Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE (2) -1 syz, C 3 46d 46d 26/26 21d c89b5d137b17 Seal the usertrap table against application modification.
WARNING: BUG on pkg/sentry/kernel/timekeeper.go:LINE -1 syz, C 8 47d 48d 26/26 38d 4842a71e1c64 Timekeeper: Read pausableClock before reading monotonic time.
WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE -1 syz 8 140d 204d 26/26 49d b1abaf7973d0 Fix race where unregistered sysmsg threads starts processing contexts.
kvm: panic: Sentry detected stuck tasks (30) -1 syz, C 15 198d 235d 26/26 59d 6a24f67cce95 Set clone propagation to MS_PRIVATE upon BindAt failure.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (4) -1 syz, C 16178 59d 1845d 26/26 59d bd30d19d87ae Add cos and ubuntu-gpu release agents
fatal error: stack overflow (6) -1 syz, C 3626 85d 89d 26/26 73d a349c019667d Add cycle detection and jump recursion depth limit for netfilter.
panic: UserChainTarget should never be called. 2 syz, C 457 85d 87d 26/26 73d 9d9b0681e814 Fix panic in iptables UserChainTarget.Action().
panic: thread group not visible in its own or an ancestor PID namespace 2 syz, C 17 91d 92d 26/26 73d ca90691b284b SO_PEERCRED: fix race against thread-group reap
panic: runtime error: invalid memory address or nil pointer dereference (32) 2 syz 6 123d 116d 26/26 114d 35db98496ee1 clone: Deliver pidfd only after child init
SYZFAIL: posix_spawnp failed -1 syz 6361 147d 679d 26/26 147d a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount
panic: Incrementing non-positive count ADDR on nsfs.Inode 2 syz, C 20 180d 180d 26/26 175d e0b8f07fefe9 pidfds: Fix setns() race with a dying target pidns
DATA RACE in kernel.(*Task).waitParentLocked -1 syz, C 5 178d 178d 26/26 175d 79075c279368 clone3: Create pidfds before making new task visible
kvm: no output from test machine (6) -1 syz, C 5 179d 179d 26/26 175d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: nested locking: kernel.taskSetRWMutex: (3) 2 syz, C 8 179d 179d 26/26 175d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 181d 182d 26/26 181d b31f2afdec69 setns: Fix setns(nsfd, 0x0)
DATA RACE in kernel.(*Task).waitCollectZombieLocked -1 syz 5 196d 229d 26/26 191d 149ca746755e wait: Prefer group exit status for non-consuming waits
panic: Sentry detected stuck tasks (35) 2 syz 41 199d 251d 26/26 198d c057198fd552 Resolve deadlock in /proc/[pid]/fdinfo/[fd].
DATA RACE in mm.(*MemoryManager).DecUsers -1 syz, C 4 228d 228d 26/26 226d 70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as.
DATA RACE in usertrap.(*State).PatchSyscall -1 syz 2 254d 254d 26/26 253d c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.
panic: ktime.SyntheticClock (time=ADDR) does not contain enqueued timer ADDR for time=ADDR with setting {Enabled:false N 2 syz, C 11 274d 274d 26/26 274d 5f31525f7613 Catch negative values in `timer_settime(2)`.
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (3) 2 syz, C 11 304d 304d 26/26 288d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
panic: SampledTimer(ADDR).Set called in pause state NUM 2 syz, C 11 304d 304d 26/26 288d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
DATA RACE in netlink.(*Socket).SetSockOpt (2) -1 syz, C 6 320d 320d 26/26 318d 512aa34f81ab netlink: Fix data race on socket.sendBufferSize
kvm: panic: Sentry detected stuck tasks (29) -1 syz, C 3 347d 348d 26/26 345d 2d94e669ae96 Avoid netlink deadlock
panic: Sentry detected stuck tasks (33) 2 syz, C 13 346d 347d 26/26 345d 2d94e669ae96 Avoid netlink deadlock
panic: registering already registered file 2 syz, C 164 380d 399d 26/26 351d c7e2a2ab44b4 Check for EventRegister success before setting FileAsync.registered.
panic: unregistering unregistered file 2 syz, C 641 391d 392d 26/26 351d 18edfee32572 Add async handler methods to FUSE DeviceFD.
panic: runtime error: slice bounds out of range [NUM:NUM] (4) 2 syz, C 78 369d 372d 26/26 351d 7532ec065ecc Fix: Check for errors in FUSE Readlink response.
DATA RACE in transport.(*connectionedEndpoint).PeerCreds -1 syz, C 8 419d 424d 26/26 351d 6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests.
panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 399d 399d 26/26 399d 41a5b6c519ee Check for connection in FUSE EventRegister.
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: (2) 2 syz, C 15 402d 404d 26/26 401d aba998b90aff kernel: Defer DecRef in SetWorkingDirectory to break lock cycle
DATA RACE in transport.(*connectionedEndpoint).SetPeerCreds -1 syz, C 3958 419d 427d 26/26 406d 2f7f776a4464 Automated rollback of changelist 798788535
DATA RACE in transport.(*connectionedEndpoint).BidirectionalConnect -1 syz, C 11531 419d 427d 26/26 406d 2f7f776a4464 Automated rollback of changelist 798788535
DATA RACE in transport.(*connectionedEndpoint).swapPeerCreds -1 syz, C 2636 419d 427d 26/26 406d 2f7f776a4464 Automated rollback of changelist 798788535
panic: nested locking: kernfs.filesystemRWMutex: (10) 2 syz, C 16 410d 478d 26/26 406d 6448dbe1b799 procfs: release the file system mutex on the error path
panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 420d 424d 26/26 406d 2f7f776a4464 Automated rollback of changelist 798788535
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: 2 syz, C 10461 407d 413d 26/26 407d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: Decrementing non-positive ref count ADDR, owned by tun.tunEndpoint 2 syz, C 19 408d 409d 26/26 408d 20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.
kvm: panic: Watchdog goroutine is stuck (7) -1 syz 4 414d 431d 26/26 413d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
panic: Watchdog goroutine is stuck (4) 2 syz 250 413d 498d 26/26 413d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1 -1 syz 3 430d 433d 26/26 427d 1941bc68e20d Fix race between unshare(2) and execve(2).
DATA RACE in kernel.(*Task).Unshare -1 syz, C 6 432d 433d 26/26 427d 1941bc68e20d Fix race between unshare(2) and execve(2).
kvm: panic: Sentry detected stuck tasks (28) -1 syz, C 11 500d 505d 26/26 477d 973b2f23e566 Check for fatal signals and reset watchdog during MM.mapASLocked().
DATA RACE in packetmmap.(*Endpoint).Init (5) -1 syz 2 534d 535d 26/26 531d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*ringBuffer).init (3) -1 syz, C 9 534d 539d 26/26 532d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (5) -1 syz, C 19 534d 539d 26/26 532d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (4) -1 syz, C 4 542d 544d 26/26 540d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader (2) -1 syz, C 3 544d 544d 26/26 540d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).Init (4) -1 syz, C 9 543d 547d 26/26 540d 5790f690667a lock around getting the current time from the stack.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader -1 syz, C 6 547d 547d 26/26 546d 5790f690667a lock around getting the current time from the stack.
kvm: panic: Sentry detected stuck tasks (27) -1 syz, C 5 550d 551d 26/26 546d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: Sentry detected stuck tasks (29) 2 syz, C 51 548d 553d 26/26 547d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: runtime error: index out of range [NUM] with length NUM (6) 2 syz, C 227 561d 561d 26/26 553d cd8fcab3446c Fix range check on socket option counter metric.
kvm: panic: Sentry detected stuck tasks (25) -1 syz, C 3409 561d 657d 26/26 553d bc724d81d2f7 Avoid a deadlock in packet endpoint's Close method.
panic: runtime error: index out of range [-NUM] (2) 2 syz, C 19 555d 556d 26/26 553d 49b9d83fc867 Consolidate helper functions around unimplemented socket option metrics
panic: Sentry detected stuck tasks (28) 2 syz, C 11282 553d 657d 26/26 553d 45adb00f5086 fuse,vfs: don't FUSE_GETATTR for /proc/mountinfo
panic: invalid field value or did not reuse the same FieldValue pointer as passed in NewField 2 syz, C 56 561d 561d 26/26 553d 3f22efe2ac35 Return ENOPROTOOPT from setsockopt syscalls as default.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (3) -1 syz, C 4 567d 567d 26/26 567d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
DATA RACE in packetmmap.(*Endpoint).Init (3) -1 syz 3 567d 567d 26/26 567d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
panic: runtime error: slice bounds out of range [NUM:NUM] (3) 2 syz, C 20 570d 571d 26/26 568d e3ca602624c1 Check for bad values of the packet mmap reserve option.
DATA RACE in kernel.(*ThreadGroup).endGroupStopLocked -1 syz 6 582d 583d 26/26 577d 8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.
panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 625d 626d 26/26 623d 95ad423f8c05 Don't return empty translation in ring buffer during bus error.
panic: runtime error: index out of range [NUM] with length NUM (5) 2 syz, C 165 626d 629d 26/26 625d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (2) -1 syz, C 1 629d 629d 26/26 625d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*Endpoint).ConfigureMMap -1 syz, C 2 629d 629d 26/26 629d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*Endpoint).Init (2) -1 syz, C 9 629d 629d 26/26 629d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus (2) -1 syz, C 19 629d 629d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).HandlePacket -1 syz, C 3 629d 630d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).GetPacketMMapOpts -1 syz, C 10 630d 630d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).Init -1 syz, C 7 629d 630d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).HandlePacket -1 syz 3 630d 631d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus -1 syz, C 3 629d 631d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetSockOptInt -1 syz, C 10 630d 630d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetPacketMMapEndpoint -1 syz, C 25 629d 631d 26/26 629d da7cd03064d7 Lock around packet mmap fields.
panic: runtime error: slice bounds out of range [NUM:NUM] (2) 2 syz, C 606 630d 631d 26/26 630d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: runtime error: index out of range [NUM] with length NUM (4) 2 syz, C 174 630d 631d 26/26 630d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: Sentry detected stuck tasks (27) 2 syz, C 14 665d 685d 26/26 660d 679c77e4f05e proc: Allow interrupting generation of /proc/pid/mount{s,info}
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (2) 2 syz, C 9 685d 685d 26/26 682d c27c9a02aef5 kernel: use the kernel context to run task destroy actions
DATA RACE in buffer.(*Buffer).PullUp -1 syz, C 2 707d 701d 26/26 685d afa323bd3070 Replace most instances of IncRef with Clone.
DATA RACE in buffer.(*ViewList).Remove -1 syz, C 4 708d 706d 26/26 685d afa323bd3070 Replace most instances of IncRef with Clone.
panic: PullUp failed (3) 2 syz, C 19 686d 706d 26/26 685d afa323bd3070 Replace most instances of IncRef with Clone.
panic: Sentry detected stuck tasks (26) 2 syz, C 17 688d 689d 26/26 687d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
kvm: panic: Sentry detected stuck tasks (24) -1 syz, C 9 688d 731d 26/26 687d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
panic: Sentry detected stuck tasks (25) 2 syz, C 78 689d 718d 26/26 689d 54eb79b6e80a Acquire rlock when reading link address from the bridge.
panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM 2 syz, C 34 692d 694d 26/26 690d ddaa99e5d4d2 Ignore the length field when processing the experiment extension header.
panic: nested locking: tmpfs.filesystemRWMutex: (3) 2 syz, C 88 707d 703d 26/26 703d f66f0e235a0b Fix memmap.MappingIdentity.Device/InodeID() lock ordering.
panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 705d 707d 26/26 705d 2b55090a5813 Do not crash when creating thread group with already-exceeded soft CPU limit.
panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 707d 715d 26/26 707d ae1d4ccf0298 mm: validate vseg before using it
no output from test machine (13) -1 syz, C 86992 710d 729d 26/26 710d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
panic: nested locking: tmpfs.filesystemRWMutex: (2) 2 syz, C 33 711d 713d 26/26 710d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
panic: runtime error: index out of range [ADDR] with length NUM (2) 2 syz, C 23 760d 761d 26/26 759d 9d41ac1ff0b2 Fix unsigned to signed integer conversion in syserr.getHostTranslation().
panic: unknown host errno "errno NUM" (NUM) (2) 2 syz, C 286 761d 786d 26/26 759d 3971ecbc6ccd Remove linuxerr.IsValid and use syserr.IsValid instead.
lost connection to test machine (10) -1 syz 11752 777d 833d 26/26 777d 2a413db73006 kvm: check CPL to find out if the Sentry is in VM
panic: unknown host errno "errno NUM" (NUM) 2 syz, C 397 793d 830d 26/26 793d 9ecb627726cf Fix syzkaller panic for unknown error 58.
panic: No file type specified in 'mode' for InodeAttrs.Init(): mode=NUM (2) 2 syz, C 454 804d 832d 26/26 804d 834bef599679 fuse: Error out in case of unsupported file type instead of panicking.
panic: unknown host errno "errno ADDR" (ADDR) 2 syz, C 88 814d 831d 26/26 813d b1ade52f24be fuse: handle bad response errors
lost connection to test machine (9) -1 syz 8441 833d 1172d 26/26 833d cd56935ddf77 runsc: pass the GLIBC_TUNABLES env to the sandbox process
no output from test machine (11) -1 syz, C 50911 843d 964d 26/26 843d db9fab290c26 Fix a race condition in TCPDeferAcceptTimeout
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.stackRWMutex: 2 syz, C 27 860d 862d 26/26 855d c4dc0321aa40 Do not hold BridgeEndpoint.mu during dispatcher.DeliverNetworkPacket().
DATA RACE in futex.(*waiterList).Front -1 syz, C 1 876d 876d 26/26 868d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterEntry).SetNext -1 syz, C 3 876d 876d 26/26 868d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterList).PushBack -1 syz, C 3 875d 876d 26/26 868d b58e8a129d62 futex: add missing locking in lockBuckets()
panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 955d 960d 26/26 954d 5f5e01d186b2 Fix panic while setting TCP_CORK off.
no output from test machine (10) -1 syz, C 19806 980d 1903d 26/26 976d 16dba7fa7677 systrap: handle stub thread crashes
panic: stub thread ADDR failed: err 0x-ADDR line NUM: sysmsg.Msg{msg: ADDR state NUM err -ADDR line NUM debug NUM app st 2 syz, C 5 1022d 1022d 26/26 996d fe66cae2edc7 Enumerate known systrap stub failures to exit process cleanly.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (4) 2 syz, C 22 1014d 1020d 26/26 1011d 7b151e25d076 Don't drop the mountpoint reference in already umounted dead mountpoints.
DATA RACE in safemem.Copy (7) -1 syz, C 4 1039d 1039d 26/26 1035d de71aae89aed `seccomp`: Use dedicated input buffer for populating seccomp cache.
kvm: panic: Sentry detected stuck tasks (22) -1 syz, C 8 1060d 1070d 26/26 1052d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
fatal error: stack overflow (5) -1 syz, C 23 1056d 1073d 26/26 1052d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
panic: attempted to rewrite jump target to a different return instruction: from={pc=NUM: {NUM NUM NUM NUM}}, to={pc=NUM: 2 syz, C 8 1071d 1071d 26/26 1066d 7cf14b7c8b5e Add equality function for BPF instructions.
fatal error: stack overflow (4) -1 syz, C 12 1073d 1077d 26/26 1073d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
kvm: panic: Sentry detected stuck tasks (21) -1 syz, C 2 1075d 1076d 26/26 1073d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
fatal error: large allocation -1 syz, C 234 1086d 1089d 26/26 1074d 917bee5b6d91 Add a size limit to `outputQueueTransformer.transform`.
panic: runtime error: slice bounds out of range [12:LINE] 2 syz, C 63 1079d 1858d 26/26 1077d c96439ecd0b4 devpts: IterDirents has to check offset and return if it is out of range
kvm: panic: Sentry detected stuck tasks (20) -1 syz, C 2 1079d 1079d 26/26 1077d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (3) 2 syz, C 16 1079d 1079d 26/26 1078d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by vfs.Filesystem 2 syz, C 152 1078d 1080d 26/26 1078d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Incrementing non-positive count ADDR on tmpfs.inode (4) 2 syz, C 24 1078d 1080d 26/26 1078d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: tmpfs.inode.incLinksLocked() called with no existing links 2 syz, C 1 1079d 1079d 26/26 1078d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
kvm: panic: Sentry detected stuck tasks (18) -1 syz, C 3 1093d 1098d 26/26 1091d 429f7c439616 Move rootfs check to inside mountMu.
panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1093d 1100d 26/26 1093d 429f7c439616 Move rootfs check to inside mountMu.
panic: close of closed channel 2 syz, C 1192 1728d 1736d 26/26 1095d 2e3e5b606789 Create a new test dimension that mounts a FUSE fs on /tmp.
DATA RACE in vfs.(*Mount).setMountOptions -1 syz, C 5 1104d 1104d 26/26 1100d ea4f0073d4a1 Fix data race between getting mount options and updating mount options.
panic: Sentry detected stuck tasks (24) 2 syz, C 13 1107d 1113d 26/26 1107d 1407fdf120ab Fix concurrent pivot_root bug.
panic: expected socket to exist at '!N 2 syz, C 23 1109d 1109d 26/26 1107d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '$N 2 syz, C 24 1111d 1111d 26/26 1107d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '#N 2 syz, C 23 1109d 1109d 26/26 1107d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at ' N 2 syz, C 20 1110d 1111d 26/26 1107d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: Sentry detected stuck tasks (23) 2 syz, C 23 1113d 1119d 26/26 1113d a8bc2e146626 Fix group id cleanup and tidy up some mount methods.
panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1122d 1135d 26/26 1120d f744f443dd7d Check before attempting to mount an anon mountpoint.
DATA RACE in kernel.(*Task).MemoryManager (3) -1 syz, C 12 1121d 1121d 26/26 1120d c39ecc4eb47a The local task in process_vm_read|writev is just the calling task.
DATA RACE in kernel.(*runExitMain).execute (2) -1 syz, C 143 1430d 1440d 26/26 1120d b66713079526 Clean up and re-enable process_vm_readv/writev
DATA RACE in binary.littleEndian.Uint64 (2) -1 syz, C 48 1430d 1440d 26/26 1120d b66713079526 Clean up and re-enable process_vm_readv/writev
DATA RACE in safemem.Copy (6) -1 syz, C 121 1430d 1430d 26/26 1120d b66713079526 Clean up and re-enable process_vm_readv/writev
panic: Unknown syscall NUM error: strconv.ParseInt: parsing "./file1": invalid syntax 2 syz, C 19 1143d 1136d 26/26 1128d 1910a4577f01 cgroupfs: do not return errors from strconv.ParseInt() to write()
panic: nested locking: kernfs.filesystemRWMutex: (6) 2 syz, C 8 1164d 1180d 26/26 1164d 755c1f242cd4 nsfs: mark inodes as anonymous
panic: Sentry detected stuck tasks (20) 2 syz, C 895 1169d 1171d 26/26 1168d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (15) -1 syz, C 186 1169d 1172d 26/26 1168d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (14) -1 syz 4 1184d 1189d 26/26 1179d 118a17d92dcf kernfs: set DenySpliceIn for DynamicBytesFD
DATA RACE in udp.(*endpoint).Connect.func1 -1 syz, C 3 1198d 1191d 26/26 1183d 5babda534107 Lock around endpoint info access in UDP onICMPError.
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 48074 1184d 1603d 26/26 1184d 41bb04c14901 Implement mount namespaces
panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1186d 1192d 26/26 1184d ef95be6e1c10 kernel: check that a task has a network namespace
panic: Sentry detected stuck tasks (18) 2 syz, C 625 1200d 1259d 26/26 1199d e54e3668b07c Impose default tmpfs size limits correctly.
DATA RACE in pipefs.(*inode).UID -1 syz 2 1204d 1204d 26/26 1203d 02ed5839a762 Add a lock to pipefs's inode to protect a inode's attributes.
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 1 1228d 1228d 26/26 1222d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 3 1228d 1228d 26/26 1222d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: nested locking: kernfs.filesystemRWMutex: (4) 2 syz, C 31 1235d 1329d 26/26 1234d 084a5022563f Change InvalidateDentry to return a list of vds with an extra reference.
panic: WARNING: circular locking detected: mm.activeRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 4 1270d 1270d 26/26 1239d 8c975e6e6e68 Mark some kernfs inode as Anonymous.
DATA RACE in fasync.(*FileAsync).SetOwnerTask -1 syz, C 11 1240d 1241d 26/26 1239d 5fed8c81b89a Fix data race by acquiring lock before accessing fields of FileAsync.
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: 2 syz, C 1 1242d 1242d 26/26 1239d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: 2 syz, C 3 1242d 1242d 26/26 1239d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
DATA RACE in kernel.(*TaskImage).Fork -1 syz, C 8 1349d 1349d 26/26 1256d 028cf757bbef Clarify comment about copying Task.image in Task.Clone().
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: (2) 2 syz, C 17 1261d 1261d 26/26 1259d ed528835f753 Small circular lock fix.
panic: Sentry detected stuck tasks (17) 2 syz, C 822 1259d 1525d 26/26 1259d ed528835f753 Small circular lock fix.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (2) 2 syz, C 47 1268d 1273d 26/26 1261d 283b80a456aa Fix logic bug in attaching mounts.
panic: WARNING: circular locking detected: transport.streamQueueReceiverMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1270d 1270d 26/26 1263d 2044c3449153 Don't hold streamQueueReceiver.mu while calling RightsControlMessage.Release().
panic: WARNING: circular locking detected: transport.endpointMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1270d 1270d 26/26 1263d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: 2 syz, C 18 1384d 1459d 26/26 1263d e0b1585586c6 Remove stale `vdDentry` variable from VirtualFilesystem.connectMountAt().
panic: nested locking: transport.endpointMutex: 2 syz, C 1 1270d 1270d 26/26 1263d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
panic: interface conversion: *kernel.Kernel is not unimpl.Events: missing method EmitUnimplementedEvent 2 syz, C 5857 1316d 1317d 26/26 1315d f8b98248139c Update `unimpl.EmitUnimplementedEvent` interface to add the syscall number.
panic: WARNING: circular locking detected: tmpfs.filesystemRWMutex -> kernel.taskSetRWMutex: 2 syz 14 1324d 1598d 26/26 1317d 758da469f7ed kernel: release kernel.taskSetRWMutex before calling TaskImage.Release
panic: runtime error: index out of range [ADDR] with length NUM 2 syz, C 17 1328d 1328d 26/26 1317d fc94225c333d Fix crash with large FD value
DATA RACE in vfs.(*VirtualFilesystem).PivotRoot -1 syz, C 1 1340d 1340d 26/26 1331d 807fd0fd27d0 Lock around accessing the mount namespace in pivot_root.
panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1340d 1341d 18/26 1340d 8a1845f8b850 Don't send a signal to a controlling thread group if one has not been set.
panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1341d 1344d 18/26 1341d 8184fa1db0fa Clean up devpts code, and deduplicate the foreground process state.
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM (2) 2 syz, C 7 1346d 1347d 18/26 1344d 5817f4cc64e4 Fix FUSE how handles malformed INIT requests.
panic: nested locking: kernfs.filesystemRWMutex: (3) 2 syz 19 1352d 1377d 18/26 1350d 28472cc03fe1 don't take an unnecessary reference in proc.fdSymlink.Valid()
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry (2) 2 syz, C 13 1358d 1358d 18/26 1356d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry (2) 2 syz, C 65 1356d 1358d 18/26 1356d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry 2 syz, C 14 1360d 1363d 18/26 1358d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry 2 syz, C 390 1358d 1363d 18/26 1358d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *gofer.dentry, not *kernfs.Dentry 2 syz, C 13 1360d 1360d 18/26 1360d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: runtime error: index out of range [NUM] with length NUM (3) 2 syz, C 372 1376d 1379d 18/26 1376d fe562179fea1 Handle absolute symlink target '/' correctly in VFS layer.
panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1379d 1440d 18/26 1376d e08f204299df inet: each socket has to hold a reference to its network namespace
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: (2) 2 syz, C 53 1414d 1415d 14/26 1414d bc440b67fce0 Don't hold nic.mu when calling n.linkResQueue.cancel.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.neighborCacheRWMutex: 2 syz, C 356 1416d 1422d 14/26 1415d 70be2fc8a772 Remove unsetting route's cached neighbor entry in link res callback.
panic: WARNING: circular locking detected: stack.packetsPendingLinkResolutionMutex -> stack.routeRWMutex: 2 syz, C 2602 1416d 1422d 14/26 1416d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: 2 syz, C 1246 1416d 1422d 14/26 1416d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
panic: WARNING: circular locking detected: kernel.signalHandlersMutex -> kernfs.filesystemRWMutex: 2 syz, C 351 1427d 1429d 14/26 1426d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 2320 1427d 1429d 14/26 1426d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode 2 syz, C 27 1429d 1429d 14/26 1428d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: Incrementing non-positive count ADDR on tmpfs.inode (2) 2 syz, C 56 1428d 1429d 14/26 1428d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: kernfs.Dentry.DecRef() called without holding a reference (2) 2 syz, C 61 1429d 1429d 14/26 1428d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: Lock not held: transport.endpointMutex[e]: 2 syz, C 1191 1430d 1430d 14/26 1430d 1ceee8c31071 connectioned: Change nested lock name to only have a single nested lock.
DATA RACE in safemem.Copy (5) -1 syz, C 3153 1430d 1440d 14/26 1430d ae731e0394f5 Don't use other process's scratch buffer.
panic: WARNING: circular locking detected: kernel.taskMutex -> kernel.taskSetRWMutex: 2 syz, C 1470 1440d 1442d 14/26 1438d 38a0512f13fa Fix circular lock in process_vm_(read|write)v
DATA RACE in binary.littleEndian.Uint64 -1 syz, C 29 1540d 1543d 14/26 1442d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR 2 syz, C 914 1442d 1459d 14/26 1442d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
DATA RACE in safemem.Copy (4) -1 syz, C 1019 1540d 1543d 14/26 1442d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [ADDR:NUM] 2 syz, C 13 1446d 1446d 14/26 1442d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM 2 syz, C 124 1442d 1458d 14/26 1442d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: integer divide by zero (3) 2 syz, C 443 1442d 1459d 14/26 1442d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: Unknown syscall -NUM error: EOF 2 syz, C 14 1446d 1448d 14/26 1442d f3aaf4326636 io_ring: Handle EOF on IORING_OP_READV
DATA RACE in tmpfs.AddSeals -1 syz, C 4 1447d 1447d 14/26 1444d 374e716c7ce2 AddSeals has to take the write lock to modify seals
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM 2 syz, C 196 1728d 1736d 14/26 1445d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1449d 1543d 14/26 1448d ae136df84998 Add nil-check for parent mount in umount(2) while handling mount propagation.
DATA RACE in vfs.(*VirtualFilesystem).setPropagation -1 syz, C 3 1462d 1462d 14/26 1449d 20ef2127a102 Lock around optional tag generation.
DATA RACE in bufferv2.newChunk -1 syz, C 68 1456d 1471d 14/26 1455d 6b3b5493d0ea Fix ipv6 header view ownership.
DATA RACE in vfs.(*VirtualFilesystem).GenerateProcMountInfo -1 syz, C 2 1460d 1462d 14/26 1459d 20ef2127a102 Lock around optional tag generation.
panic: runtime error: integer divide by zero (2) 2 syz, C 56 1459d 1459d 14/26 1459d d4b159ae93b5 iouring: Disallow zero, or less CQ entries than SQ entries
panic: nested locking: kernel.taskSetRWMutex: 2 syz, C 2 1517d 1517d 14/26 1465d c1427a04dfba Disable fasync for signalfd descriptors
panic: Decrementing non-positive ref count ADDR, owned by kernel.ProcessGroup (2) 2 syz, C 3 1483d 1517d 14/26 1483d 36ddd3050cc2 Check if ThreadGroup exists before executing JoinProcessGroup.
panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: NUM, proposed charg 2 syz, C 97 1521d 1640d 14/26 1521d 46e08207b58f cgroupfs: Handle hierachy changes across charge/uncharge.
DATA RACE in fuse.newFUSEFilesystem -1 syz, C 384 1728d 1736d 14/26 1543d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: WARNING: circular locking detected: tmpfs.inodeMutex -> mm.activeRWMutex: 2 syz, C 8353 1599d 1599d 14/26 1596d 82498d087ef8 Don't hold MM.activeMu when calling MM.vmaMapsEntryLocked().
panic: invalid allocation length: 0x0 (4) 2 syz, C 4338 1604d 1606d 14/26 1604d 3290a054c5bd getdents: Test that size parameter is not zero before allocating PMAs.
panic: runtime error: index out of range [-NUM] 2 syz, C 13 1635d 1635d 14/26 1632d a7cad2b092de Tmpfs with size option enabled bug fix.
DATA RACE in fuse.(*connection).callFutureLocked -1 syz, C 2 1733d 1735d 14/26 1641d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Read -1 syz, C 238 1730d 1735d 14/26 1641d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.newFUSEConnection -1 syz, C 52 1730d 1736d 14/26 1641d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PWrite -1 syz, C 11 1732d 1735d 14/26 1641d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PRead -1 syz, C 9 1731d 1736d 14/26 1641d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Seek -1 syz, C 8 1735d 1736d 14/26 1641d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: unexpected tcp state in processor: BOUND 2 syz, C 36 1652d 1654d 14/26 1652d 3b917921d7fe Fix race in listen.
DATA RACE in cgroupfs.(*memsData).Write -1 syz, C 4 1663d 1663d 14/26 1655d 5f9bd8a53b20 cgroupfs: Synchronize access to cpuset controller bitmaps.
panic: unknown network protocol number NUM 2 syz, C 56 1744d 1756d 14/26 1674d 6a28dc7c5963 Correct fragmentation reference counting.
panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1680d 1686d 14/26 1679d 5835bc8c3a4b cgroupfs: Handle invalid PID/PGID on migration.
DATA RACE in kernfs.(*OrderedChildren).checkExistingLocked -1 syz, C 1 1702d 1702d 14/26 1681d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
panic: Inode doesn't match what kernfs thinks! OrderedChild: &{dir:{InodeNoopRefCount:{InodeTemporary:{}} InodeAlwaysVal 2 syz, C 12 1687d 1702d 14/26 1681d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
DATA RACE in bitmap.(*Bitmap).Maximum -1 syz, C 8 1694d 1703d 14/26 1694d 4503ba3f5efd Fix data race when using UNSHARE in close_range.
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 (2) -1 syz, C 4 1711d 1704d 14/26 1700d b1ceabc884c0 Hold baseEndpoint.mu when calling baseEndpoint.Connected()
panic: Sentry detected stuck tasks (15) 2 syz, C 2582 1713d 1790d 14/26 1707d 510cc2f7fca9 Fix pivot_root lock inversion.
Invalid request partialResult in sendto (3) -1 syz, C 9 1711d 1711d 14/26 1708d 395c38be75d1 Add ECONNABORTED to the partial result error list.
kvm: panic: Sentry detected stuck tasks (5) -1 syz, C 65 1715d 1777d 14/26 1715d b413d78c27db sendfile: limit a buffer size
panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1728d 1724d 14/26 1723d b7ccfa5084e2 Fixes #7086,#6964,#3413,#7001.
panic: Unknown syscall NUM error: payload too small. Minimum data lenth required: NUM, but got data length NUM 2 syz, C 79 1729d 1735d 14/26 1729d 55ef37166897 Return well-defined error on short payload in FUSE.
fatal error: sync: unlock of unlocked mutex -1 syz, C 26 1729d 1730d 14/26 1729d 10d1a49c5ba2 Fuse: `DeviceFD.Read`: Lock `DeviceFD` ahead of other locks.
DATA RACE in fuse.(*connection).initProcessReply -1 syz, C 14 1730d 1734d 14/26 1730d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).writeLocked -1 syz, C 33 1730d 1735d 14/26 1730d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*connection).Call -1 syz, C 65 1730d 1734d 14/26 1730d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).Release -1 syz, C 404 1730d 1735d 14/26 1730d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in stack.(*PacketBuffer).reset (2) -1 syz 2 1756d 1756d 14/26 1731d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1731d 1756d 14/26 1731d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: Incrementing non-positive count ADDR on stack.PacketBuffer 2 syz, C 9 1742d 1742d 14/26 1731d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: runtime error: index out of range [NUM] with length NUM (2) 2 syz, C 21 1737d 1744d 14/26 1737d 5fb527632358 Handle 0 sized writes to /dev/net/tun.
panic: PullUp failed (2) 2 syz 4 1745d 1754d 14/26 1742d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
DATA RACE in udp.(*endpoint).Connect (2) -1 syz, C 4 2164d 2169d 14/26 1767d 2485a4e2cb4a Make stack.Route safe to access concurrently
kvm: panic: Sentry detected stuck tasks (4) -1 syz, C 627 1784d 1812d 14/26 1784d 4d29819e13a1 pipe: have separate notifiers for readers and writers
SYZFAIL: tun: can't open /dev/net/tun -1 syz 339 1822d 2075d 14/26 1822d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
kvm: no output from test machine (2) -1 syz, C 23 1824d 1901d 14/26 1822d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
DATA RACE in cgroupfs.(*cpusData).Write -1 syz, C 6 1828d 1833d 14/26 1827d 6078d26588c0 Sychronize access to cpuset controller bitmaps.
panic: runtime error: index out of range [NUM] with length NUM 2 syz, C 12 1830d 1832d 14/26 1829d f54a25c1f03e Validate an icmp header before accessing it
panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1829d 1858d 14/26 1829d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: kernfs.Dentry.DecRef() called without holding a reference 2 syz, C 87 1829d 1833d 14/26 1829d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: Only permission mask must be set: ADDR 2 syz, C 756 1829d 1833d 14/26 1829d 4d07fc952d6b Do not leak non-permission mode bits in mq_open(2).
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3) -1 syz, C 2034 1858d 1952d 14/26 1857d 0bdd79ccd469 kvm: trap mmap syscalls to map new regions to the guest
DATA RACE in safemem.Copy (3) -1 syz, C 3 1863d 1863d 14/26 1857d 1fe0a6691ff5 Prevent PacketData from being modified.
Invalid request partialResult in pwritev -1 syz, C 278 2051d 2069d 14/26 1861d 7fac7e32f3a8 Translate syserror when validating partial IO errors
Invalid request partialResult in sendto (2) -1 syz, C 10 1896d 1971d 14/26 1861d e5fe488b2273 Wake up Writers when tcp socket is shutdown for writes.
kvm: panic: Sentry detected stuck tasks (2) -1 syz, C 66 1868d 2031d 14/26 1861d 1947c873423c Fix deadlock in /proc/[pid]/fd/[num]
DATA RACE in msgqueue.(*Queue).pop -1 syz, C 2 1894d 1894d 14/26 1870d d6c99694bcb9 Fix race on msgrcv(MSG_COPY).
panic: Sentry detected stuck tasks (11) 2 syz, C 31 1885d 2012d 14/26 1882d 9149b2cefdb5 unix: avoid taking two endpoint locks
panic: runtime error: makeslice: len out of range (3) 2 syz, C 10 1885d 1885d 14/26 1884d 927ea16dd384 unix: handle a case when a buffer is overflowed
panic: unknown error: SIGBUS at ADDR 2 syz, C 17 1887d 1900d 14/26 1886d dfbcb8903ae8 [syserr] Fix SIGBUS on syserr.FromError
DATA RACE in safemem.Copy (2) -1 syz, C 9 1911d 1911d 14/26 1900d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
DATA RACE in buffer.(*buffer).Remove -1 syz, C 2 1911d 1911d 14/26 1900d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
no output from test machine (9) -1 syz, C 2298 1911d 2066d 14/26 1911d 569f605f438d Correctly handle interruptions in blocking msgqueue syscalls.
panic: unable to find an index for ID: 0 2 syz, C 1497 1924d 1924d 14/26 1924d 3d0a9300050a Don't panic on user-controlled state in semaphore syscalls.
DATA RACE in atomic.CompareAndSwapInt32 (4) -1 syz 4 1937d 1930d 14/26 1926d a89b2f005b71 Use atomics when checking for parent setgid in VFS2 tmpfs file creation.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (2) -1 syz, C 2532 1952d 2564d 14/26 1952d d703340bc04a runsc: don't kill sandbox, let it stop properly
kvm: panic: Watchdog goroutine is stuck (3) -1 syz, C 48 1967d 2018d 14/26 1966d 3fcbad509300 Fix lock ordering issue when enumerating cgroup tasks.
panic: PullUp failed 2 syz, C 615 1994d 1995d 14/26 1994d 436148d68a50 Fix panic on consume in a mixed push/consume case
panic: Incrementing non-positive count ADDR on vfs.Filesystem 2 syz, C 2 2012d 2012d 14/26 1994d 78ae3db1a39c Fix cgroup hierarchy registration.
DATA RACE in cgroupfs.FilesystemType.GetFilesystem -1 syz, C 1 2012d 2005d 14/26 1994d 78ae3db1a39c Fix cgroup hierarchy registration.
panic: Sentry detected stuck tasks (10) 2 syz, C 264 2019d 2072d 14/26 2019d b0333d33a206 Optimize safemem.Zero
panic: Watchdog goroutine is stuck 2 syz, C 1831 2026d 2324d 14/26 2025d f4f6ce337aa8 Don't grab TaskSet mu recursively when reading task state.
panic: makechan: size out of range 2 syz, C 183 2029d 2032d 14/26 2029d dc8f6c691474 Move maxListenBacklog check to sentry
fatal error: unexpected signal during runtime execution -1 syz 272 2096d 2785d 14/26 2029d eb9b8e53a3ef platform/kvm/x86: restore mxcsr when switching from guest to sentry
Invalid request partialResult in write (2) -1 syz, C 11628 2046d 2111d 14/26 2045d 7fac7e32f3a8 Translate syserror when validating partial IO errors
kvm: panic: Sentry detected stuck tasks -1 syz, C 152 2045d 2061d 14/26 2045d 2f3dac78ca9a kvm: prefault a floating point state before restoring it
panic: Sentry detected stuck tasks (8) 2 syz, C 64 2072d 2074d 14/26 2072d f5692f7dcc48 Kernfs should not try to rename a file to itself.
no output from test machine (8) -1 syz, C 15268 2073d 2176d 14/26 2073d acd516cfe292 Add YAMA security module restrictions on ptrace(2).
panic: running on goroutine 582 (task goroutine for kernel.Task ADDR is 400) 2 syz, C 1 2077d 2077d 14/26 2073d 6e000d3424c0 Use async task context for async IO.
panic: unknown error *tcpip.ErrMalformedHeader 2 syz, C 5 2090d 2083d 14/26 2073d c39284f45738 Let sentry understand tcpip.ErrMalformedHeader
panic: Sentry detected stuck tasks (7) 2 syz 2567 2074d 2106d 14/26 2074d c5a4e100085c unix: sendmmsg and recvmsg have to cap a number of message to UIO_MAXIOV
panic: wd changed: "/tmp" -> "(unreachable)/" 2 syz 2534 2086d 2168d 14/26 2086d 97a36d169698 Don't allow to umount the namespace root mount
Invalid request partialResult in sendto -1 syz, C 236 2095d 2098d 14/26 2087d d6d169320cd4 Add ETIMEDOUT to partial result list
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup 2 syz, C 12 2104d 2104d 14/26 2087d fe4f4789601d kernel: reparentLocked has to update children maps of old and new parents
panic: Child "." for parent Dentry &{vfsd:{mu:{m:{Mutex:{state:LINE sema:LINE}}} dead:false mounts:LINE impl:ADDR} refs: 2 syz, C 13 2088d 2097d 14/26 2087d 09afd6832689 [vfs] Handle `.` and `..` as last path component names in kernfs Rename.
panic: Start ADDR + offset ADDR overflows? 2 syz, C 19 2113d 2419d 14/26 2087d bf4968e17d7d exec: don't panic if an elf file is malformed
panic: Decrementing non-positive ref count ADDR, owned by vfs.FileDescription 2 syz, C 12 2118d 2113d 14/26 2102d abdff887483f Do not send SCM Rights more than once when message is truncated.
DATA RACE in safemem.Copy -1 syz, C 4 2106d 2106d 14/26 2102d 76da673a0dda Do not modify IGMP packets when verifying checksum
panic: Sentry detected stuck tasks (6) 2 syz 714 2106d 2158d 14/26 2106d e57ebcd37a7b Simplify the pipe implementation.
panic: IPv6 payload too large: NUM, must be <= NUM 2 syz, C 46 2114d 2147d 14/26 2111d ec9e263f213c Correctly return EMSGSIZE when packet is too big in raw socket.
panic: buffer too long by 8 bytes 2 syz, C 12 2126d 2144d 14/26 2122d ce7a4440cae8 Fix panic when parsing SO_TIMESTAMP cmsg
panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2124d 2168d 14/26 2122d 2a200811d4c9 fs/fuse: check that a task has a specified file descriptor
panic: runtime error: integer divide by zero 2 syz, C 116 2246d 2272d 14/26 2130d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
panic: error when reading RouterAlert option's data bytes: EOF 2 syz, C 35 2144d 2147d 14/26 2130d c55e5bda4d45 Validate router alert's data length
DATA RACE in raw.(*endpoint).HandlePacket -1 syz, C 5 2143d 2143d 14/26 2130d 981faa2c1229 RLock Endpoint in raw.Endpoint.HandlePacket
panic: header.ScopeForIPv6Address(172.20.20.170): bad address 2 syz, C 48 2151d 2157d 14/26 2130d b15acae9a6e2 Fix error code for connect in raw sockets.
panic: Unknown syscall 165 error: strconv.ParseInt: parsing "ADDR": invalid syntax 2 syz, C 51 2152d 2157d 14/26 2130d 9c198e5df421 Fix error handling on fusefs mount.
DATA RACE in header.ICMPv6Checksum -1 syz, C 1 2144d 2144d 14/26 2130d 946cb909e62e Don't modify a packet header when it can be used by other endpoints
panic: Unknown syscall 8 error: EOF 2 syz 22 2141d 2147d 14/26 2130d 1ea241e4cc95 Fix seek on /proc/pid/cmdline when task is zombie.
panic: Stack for running G's are skipped while panicking. 2 syz, C 2426 2429d 2683d 14/26 2131d ab7ecdd66d2a watchdog: print panic error message before other messages
panic: Sentry detected stuck tasks (5) 2 syz 83 2159d 2171d 0/26 2158d 79e2364933bb Fix deadlock in UDP handleControlPacket path.
DATA RACE in log.GoogleEmitter.Emit -1 syz, C 34 2170d 2176d 0/26 2169d 9c553f2d4e4b Remove racy stringification of socket fds from /proc/net/*.
panic: runtime error: slice bounds out of range [255:LINE] 2 syz, C 5 2173d 2174d 0/26 2169d 49adf36ed7d3 Fix possible panic due to bad data.
panic: Sentry detected stuck tasks (4) 2 syz, C 5 2172d 2172d 0/26 2172d 05d2a26f7a86 Fix possible deadlock in UDP.Write().
panic: Incrementing non-positive count ADDR on tmpfs.inode 2 syz 2 2175d 2175d 0/26 2172d 10ba578c0182 tmpfs: make sure that a dentry will not be destroyed before the open() call
panic: Sentry detected stuck tasks (3) 2 syz, C 180 2172d 2176d 0/26 2172d 267560d159b2 Reset watchdog timer between sendfile() iterations.
panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2184d 2202d 0/26 2177d 4e389c785779 Check for nil in kernel.FSContext functions.
panic: Sentry detected stuck tasks (2) 2 syz, C 951 2177d 2217d 0/26 2177d db36d948fa63 TCP Receive window advertisement fixes.
no output from test machine (7) -1 syz, C 184 2177d 2204d 0/26 2177d 34a6e9576a96 loader/elf: validate file offset
panic: runtime error: makeslice: len out of range (2) 2 syz, C 5 2177d 2204d 0/26 2177d cd108432a50e splice: return EINVAL is len is negative
panic: Child "" for parent Dentry &{vfsd:{mu:{Mutex:{state:LINE sema:LINE}} dead:false mounts:LINE impl:ADDR} DentryRefs 2 syz, C 3 2182d 2190d 0/26 2177d 1321f837bd9f [vfs2] Refactor kernfs checkCreateLocked.
panic: unknown error: EOF 2 syz, C 68 2204d 2207d 0/26 2204d c002fc36f9bb sockets: ignore io.EOF from view.ReadAt
no output from test machine (6) -1 syz 1873 2211d 2217d 0/26 2211d 76a09f0cf599 syscalls: Don't leak a file on the error path
no output from test machine (5) -1 syz, C 86414 2217d 2332d 0/26 2217d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
panic: Sentry detected stuck tasks 2 syz, C 506 2217d 2238d 0/26 2217d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
DATA RACE in tcp.(*endpoint).bindLocked -1 syz 2 2248d 2248d 0/26 2241d 38cdb0579b69 Fix data race in tcp.GetSockOpt.
panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2250d 2785d 0/26 2242d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 -1 syz 21 2325d 2331d 0/26 2323d 70c45e09cfd1 socket/unix: (*connectionedEndpoint).State() has to take the endpoint lock
panic: Sentry detected 1 stuck task(s): 2 syz, C 6204 2334d 2421d 0/26 2332d 4950ccde75b3 Fix write hang bug found by syzkaller.
DATA RACE in fs.(*File).offsetForAppend -1 syz 2 2339d 2339d 0/26 2337d 7da69fe9719b Fix data race on f.offset.
DATA RACE in kernel.(*Task).accountTaskGoroutineEnter -1 syz 2 2363d 2363d 0/26 2360d 8dd1d5b75a95 Don't call kernel.Task.Block() from netstack.SocketOperations.Write().
panic: close of nil channel 2 syz 6 2382d 2386d 0/26 2379d 37f863f62813 tcp: handle listen after shutdown properly
panic: interface conversion: context.Context is kernel.taskAsyncContext, not *kernel.Task 2 syz 16 2392d 2407d 0/26 2391d c9195349c9ac Replace type assertion with TaskFromContext.
panic: runtime error: makeslice: len out of range 2 syz 49 2393d 2416d 0/26 2393d a10389e783aa splice: cap splice calls to MAX_RW_COUNT
DATA RACE in tcp.(*endpoint).Readiness -1 syz 2 2414d 2414d 0/26 2408d d04adebaab86 Fix data-race in endpoint.Readiness
DATA RACE in netstack.(*SocketOperations).SetSockOpt -1 syz 2 2412d 2412d 0/26 2411d 369cf38bd718 Fix data race in SetSockOpt.
DATA RACE in tcp.(*endpoint).SetSockOpt -1 syz 26 2415d 2436d 0/26 2411d e9e399c25d4f Remove workMu from tcpip.Endpoint.
DATA RACE in udp.(*endpoint).SetSockOptBool -1 syz 2 2429d 2422d 0/26 2414d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
no output from test machine (3) -1 syz, C 11663 2417d 2505d 0/26 2417d b55f0e5d40c1 fdtable: don't try to zap fdtable entry if close is called for non-existing fd
fatal error: out of memory (3) -1 syz 3 2423d 2423d 0/26 2422d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: too many address space collisions for -race mode -1 syz 3 2423d 2423d 0/26 2422d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: concurrent map iteration and map write (2) -1 syz 1 2434d 2434d 0/26 2424d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in udp.(*endpoint).Connect -1 syz 10 2430d 2436d 0/26 2424d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).RemoveXattr -1 syz 2 2433d 2434d 0/26 2424d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in tcp.(*endpoint).windowCrossedACKThreshold -1 syz 10 2436d 2436d 0/26 2424d 33101752501f Fix data-race when reading/writing e.amss.
DATA RACE in stack.(*TransportEndpointInfo).AddrNetProto -1 syz 148 2429d 2436d 0/26 2424d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
fatal error: concurrent map read and map write (2) -1 syz 2 2434d 2434d 0/26 2424d 62bd3ca8a375 Take write lock when removing xattr
panic: runtime error: index out of range [1] with length 0 2 syz, C 1518 2429d 2436d 0/26 2424d 43abb24657e7 Fix panic caused by invalid address for Bind in packet sockets.
DATA RACE in netstack.(*SocketOperations).fetchReadView -1 syz 12 2430d 2436d 0/26 2424d 42fb7d349137 socket: take readMu to access readView
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).GetXattr -1 syz 3 2434d 2434d 0/26 2424d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in fs.(*UnstableAttr).SetOwner (2) -1 syz 3 2469d 2462d 0/26 2436d 115898e368e4 Prevent DATA RACE in UnstableAttr.
DATA RACE in fs.(*Dirent).IncRef -1 syz 1 2462d 2455d 0/26 2436d 53504e29ca27 Fix mount refcount issue.
panic: Incrementing non-positive ref count (4) 2 syz, C 5 2454d 2455d 0/26 2436d 53504e29ca27 Fix mount refcount issue.
panic: wait failed: the process 9793:LINE exited: 1f (err <nil>) 2 syz, C 1 2507d 2500d 0/26 2437d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: runtime error: slice bounds out of range [:LINE] with capacity 16 2 syz 42 2488d 2499d 0/26 2437d b3ae8a62cfdf Fix slice bounds out of range panic in parsing socket control message.
Invalid request partialResult in splice (2) -1 syz 134 2466d 2502d 0/26 2463d f263801a74d4 fs/splice: don't report partial errors for special files
panic: invalid allocation length: 0x0 (3) 2 syz 12 2467d 2467d 0/26 2463d ede8dfab3760 Enforce splice offset limits
DATA RACE in tty.(*queue).readableSize -1 syz 2 2478d 2478d 0/26 2476d 80d0f9304484 Fix data race in tty.queue.readableSize.
DATA RACE in fsutil.(*InodeSimpleAttributes).SetPermissions -1 syz 3 2506d 2506d 0/26 2505d bb00438f36eb Make masterInodeOperations.Truncate take a pointer receiver.
no output from test machine (2) -1 syz, C 6325 2512d 2628d 0/26 2512d 378d6c1f3697 unix: allow to bind unix sockets only to AF_UNIX addresses
DATA RACE in fs.Rename (2) -1 syz, C 433 2763d 2785d 0/26 2519d 89cc8eef9ba6 DATA RACE in fs.(*Dirent).fullName
Invalid request partialResult in sendfile (2) -1 syz, C 1341 2585d 2785d 0/26 2583d db218fdfcf16 Don't report partialResult errors from sendfile
Invalid request partialResult in splice -1 syz, C 206 2586d 2634d 0/26 2585d 7a234f736fe0 splice: try another fallback option only if the previous one isn't supported
lost connection to test machine (3) -1 syz, C 30758 2636d 2785d 0/26 2633d af90e68623c7 netlink: return an error in nlmsgerr
panic: node.Readdir returned offset -ADDR less than input offset ADDR 2 syz, C 26 2702d 2785d 0/26 2633d ab6774cebf5c gvisor/fs: getdents returns 0 if offset is equal to FileMaxOffset
DATA RACE in ramfs.(*dirFileOperations).Readdir -1 syz 1 2834d 2785d 0/26 2634d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
no output from test machine -1 syz, C 27191 2636d 2785d 0/26 2635d af90e68623c7 netlink: return an error in nlmsgerr
DATA RACE in kernel.(*Kernel).EmitUnimplementedEvent -1 syz 3 2647d 2648d 0/26 2647d cf2b2d97d512 Initialize kernel.unimplementedSyscallEmitter with a sync.Once.
panic: Unknown syscall 85 error: link should be resolved via Readlink() 2 syz 64 2670d 2667d 0/26 2667d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 2 error: link should be resolved via Readlink() 2 syz 16 2671d 2667d 0/26 2667d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 257 error: link should be resolved via Readlink() 2 syz 14 2670d 2675d 0/26 2668d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Incrementing non-positive ref count (2) 2 syz, C 183 2675d 2682d 0/26 2674d 4f2f44320f9b Simplify (and fix) refcounts in createAt.
DATA RACE in atomic.StoreInt64 -1 syz 2 2689d 2694d 0/26 2682d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in mm.(*MemoryManager).Brk -1 syz 14 2722d 2739d 0/26 2722d 14f0e7618e28 Ensure all uses of MM.brk occur under MM.mappingMu in MM.Brk().
panic: hashed child "stat\t\xe9\xdc\xdf\x02\x02\x98\xcc\xf3<\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q\nI\xf81U\ro}\xe 2 syz, C 7 2765d 2758d 0/26 2740d 2df64cd6d2c8 createAt should return all errors from FindInode except ENOENT.
DATA RACE in tty.(*queue).WriteFromBlocks -1 syz 7 2766d 2770d 0/26 2765d c79e81bd27cd Addresses data race in tty implementation.
panic: runtime error: index out of range (2) 2 syz, C 7191 2766d 2771d 0/26 2765d 82529becaee6 Fix index out of bounds in tty implementation.
DATA RACE in atomic.CompareAndSwapInt32 (2) -1 syz 2 2767d 2767d 0/26 2765d d14a7de65865 Fix more data races in shm debug messages.
DATA RACE in atomic.CompareAndSwapInt32 -1 syz, C 9 2773d 2785d 0/26 2768d cea1dd7d21b9 Remove racy access to shm fields.
DATA RACE in netlink.(*Socket).SetSockOpt -1 syz 2 2785d 2785d 0/26 2768d 7b33df68450b Fix data race in netlink send buffer size
DATA RACE in fsutil.(*InodeSimpleAttributes).UnstableAttr -1 syz 8 2834d 2837d 0/26 2830d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
panic: invalid allocation length: 0x0 (2) 2 syz, C 4 2872d 2873d 0/26 2871d 3b3f02627870 Truncate ar before calling mm.breakCopyOnWriteLocked().
DATA RACE in shm.(*Registry).findByKey -1 syz, C 47 2983d 3050d 0/26 2878d f93c288dd708 Fix a data race on Shm.key.
panic: invalid type: int 2 syz, C 559 2897d 2999d 0/26 2879d 5560615c531b Return an int32 for netlink SO_RCVBUF
panic: ptrace set regs failed: input/output error 2 syz, C 712 2884d 2982d 0/26 2879d 99d595869332 Validate FS_BASE in Task.Clone
Invalid request partialResult in sendfile -1 syz, C 7399 2884d 3037d 0/26 2879d ffcbda0c8bd7 Partial writes should loop in rpcinet.
panic: Decrementing non-positive ref count 2 syz, C 4804 2973d 3051d 0/26 2879d 0e277a39c8b6 Prevent premature destruction of shm segments.
panic: ptrace status unexpected: got 9, wanted stopped (2) 2 syz 78 2884d 3037d 0/26 2879d e7191f058f55 Use TRAP to simplify vsyscall emulation.
panic: invalid allocation length: 0x0 2 syz, C 223 2884d 3051d 0/26 2879d 46603b569c3a Fix panic on creation of zero-len shm segments.
panic: runtime error: invalid memory address or nil pointer dereference (2) 2 syz, C 4493 2973d 2994d 0/26 2936d beac59b37a8b Fix panic if FIOASYNC callback is registered and triggered without target
DATA RACE in kernel.(*Task).setKUIDsUncheckedLocked -1 syz, C 15 2986d 3044d 0/26 2936d f8ccfbbed487 Document more task-goroutine-owned fields in kernel.Task.
DATA RACE in fs.(*Dirent).hashChildParentSet -1 syz 8 2989d 2991d 0/26 2936d 8d318aac5532 fs: Hold Dirent.mu when calling Dirent.flush().
DATA RACE in waiter.(*Entry).Prev -1 syz, C 3992 2998d 3051d 0/26 2994d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Entry).Next -1 syz, C 2418 2998d 3051d 0/26 2994d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Entry).SetNext -1 syz, C 739 2998d 3051d 0/26 2994d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
panic: runtime error: index out of range 2 syz, C 35 3010d 3046d 0/26 2994d e97717e29a1b Enforce Unix socket address length limit
DATA RACE in waiter.(*Queue).Notify -1 syz, C 72 2998d 3051d 0/26 2994d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in unix.(*connectionlessEndpoint).UnidirectionalConnect -1 syz, C 965 3004d 3035d 0/26 2994d 2a44362c0b99 Fix data race in unix.BoundEndpoint.UnidirectionalConnect.
panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2998d 3051d 0/26 2994d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in kernel.(*Task).exitNotifyLocked -1 syz, C 2 3023d 3023d 0/26 3004d c036da5dffdf Hold TaskSet.mu in Task.Parent.
panic: invalid segment range [ADDR, ADDR) 2 syz, C 255 3040d 3051d 0/26 3025d 06920b3d1bb6 Exit tmpfs.fileInodeOperations.Translate early if required.Start >= EOF.
DATA RACE in fs.(*Watch).Notify -1 syz 2 3041d 3041d 0/26 3040d 34af9a61741f Fix data race on inotify.Watch.mask.
lost connection to test machine (2) -1 syz, C 1814 3040d 3051d 0/26 3040d 52ddb8571c46 Skip overlay on root when its readonly
DATA RACE in fs.Rename -1 syz, C 16 3040d 3049d 0/26 3040d 2821dfe6ce95 Hold d.parent.mu when reading d.name
panic: MountNamespace.FindInode: path is empty 2 syz, C 3443 3040d 3051d 0/26 3040d 062a6f6ec5f4 Handle NUL-only paths in exec
panic: runtime error: slice bounds out of range 2 syz, C 39 3044d 3051d 0/26 3044d 1ceed49ba94c Check for invalid offset when submitting an AIO read/write request.
DATA RACE in proc.forEachMountSource -1 syz, C 24 3045d 3051d 0/26 3044d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in semaphore.(*Set).checkPerms -1 syz, C 21 3046d 3050d 0/26 3046d 6b6852bceb12 Fix semaphore data races
DATA RACE in semaphore.(*Registry).RemoveID -1 syz, C 15 3046d 3050d 0/26 3046d 6b6852bceb12 Fix semaphore data races
DATA RACE in queue.(*Queue).Enqueue -1 syz, C 7 3047d 3050d 0/26 3047d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in unix.(*queueReceiver).RecvQueuedSize -1 syz, C 5 3047d 3050d 0/26 3047d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in unix.(*streamQueueReceiver).RecvQueuedSize -1 syz, C 3 3048d 3049d 0/26 3047d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in kernel.(*FSContext).SetRootDirectory -1 syz, C 165 3047d 3051d 0/26 3047d 478f0ac0038a Don't read FSContext.root without holding FSContext.mu
panic: munmap(ADDR, 0)) failed: invalid argument 2 syz, C 5 3051d 3051d 0/26 3051d fe3fc44da3ca Handle mremap(old_size=0).