/26 |
2401d |
ede8dfab3760
Enforce splice offset limits
|
|
DATA RACE in fs.Rename (3)
|
-1 |
|
|
|
1 |
2415d |
2415d
|
0/26 |
2414d |
f1a5178c589d
Fix data race in MountNamespace.resolve.
|
|
DATA RACE in tty.(*queue).readableSize
|
-1 |
syz |
|
|
2 |
2416d |
2416d
|
0/26 |
2414d |
80d0f9304484
Fix data race in tty.queue.readableSize.
|
|
panic: Incrementing non-positive ref count (3)
|
2 |
|
|
|
2 |
2435d |
2445d
|
0/26 |
2424d |
6410387ff9b4
Cleanup Shm reference handling
|
|
panic: munmap(ADDR, 1000)) failed: function not implemented (3)
|
2 |
|
|
|
2 |
2461d |
2462d
|
0/26 |
2424d |
17c18241cdeb
platform/syscall: use syscall + int3 to execute a system call in a stub process
|
|
DATA RACE in fs.(*UnstableAttr).SetOwner
|
-1 |
|
|
|
1 |
2444d |
2444d
|
0/26 |
2443d |
bb00438f36eb
Make masterInodeOperations.Truncate take a pointer receiver.
|
|
DATA RACE in fsutil.(*InodeSimpleAttributes).SetPermissions
|
-1 |
syz |
|
|
3 |
2444d |
2444d
|
0/26 |
2443d |
bb00438f36eb
Make masterInodeOperations.Truncate take a pointer receiver.
|
|
no output from test machine (2)
|
-1 |
syz, C |
|
|
6325 |
2450d |
2566d
|
0/26 |
2450d |
378d6c1f3697
unix: allow to bind unix sockets only to AF_UNIX addresses
|
|
DATA RACE in fs.Rename (2)
|
-1 |
syz, C |
|
|
433 |
2701d |
2723d
|
0/26 |
2457d |
89cc8eef9ba6
DATA RACE in fs.(*Dirent).fullName
|
|
Invalid request partialResult in sendfile (2)
|
-1 |
syz, C |
|
|
1341 |
2523d |
2723d
|
0/26 |
2520d |
db218fdfcf16
Don't report partialResult errors from sendfile
|
|
Invalid request partialResult in splice
|
-1 |
syz, C |
|
|
206 |
2523d |
2572d
|
0/26 |
2523d |
7a234f736fe0
splice: try another fallback option only if the previous one isn't supported
|
|
lost connection to test machine (3)
|
-1 |
syz, C |
|
|
30758 |
2573d |
2723d
|
0/26 |
2570d |
af90e68623c7
netlink: return an error in nlmsgerr
|
|
panic: node.Readdir returned offset -ADDR less than input offset ADDR
|
2 |
syz, C |
|
|
26 |
2640d |
2723d
|
0/26 |
2570d |
ab6774cebf5c
gvisor/fs: getdents returns 0 if offset is equal to FileMaxOffset
|
|
DATA RACE in ramfs.(*dirFileOperations).Readdir
|
-1 |
syz |
|
|
1 |
2772d |
2723d
|
0/26 |
2571d |
09cf3b40a899
Fix data race in InodeSimpleAttributes.Unstable.
|
|
no output from test machine
|
-1 |
syz, C |
|
|
27191 |
2573d |
2723d
|
0/26 |
2573d |
af90e68623c7
netlink: return an error in nlmsgerr
|
|
DATA RACE in kernel.(*Kernel).EmitUnimplementedEvent
|
-1 |
syz |
|
|
3 |
2585d |
2586d
|
0/26 |
2585d |
cf2b2d97d512
Initialize kernel.unimplementedSyscallEmitter with a sync.Once.
|
|
DATA RACE in atomic.AddInt32
|
-1 |
|
|
|
1 |
2599d |
2599d
|
0/26 |
2597d |
542fbd01a7ed
Fix race in FDTable.GetFDs().
|
|
panic: Unknown syscall 85 error: link should be resolved via Readlink()
|
2 |
syz |
|
|
64 |
2608d |
2605d
|
0/26 |
2604d |
6db3f8d54c02
Don't mask errors in createAt loop.
|
|
panic: Unknown syscall 2 error: link should be resolved via Readlink()
|
2 |
syz |
|
|
16 |
2609d |
2605d
|
0/26 |
2604d |
6db3f8d54c02
Don't mask errors in createAt loop.
|
|
panic: Unknown syscall 257 error: link should be resolved via Readlink()
|
2 |
syz |
|
|
14 |
2608d |
2612d
|
0/26 |
2606d |
6db3f8d54c02
Don't mask errors in createAt loop.
|
|
panic: Incrementing non-positive ref count (2)
|
2 |
syz, C |
|
|
183 |
2612d |
2620d
|
0/26 |
2612d |
4f2f44320f9b
Simplify (and fix) refcounts in createAt.
|
|
DATA RACE in atomic.AddInt64
|
-1 |
|
|
|
1 |
2641d |
2634d
|
0/26 |
2617d |
8ab0848c70fc
gvisor/fs: don't update file.offset for sockets, pipes, etc
|
|
DATA RACE in fs.(*lockedReader).Read
|
-1 |
|
|
|
1 |
2639d |
2632d
|
0/26 |
2620d |
8ab0848c70fc
gvisor/fs: don't update file.offset for sockets, pipes, etc
|
|
DATA RACE in atomic.StoreInt64
|
-1 |
syz |
|
|
2 |
2627d |
2632d
|
0/26 |
2620d |
8ab0848c70fc
gvisor/fs: don't update file.offset for sockets, pipes, etc
|
|
DATA RACE in mm.(*MemoryManager).Brk
|
-1 |
syz |
|
|
14 |
2660d |
2676d
|
0/26 |
2659d |
14f0e7618e28
Ensure all uses of MM.brk occur under MM.mappingMu in MM.Brk().
|
|
panic: hashed child "stat\t\xe9\xdc\xdf\x02\x02\x98\xcc\xf3<\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q\nI\xf81U\ro}\xe
|
2 |
syz, C |
|
|
7 |
2703d |
2696d
|
0/26 |
2677d |
2df64cd6d2c8
createAt should return all errors from FindInode except ENOENT.
|
|
DATA RACE in fs.(*Dirent).fullName
|
-1 |
|
|
|
3 |
2706d |
2723d
|
0/26 |
2696d |
89cc8eef9ba6
DATA RACE in fs.(*Dirent).fullName
|
|
panic: hashed over a positive child "file0"
|
2 |
|
|
|
1 |
2705d |
2705d
|
0/26 |
2702d |
61d8c361c663
Don't release d.mu in checks for child-existence.
|
|
DATA RACE in tty.(*lineDiscipline).masterReadiness
|
-1 |
|
|
|
1 |
2704d |
2704d
|
0/26 |
2703d |
c79e81bd27cd
Addresses data race in tty implementation.
|
|
DATA RACE in tty.(*queue).WriteFromBlocks
|
-1 |
syz |
|
|
7 |
2704d |
2707d
|
0/26 |
2703d |
c79e81bd27cd
Addresses data race in tty implementation.
|
|
panic: runtime error: index out of range (2)
|
2 |
syz, C |
|
|
7191 |
2703d |
2709d
|
0/26 |
2703d |
82529becaee6
Fix index out of bounds in tty implementation.
|
|
DATA RACE in atomic.CompareAndSwapInt32 (2)
|
-1 |
syz |
|
|
2 |
2705d |
2705d
|
0/26 |
2703d |
d14a7de65865
Fix more data races in shm debug messages.
|
|
DATA RACE in atomic.CompareAndSwapInt32
|
-1 |
syz, C |
|
|
9 |
2710d |
2723d
|
0/26 |
2706d |
cea1dd7d21b9
Remove racy access to shm fields.
|
|
DATA RACE in netlink.(*Socket).SetSockOpt
|
-1 |
syz |
|
|
2 |
2722d |
2722d
|
0/26 |
2706d |
7b33df68450b
Fix data race in netlink send buffer size
|
|
DATA RACE in dev.(*randomDevice).GetFile
|
-1 |
|
|
|
1 |
2711d |
2711d
|
0/26 |
2706d |
645af7cdd8a1
Dev device methods should take pointer receiver.
|
|
DATA RACE in fsutil.(*InodeSimpleAttributes).UnstableAttr
|
-1 |
syz |
|
|
8 |
2771d |
2774d
|
0/26 |
2768d |
09cf3b40a899
Fix data race in InodeSimpleAttributes.Unstable.
|
|
panic: invalid allocation length: 0x0 (2)
|
2 |
syz, C |
|
|
4 |
2810d |
2811d
|
0/26 |
2809d |
3b3f02627870
Truncate ar before calling mm.breakCopyOnWriteLocked().
|
|
gvisor boot error (3)
|
-1 |
|
|
|
4 |
2814d |
2816d
|
0/26 |
2814d |
1775a0e11e56
container.Destroy should clean up container metadata even if other cleanups fail
|
|
DATA RACE in shm.(*Registry).findByKey
|
-1 |
syz, C |
|
|
47 |
2921d |
2987d
|
0/26 |
2816d |
f93c288dd708
Fix a data race on Shm.key.
|
|
gvisor test error (2)
|
-1 |
|
|
|
2778 |
2832d |
2967d
|
0/26 |
2816d |
24c1158b9c21
Add "trace signal" option
|
|
panic: invalid type: int
|
2 |
syz, C |
|
|
559 |
2835d |
2936d
|
0/26 |
2816d |
5560615c531b
Return an int32 for netlink SO_RCVBUF
|
|
panic: ptrace set regs failed: input/output error
|
2 |
syz, C |
|
|
712 |
2821d |
2919d
|
0/26 |
2816d |
99d595869332
Validate FS_BASE in Task.Clone
|
|
Invalid request partialResult in sendfile
|
-1 |
syz, C |
|
|
7399 |
2821d |
2975d
|
0/26 |
2816d |
ffcbda0c8bd7
Partial writes should loop in rpcinet.
|
|
panic: Decrementing non-positive ref count
|
2 |
syz, C |
|
|
4804 |
2911d |
2989d
|
0/26 |
2816d |
0e277a39c8b6
Prevent premature destruction of shm segments.
|
|
panic: ptrace status unexpected: got 9, wanted stopped (2)
|
2 |
syz |
|
|
78 |
2822d |
2974d
|
0/26 |
2816d |
e7191f058f55
Use TRAP to simplify vsyscall emulation.
|
|
panic: invalid allocation length: 0x0
|
2 |
syz, C |
|
|
223 |
2822d |
2989d
|
0/26 |
2816d |
46603b569c3a
Fix panic on creation of zero-len shm segments.
|
|
DATA RACE in fs.(*Dirent).getDotAttrs
|
-1 |
|
|
|
1 |
2929d |
2929d
|
0/26 |
2816d |
54dd0d0dc5ee
Fix data race caused by unlocked call of Dirent.descendantOf.
|
|
panic: runtime error: invalid memory address or nil pointer dereference (2)
|
2 |
syz, C |
|
|
4493 |
2911d |
2931d
|
0/26 |
2874d |
beac59b37a8b
Fix panic if FIOASYNC callback is registered and triggered without target
|
|
gvisor boot error
|
-1 |
|
|
|
1911 |
2892d |
2970d
|
0/26 |
2874d |
43e6aff50e23
Don't fail if Root is readonly and is not a mount point
|
|
DATA RACE in kernel.(*Task).setKUIDsUncheckedLocked
|
-1 |
syz, C |
|
|
15 |
2924d |
2982d
|
0/26 |
2874d |
f8ccfbbed487
Document more task-goroutine-owned fields in kernel.Task.
|
|
DATA RACE in fs.(*Dirent).hashChildParentSet
|
-1 |
syz |
|
|
8 |
2926d |
2929d
|
0/26 |
2874d |
8d318aac5532
fs: Hold Dirent.mu when calling Dirent.flush().
|
|
DATA RACE in waiter.(*Entry).Prev
|
-1 |
syz, C |
|
|
3992 |
2936d |
2988d
|
0/26 |
2931d |
d4939f6dc22e
TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
|
|
DATA RACE in waiter.(*Entry).Next
|
-1 |
syz, C |
|
|
2418 |
2936d |
2988d
|
0/26 |
2931d |
d4939f6dc22e
TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
|
|
fatal error: concurrent map read and map write
|
-1 |
|
|
|
66 |
2941d |
2944d
|
0/26 |
2931d |
dbbe9ec91541
Protect PCIDs with a mutex.
|
|
DATA RACE in waiter.(*Entry).SetNext
|
-1 |
syz, C |
|
|
739 |
2935d |
2988d
|
0/26 |
2931d |
d4939f6dc22e
TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
|
|
fatal error: concurrent map writes
|
-1 |
|
|
|
3 |
2941d |
2942d
|
0/26 |
2931d |
dbbe9ec91541
Protect PCIDs with a mutex.
|
|
panic: runtime error: index out of range
|
2 |
syz, C |
|
|
35 |
2948d |
2984d
|
0/26 |
2931d |
e97717e29a1b
Enforce Unix socket address length limit
|
|
DATA RACE in waiter.(*Entry).SetPrev
|
-1 |
|
|
|
70 |
2936d |
2988d
|
0/26 |
2931d |
d4939f6dc22e
TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
|
|
DATA RACE in waiter.(*Queue).Notify
|
-1 |
syz, C |
|
|
72 |
2936d |
2988d
|
0/26 |
2931d |
d4939f6dc22e
TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
|
|
DATA RACE in unix.(*connectionlessEndpoint).UnidirectionalConnect
|
-1 |
syz, C |
|
|
965 |
2942d |
2972d
|
0/26 |
2931d |
2a44362c0b99
Fix data race in unix.BoundEndpoint.UnidirectionalConnect.
|
|
panic: runtime error: invalid memory address or nil pointer dereference
|
2 |
syz, C |
|
|
20682 |
2935d |
2989d
|
0/26 |
2931d |
f93bd2cbe668
Hold t.mu while calling t.FSContext().
|
|
DATA RACE in kernel.(*Task).exitNotifyLocked
|
-1 |
syz, C |
|
|
2 |
2960d |
2960d
|
0/26 |
2942d |
c036da5dffdf
Hold TaskSet.mu in Task.Parent.
|
|
panic: invalid segment range [ADDR, ADDR)
|
2 |
syz, C |
|
|
255 |
2978d |
2989d
|
0/26 |
2963d |
06920b3d1bb6
Exit tmpfs.fileInodeOperations.Translate early if required.Start >= EOF.
|
|
DATA RACE in kernel.(*Task).Clone
|
-1 |
|
|
|
3 |
2966d |
2978d
|
0/26 |
2963d |
41aeb680b188
Inherit parent in clone(CLONE_THREAD) under TaskSet.mu.
|
|
DATA RACE in fs.(*Watch).Notify
|
-1 |
syz |
|
|
2 |
2979d |
2979d
|
0/26 |
2977d |
34af9a61741f
Fix data race on inotify.Watch.mask.
|
|
lost connection to test machine (2)
|
-1 |
syz, C |
|
|
1814 |
2978d |
2988d
|
0/26 |
2977d |
52ddb8571c46
Skip overlay on root when its readonly
|
|
DATA RACE in fs.Rename
|
-1 |
syz, C |
|
|
16 |
2978d |
2987d
|
0/26 |
2977d |
2821dfe6ce95
Hold d.parent.mu when reading d.name
|
|
panic: MountNamespace.FindInode: path is empty
|
2 |
syz, C |
|
|
3443 |
2977d |
2989d
|
0/26 |
2977d |
062a6f6ec5f4
Handle NUL-only paths in exec
|
|
panic: runtime error: slice bounds out of range
|
2 |
syz, C |
|
|
39 |
2982d |
2989d
|
0/26 |
2982d |
1ceed49ba94c
Check for invalid offset when submitting an AIO read/write request.
|
|
DATA RACE in proc.forEachMountSource
|
-1 |
syz, C |
|
|
24 |
2983d |
2988d
|
0/26 |
2982d |
f93bd2cbe668
Hold t.mu while calling t.FSContext().
|
|
DATA RACE in kernel.(*Task).Value
|
-1 |
|
|
|
1 |
2986d |
2986d
|
0/26 |
2982d |
f93bd2cbe668
Hold t.mu while calling t.FSContext().
|
|
DATA RACE in semaphore.(*Set).checkPerms
|
-1 |
syz, C |
|
|
21 |
2983d |
2987d
|
0/26 |
2983d |
6b6852bceb12
Fix semaphore data races
|
|
DATA RACE in semaphore.(*Registry).RemoveID
|
-1 |
syz, C |
|
|
15 |
2984d |
2988d
|
0/26 |
2983d |
6b6852bceb12
Fix semaphore data races
|
|
DATA RACE in queue.(*Queue).Enqueue
|
-1 |
syz, C |
|
|
7 |
2985d |
2988d
|
0/26 |
2984d |
5f7f78c1d7ee
Fix data races in Unix sockets
|
|
DATA RACE in unix.(*queueReceiver).RecvQueuedSize
|
-1 |
syz, C |
|
|
5 |
2984d |
2987d
|
0/26 |
2984d |
5f7f78c1d7ee
Fix data races in Unix sockets
|
|
panic: munmap(ADDR, c6000)) failed: function not implemented
|
2 |
|
|
|
1 |
2988d |
2988d
|
0/26 |
2984d |
dc33d71f8cf1
Change SIGCHLD to SIGKILL in ptrace stubs.
|
|
DATA RACE in unix.(*streamQueueReceiver).RecvQueuedSize
|
-1 |
syz, C |
|
|
3 |
2985d |
2987d
|
0/26 |
2984d |
5f7f78c1d7ee
Fix data races in Unix sockets
|
|
DATA RACE in kernel.(*FSContext).SetWorkingDirectory
|
-1 |
|
|
|
1 |
2988d |
2988d
|
0/26 |
2984d |
4ac79312b093
Don't read cwd or root without holding mu
|
|
DATA RACE in proc.(*mountInfoFile).ReadSeqFileData.func1
|
-1 |
|
|
|
1 |
2988d |
2988d
|
0/26 |
2984d |
1a9917d14d66
MountSource.Root() should return a refernce on the dirent.
|
|
DATA RACE in kernel.(*FSContext).SetRootDirectory
|
-1 |
syz, C |
|
|
165 |
2985d |
2988d
|
0/26 |
2984d |
478f0ac0038a
Don't read FSContext.root without holding FSContext.mu
|
|
panic: munmap(ADDR, 0)) failed: invalid argument
|
2 |
syz, C |
|
|
5 |
2989d |
2989d
|
0/26 |
2988d |
fe3fc44da3ca
Handle mremap(old_size=0).
|