Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (4) -1 syz, C 16121 23m 1784d 24/26 never bd30d19d87ae Add cos and ubuntu-gpu release agents
kvm: panic: Sentry detected stuck tasks (30) -1 syz, C 15 137d 175d 0/26 never 6a24f67cce95 Set clone propagation to MS_PRIVATE upon BindAt failure.
fatal error: stack overflow (6) -1 syz, C 3626 24d 28d 26/26 12d a349c019667d Add cycle detection and jump recursion depth limit for netfilter.
panic: UserChainTarget should never be called. 2 syz, C 457 24d 26d 26/26 12d 9d9b0681e814 Fix panic in iptables UserChainTarget.Action().
panic: thread group not visible in its own or an ancestor PID namespace 2 syz, C 17 31d 31d 26/26 12d ca90691b284b SO_PEERCRED: fix race against thread-group reap
panic: runtime error: invalid memory address or nil pointer dereference (32) 2 syz 6 62d 55d 26/26 54d 35db98496ee1 clone: Deliver pidfd only after child init
SYZFAIL: posix_spawnp failed -1 syz 6361 86d 618d 26/26 86d a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount
panic: Incrementing non-positive count ADDR on nsfs.Inode 2 syz, C 20 119d 119d 26/26 114d e0b8f07fefe9 pidfds: Fix setns() race with a dying target pidns
DATA RACE in kernel.(*Task).waitParentLocked -1 syz, C 5 118d 118d 26/26 114d 79075c279368 clone3: Create pidfds before making new task visible
kvm: no output from test machine (6) -1 syz, C 5 118d 118d 26/26 114d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: nested locking: kernel.taskSetRWMutex: (3) 2 syz, C 8 118d 118d 26/26 114d 8c2aa261c278 pidfds: Disallow fasync on pidfds
panic: runtime error: invalid memory address or nil pointer dereference (31) 2 syz, C 169 121d 121d 26/26 121d b31f2afdec69 setns: Fix setns(nsfd, 0x0)
DATA RACE in kernel.(*Task).waitCollectZombieLocked -1 syz 5 136d 169d 26/26 130d 149ca746755e wait: Prefer group exit status for non-consuming waits
panic: Sentry detected stuck tasks (35) 2 syz 41 138d 191d 26/26 137d c057198fd552 Resolve deadlock in /proc/[pid]/fdinfo/[fd].
DATA RACE in mm.(*MemoryManager).DecUsers -1 syz, C 4 167d 167d 26/26 165d 70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as.
DATA RACE in usertrap.(*State).PatchSyscall -1 syz 2 193d 193d 26/26 192d c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.
panic: ktime.SyntheticClock (time=ADDR) does not contain enqueued timer ADDR for time=ADDR with setting {Enabled:false N 2 syz, C 11 213d 214d 26/26 213d 5f31525f7613 Catch negative values in `timer_settime(2)`.
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (3) 2 syz, C 11 243d 243d 26/26 228d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
panic: SampledTimer(ADDR).Set called in pause state NUM 2 syz, C 11 243d 243d 26/26 228d 2f5377660b6f netstack: Use ctx.BlockWithTimeout() directly while releasing socket.
DATA RACE in netlink.(*Socket).SetSockOpt (2) -1 syz, C 6 259d 259d 26/26 257d 512aa34f81ab netlink: Fix data race on socket.sendBufferSize
kvm: panic: Sentry detected stuck tasks (29) -1 syz, C 3 286d 287d 26/26 284d 2d94e669ae96 Avoid netlink deadlock
panic: Sentry detected stuck tasks (33) 2 syz, C 13 285d 286d 26/26 284d 2d94e669ae96 Avoid netlink deadlock
panic: registering already registered file 2 syz, C 164 320d 338d 26/26 290d c7e2a2ab44b4 Check for EventRegister success before setting FileAsync.registered.
panic: unregistering unregistered file 2 syz, C 641 330d 331d 26/26 290d 18edfee32572 Add async handler methods to FUSE DeviceFD.
panic: runtime error: slice bounds out of range [NUM:NUM] (4) 2 syz, C 78 308d 311d 26/26 290d 7532ec065ecc Fix: Check for errors in FUSE Readlink response.
DATA RACE in transport.(*connectionedEndpoint).PeerCreds -1 syz, C 8 359d 363d 26/26 291d 6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests.
panic: runtime error: invalid memory address or nil pointer dereference (30) 2 syz, C 16194 338d 338d 26/26 338d 41a5b6c519ee Check for connection in FUSE EventRegister.
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: (2) 2 syz, C 15 341d 343d 26/26 341d aba998b90aff kernel: Defer DecRef in SetWorkingDirectory to break lock cycle
DATA RACE in transport.(*connectionedEndpoint).SetPeerCreds -1 syz, C 3958 359d 366d 26/26 345d 2f7f776a4464 Automated rollback of changelist 798788535
DATA RACE in transport.(*connectionedEndpoint).BidirectionalConnect -1 syz, C 11531 359d 366d 26/26 345d 2f7f776a4464 Automated rollback of changelist 798788535
DATA RACE in transport.(*connectionedEndpoint).swapPeerCreds -1 syz, C 2636 359d 366d 26/26 345d 2f7f776a4464 Automated rollback of changelist 798788535
panic: nested locking: kernfs.filesystemRWMutex: (10) 2 syz, C 16 349d 417d 26/26 345d 6448dbe1b799 procfs: release the file system mutex on the error path
panic: runtime error: invalid memory address or nil pointer dereference (29) 2 syz, C 7 360d 363d 26/26 345d 2f7f776a4464 Automated rollback of changelist 798788535
panic: WARNING: circular locking detected: kernel.fsContextMutex -> kernfs.filesystemRWMutex: 2 syz, C 10461 347d 352d 26/26 347d 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy
panic: Decrementing non-positive ref count ADDR, owned by tun.tunEndpoint 2 syz, C 19 348d 348d 26/26 347d 20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.
kvm: panic: Watchdog goroutine is stuck (7) -1 syz 4 354d 370d 26/26 352d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
panic: Watchdog goroutine is stuck (4) 2 syz 250 352d 437d 26/26 352d 973cf7601abe Fix incorrect lock order in execve(2) around TaskSet.mu
DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1 -1 syz 3 369d 372d 26/26 366d 1941bc68e20d Fix race between unshare(2) and execve(2).
DATA RACE in kernel.(*Task).Unshare -1 syz, C 6 371d 373d 26/26 366d 1941bc68e20d Fix race between unshare(2) and execve(2).
kvm: panic: Sentry detected stuck tasks (28) -1 syz, C 11 440d 444d 26/26 416d 973b2f23e566 Check for fatal signals and reset watchdog during MM.mapASLocked().
DATA RACE in packetmmap.(*Endpoint).Init (5) -1 syz 2 473d 475d 26/26 470d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*ringBuffer).init (3) -1 syz, C 9 473d 478d 26/26 471d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (5) -1 syz, C 19 473d 478d 26/26 471d a98032f6cc71 Add locking around ringbuffer fields and reserve in packetmmap endpoint.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (4) -1 syz, C 4 482d 483d 26/26 479d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader (2) -1 syz, C 3 483d 483d 26/26 479d f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.
DATA RACE in packetmmap.(*Endpoint).Init (4) -1 syz, C 9 482d 487d 26/26 480d 5790f690667a lock around getting the current time from the stack.
DATA RACE in packetmmap.(*Endpoint).marshalFrameHeader -1 syz, C 6 487d 487d 26/26 485d 5790f690667a lock around getting the current time from the stack.
kvm: panic: Sentry detected stuck tasks (27) -1 syz, C 5 489d 491d 26/26 485d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: Sentry detected stuck tasks (29) 2 syz, C 51 487d 492d 26/26 487d 1a3d4f6eb7cc Create a separate mutex for packet mmap fields in packet endpoints.
panic: runtime error: index out of range [NUM] with length NUM (6) 2 syz, C 227 500d 500d 26/26 492d cd8fcab3446c Fix range check on socket option counter metric.
kvm: panic: Sentry detected stuck tasks (25) -1 syz, C 3409 500d 596d 26/26 492d bc724d81d2f7 Avoid a deadlock in packet endpoint's Close method.
panic: runtime error: index out of range [-NUM] (2) 2 syz, C 19 495d 495d 26/26 492d 49b9d83fc867 Consolidate helper functions around unimplemented socket option metrics
panic: Sentry detected stuck tasks (28) 2 syz, C 11282 492d 596d 26/26 492d 45adb00f5086 fuse,vfs: don't FUSE_GETATTR for /proc/mountinfo
panic: invalid field value or did not reuse the same FieldValue pointer as passed in NewField 2 syz, C 56 500d 500d 26/26 492d 3f22efe2ac35 Return ENOPROTOOPT from setsockopt syscalls as default.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (3) -1 syz, C 4 506d 507d 26/26 506d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
DATA RACE in packetmmap.(*Endpoint).Init (3) -1 syz 3 507d 507d 26/26 506d 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.
panic: runtime error: slice bounds out of range [NUM:NUM] (3) 2 syz, C 20 510d 511d 26/26 507d e3ca602624c1 Check for bad values of the packet mmap reserve option.
DATA RACE in kernel.(*ThreadGroup).endGroupStopLocked -1 syz 6 521d 522d 26/26 516d 8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.
panic: runtime error: invalid memory address or nil pointer dereference (28) 2 syz, C 21 565d 565d 26/26 563d 95ad423f8c05 Don't return empty translation in ring buffer during bus error.
panic: runtime error: index out of range [NUM] with length NUM (5) 2 syz, C 165 565d 568d 26/26 565d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*Endpoint).HandlePacket (2) -1 syz, C 1 568d 568d 26/26 565d d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
DATA RACE in packetmmap.(*Endpoint).ConfigureMMap -1 syz, C 2 569d 569d 26/26 568d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*Endpoint).Init (2) -1 syz, C 9 568d 569d 26/26 568d 25084ce9ed1e Add locking around packetmmap initialization and mode.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus (2) -1 syz, C 19 568d 569d 26/26 568d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).HandlePacket -1 syz, C 3 569d 569d 26/26 568d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).GetPacketMMapOpts -1 syz, C 10 569d 569d 26/26 568d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).Init -1 syz, C 7 569d 570d 26/26 569d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*Endpoint).HandlePacket -1 syz 3 569d 570d 26/26 569d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packetmmap.(*ringBuffer).currFrameStatus -1 syz, C 3 569d 570d 26/26 569d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetSockOptInt -1 syz, C 10 569d 570d 26/26 569d da7cd03064d7 Lock around packet mmap fields.
DATA RACE in packet.(*endpoint).SetPacketMMapEndpoint -1 syz, C 25 569d 570d 26/26 569d da7cd03064d7 Lock around packet mmap fields.
panic: runtime error: slice bounds out of range [NUM:NUM] (2) 2 syz, C 606 569d 570d 26/26 569d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: runtime error: index out of range [NUM] with length NUM (4) 2 syz, C 174 569d 570d 26/26 569d d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size.
panic: Sentry detected stuck tasks (27) 2 syz, C 14 604d 624d 26/26 599d 679c77e4f05e proc: Allow interrupting generation of /proc/pid/mount{s,info}
panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) (2) 2 syz, C 9 624d 624d 26/26 621d c27c9a02aef5 kernel: use the kernel context to run task destroy actions
DATA RACE in buffer.(*Buffer).PullUp -1 syz, C 2 647d 640d 26/26 625d afa323bd3070 Replace most instances of IncRef with Clone.
DATA RACE in buffer.(*ViewList).Remove -1 syz, C 4 647d 645d 26/26 625d afa323bd3070 Replace most instances of IncRef with Clone.
panic: PullUp failed (3) 2 syz, C 19 625d 645d 26/26 625d afa323bd3070 Replace most instances of IncRef with Clone.
panic: Sentry detected stuck tasks (26) 2 syz, C 17 627d 628d 26/26 627d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
kvm: panic: Sentry detected stuck tasks (24) -1 syz, C 9 627d 671d 26/26 627d c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.
panic: Sentry detected stuck tasks (25) 2 syz, C 78 629d 657d 26/26 628d 54eb79b6e80a Acquire rlock when reading link address from the bridge.
panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM 2 syz, C 34 631d 633d 26/26 629d ddaa99e5d4d2 Ignore the length field when processing the experiment extension header.
panic: nested locking: tmpfs.filesystemRWMutex: (3) 2 syz, C 88 647d 643d 26/26 642d f66f0e235a0b Fix memmap.MappingIdentity.Device/InodeID() lock ordering.
panic: runtime error: invalid memory address or nil pointer dereference (27) 2 syz, C 1117 645d 646d 26/26 645d 2b55090a5813 Do not crash when creating thread group with already-exceeded soft CPU limit.
panic: runtime error: invalid memory address or nil pointer dereference (26) 2 syz, C 7905 646d 655d 26/26 646d ae1d4ccf0298 mm: validate vseg before using it
no output from test machine (13) -1 syz, C 86992 649d 669d 26/26 649d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
panic: nested locking: tmpfs.filesystemRWMutex: (2) 2 syz, C 33 650d 653d 26/26 650d 336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent
panic: runtime error: index out of range [ADDR] with length NUM (2) 2 syz, C 23 699d 700d 26/26 698d 9d41ac1ff0b2 Fix unsigned to signed integer conversion in syserr.getHostTranslation().
panic: unknown host errno "errno NUM" (NUM) (2) 2 syz, C 286 700d 725d 26/26 699d 3971ecbc6ccd Remove linuxerr.IsValid and use syserr.IsValid instead.
lost connection to test machine (10) -1 syz 11752 716d 772d 26/26 716d 2a413db73006 kvm: check CPL to find out if the Sentry is in VM
panic: unknown host errno "errno NUM" (NUM) 2 syz, C 397 733d 769d 26/26 733d 9ecb627726cf Fix syzkaller panic for unknown error 58.
panic: No file type specified in 'mode' for InodeAttrs.Init(): mode=NUM (2) 2 syz, C 454 743d 771d 26/26 743d 834bef599679 fuse: Error out in case of unsupported file type instead of panicking.
panic: unknown host errno "errno ADDR" (ADDR) 2 syz, C 88 753d 771d 26/26 753d b1ade52f24be fuse: handle bad response errors
lost connection to test machine (9) -1 syz 8441 772d 1111d 26/26 772d cd56935ddf77 runsc: pass the GLIBC_TUNABLES env to the sandbox process
no output from test machine (11) -1 syz, C 50911 782d 904d 26/26 782d db9fab290c26 Fix a race condition in TCPDeferAcceptTimeout
panic: WARNING: circular locking detected: stack.bridgeRWMutex -> stack.stackRWMutex: 2 syz, C 27 799d 801d 26/26 795d c4dc0321aa40 Do not hold BridgeEndpoint.mu during dispatcher.DeliverNetworkPacket().
DATA RACE in futex.(*waiterList).Front -1 syz, C 1 815d 815d 26/26 807d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterEntry).SetNext -1 syz, C 3 815d 815d 26/26 807d b58e8a129d62 futex: add missing locking in lockBuckets()
DATA RACE in futex.(*waiterList).PushBack -1 syz, C 3 815d 815d 26/26 807d b58e8a129d62 futex: add missing locking in lockBuckets()
panic: runtime error: invalid memory address or nil pointer dereference (23) 2 syz, C 4239 894d 899d 26/26 894d 5f5e01d186b2 Fix panic while setting TCP_CORK off.
no output from test machine (10) -1 syz, C 19806 919d 1842d 26/26 916d 16dba7fa7677 systrap: handle stub thread crashes
panic: stub thread ADDR failed: err 0x-ADDR line NUM: sysmsg.Msg{msg: ADDR state NUM err -ADDR line NUM debug NUM app st 2 syz, C 5 961d 961d 26/26 935d fe66cae2edc7 Enumerate known systrap stub failures to exit process cleanly.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (4) 2 syz, C 22 953d 960d 26/26 950d 7b151e25d076 Don't drop the mountpoint reference in already umounted dead mountpoints.
DATA RACE in safemem.Copy (7) -1 syz, C 4 978d 978d 26/26 975d de71aae89aed `seccomp`: Use dedicated input buffer for populating seccomp cache.
kvm: panic: Sentry detected stuck tasks (22) -1 syz, C 8 999d 1009d 26/26 992d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
fatal error: stack overflow (5) -1 syz, C 23 995d 1012d 26/26 992d eaee2b213b2d Add check to pivot_root that ensures the new root is underneath the old root.
panic: attempted to rewrite jump target to a different return instruction: from={pc=NUM: {NUM NUM NUM NUM}}, to={pc=NUM: 2 syz, C 8 1010d 1010d 26/26 1005d 7cf14b7c8b5e Add equality function for BPF instructions.
fatal error: stack overflow (4) -1 syz, C 12 1012d 1016d 26/26 1012d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
kvm: panic: Sentry detected stuck tasks (21) -1 syz, C 2 1014d 1016d 26/26 1012d c16916e7d780 Move lockMountpoint to the beginning of pivot_root.
fatal error: large allocation -1 syz, C 234 1025d 1028d 26/26 1013d 917bee5b6d91 Add a size limit to `outputQueueTransformer.transform`.
panic: runtime error: slice bounds out of range [12:LINE] 2 syz, C 63 1018d 1797d 26/26 1017d c96439ecd0b4 devpts: IterDirents has to check offset and return if it is out of range
kvm: panic: Sentry detected stuck tasks (20) -1 syz, C 2 1018d 1018d 26/26 1017d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (3) 2 syz, C 16 1019d 1019d 26/26 1017d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Decrementing non-positive ref count ADDR, owned by vfs.Filesystem 2 syz, C 152 1017d 1019d 26/26 1017d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: Incrementing non-positive count ADDR on tmpfs.inode (4) 2 syz, C 24 1017d 1019d 26/26 1017d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
panic: tmpfs.inode.incLinksLocked() called with no existing links 2 syz, C 1 1019d 1019d 26/26 1017d 77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to.
kvm: panic: Sentry detected stuck tasks (18) -1 syz, C 3 1032d 1037d 26/26 1031d 429f7c439616 Move rootfs check to inside mountMu.
panic: runtime error: invalid memory address or nil pointer dereference (20) 2 syz, C 8 1032d 1039d 26/26 1032d 429f7c439616 Move rootfs check to inside mountMu.
panic: close of closed channel 2 syz, C 1192 1667d 1675d 26/26 1034d 2e3e5b606789 Create a new test dimension that mounts a FUSE fs on /tmp.
DATA RACE in vfs.(*Mount).setMountOptions -1 syz, C 5 1043d 1043d 26/26 1039d ea4f0073d4a1 Fix data race between getting mount options and updating mount options.
panic: Sentry detected stuck tasks (24) 2 syz, C 13 1046d 1052d 26/26 1046d 1407fdf120ab Fix concurrent pivot_root bug.
panic: expected socket to exist at '!N 2 syz, C 23 1049d 1049d 26/26 1046d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '$N 2 syz, C 24 1050d 1051d 26/26 1046d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at '#N 2 syz, C 23 1048d 1048d 26/26 1046d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: expected socket to exist at ' N 2 syz, C 20 1049d 1050d 26/26 1046d 707ac55a05d7 inet: don't reuse names from the abstract socket namespace map
panic: Sentry detected stuck tasks (23) 2 syz, C 23 1053d 1058d 26/26 1052d a8bc2e146626 Fix group id cleanup and tidy up some mount methods.
panic: runtime error: invalid memory address or nil pointer dereference (19) 2 syz, C 79 1061d 1075d 26/26 1059d f744f443dd7d Check before attempting to mount an anon mountpoint.
DATA RACE in kernel.(*Task).MemoryManager (3) -1 syz, C 12 1060d 1060d 26/26 1059d c39ecc4eb47a The local task in process_vm_read|writev is just the calling task.
DATA RACE in kernel.(*runExitMain).execute (2) -1 syz, C 143 1369d 1379d 26/26 1059d b66713079526 Clean up and re-enable process_vm_readv/writev
DATA RACE in binary.littleEndian.Uint64 (2) -1 syz, C 48 1369d 1379d 26/26 1059d b66713079526 Clean up and re-enable process_vm_readv/writev
DATA RACE in safemem.Copy (6) -1 syz, C 121 1369d 1370d 26/26 1059d b66713079526 Clean up and re-enable process_vm_readv/writev
panic: Unknown syscall NUM error: strconv.ParseInt: parsing "./file1": invalid syntax 2 syz, C 19 1083d 1076d 26/26 1068d 1910a4577f01 cgroupfs: do not return errors from strconv.ParseInt() to write()
panic: nested locking: kernfs.filesystemRWMutex: (6) 2 syz, C 8 1104d 1119d 26/26 1103d 755c1f242cd4 nsfs: mark inodes as anonymous
panic: Sentry detected stuck tasks (20) 2 syz, C 895 1108d 1110d 26/26 1107d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (15) -1 syz, C 186 1108d 1111d 26/26 1107d 960b564a6840 Fix small mount propagation bug.
kvm: panic: Sentry detected stuck tasks (14) -1 syz 4 1123d 1128d 26/26 1118d 118a17d92dcf kernfs: set DenySpliceIn for DynamicBytesFD
DATA RACE in udp.(*endpoint).Connect.func1 -1 syz, C 3 1137d 1130d 26/26 1122d 5babda534107 Lock around endpoint info access in UDP onICMPError.
SYZFATAL: executor NUM failed NUM times: executor NUM: exit status NUM -1 syz 48074 1124d 1542d 26/26 1124d 41bb04c14901 Implement mount namespaces
panic: runtime error: invalid memory address or nil pointer dereference (16) 2 syz, C 48 1125d 1132d 26/26 1124d ef95be6e1c10 kernel: check that a task has a network namespace
panic: Sentry detected stuck tasks (18) 2 syz, C 625 1140d 1199d 26/26 1138d e54e3668b07c Impose default tmpfs size limits correctly.
DATA RACE in pipefs.(*inode).UID -1 syz 2 1143d 1143d 26/26 1143d 02ed5839a762 Add a lock to pipefs's inode to protect a inode's attributes.
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 1 1167d 1167d 26/26 1161d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: (2) 2 syz, C 3 1167d 1167d 26/26 1161d fedbf08401fe kernel: unshare a network namespace without taking Task.mu
panic: nested locking: kernfs.filesystemRWMutex: (4) 2 syz, C 31 1174d 1268d 26/26 1174d 084a5022563f Change InvalidateDentry to return a list of vds with an extra reference.
panic: WARNING: circular locking detected: mm.activeRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 4 1210d 1210d 26/26 1178d 8c975e6e6e68 Mark some kernfs inode as Anonymous.
DATA RACE in fasync.(*FileAsync).SetOwnerTask -1 syz, C 11 1179d 1180d 26/26 1178d 5fed8c81b89a Fix data race by acquiring lock before accessing fields of FileAsync.
panic: WARNING: circular locking detected: fasync.fileMutex -> kernel.taskSetRWMutex: 2 syz, C 1 1182d 1182d 26/26 1178d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
panic: WARNING: circular locking detected: stack.packetEndpointListRWMutex -> kernel.taskSetRWMutex: 2 syz, C 3 1181d 1181d 26/26 1178d f3d87d3be121 fasync: release the FileAsync mutex before sending the signal
DATA RACE in kernel.(*TaskImage).Fork -1 syz, C 8 1288d 1289d 26/26 1195d 028cf757bbef Clarify comment about copying Task.image in Task.Clone().
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: (2) 2 syz, C 17 1200d 1201d 26/26 1199d ed528835f753 Small circular lock fix.
panic: Sentry detected stuck tasks (17) 2 syz, C 822 1199d 1464d 26/26 1199d ed528835f753 Small circular lock fix.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode (2) 2 syz, C 47 1208d 1213d 26/26 1201d 283b80a456aa Fix logic bug in attaching mounts.
panic: WARNING: circular locking detected: transport.streamQueueReceiverMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1210d 1210d 26/26 1202d 2044c3449153 Don't hold streamQueueReceiver.mu while calling RightsControlMessage.Release().
panic: WARNING: circular locking detected: transport.endpointMutex -> kernfs.filesystemRWMutex: 2 syz, C 1 1210d 1210d 26/26 1202d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
panic: WARNING: circular locking detected: vfs.virtualFilesystemMutex -> tmpfs.filesystemRWMutex: 2 syz, C 18 1323d 1398d 26/26 1202d e0b1585586c6 Remove stale `vdDentry` variable from VirtualFilesystem.connectMountAt().
panic: nested locking: transport.endpointMutex: 2 syz, C 1 1210d 1210d 26/26 1202d a7e1fe92f588 Don't hold baseEndpoint.mu when calling receiver.Recv.
panic: interface conversion: *kernel.Kernel is not unimpl.Events: missing method EmitUnimplementedEvent 2 syz, C 5857 1255d 1256d 26/26 1255d f8b98248139c Update `unimpl.EmitUnimplementedEvent` interface to add the syscall number.
panic: WARNING: circular locking detected: tmpfs.filesystemRWMutex -> kernel.taskSetRWMutex: 2 syz 14 1263d 1538d 26/26 1256d 758da469f7ed kernel: release kernel.taskSetRWMutex before calling TaskImage.Release
panic: runtime error: index out of range [ADDR] with length NUM 2 syz, C 17 1267d 1267d 26/26 1256d fc94225c333d Fix crash with large FD value
DATA RACE in vfs.(*VirtualFilesystem).PivotRoot -1 syz, C 1 1280d 1280d 26/26 1270d 807fd0fd27d0 Lock around accessing the mount namespace in pivot_root.
panic: runtime error: invalid memory address or nil pointer dereference (14) 2 syz, C 753 1279d 1280d 18/26 1279d 8a1845f8b850 Don't send a signal to a controlling thread group if one has not been set.
panic: runtime error: invalid memory address or nil pointer dereference (13) 2 syz, C 2752 1280d 1283d 18/26 1280d 8184fa1db0fa Clean up devpts code, and deduplicate the foreground process state.
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM (2) 2 syz, C 7 1285d 1287d 18/26 1283d 5817f4cc64e4 Fix FUSE how handles malformed INIT requests.
panic: nested locking: kernfs.filesystemRWMutex: (3) 2 syz 19 1292d 1316d 18/26 1289d 28472cc03fe1 don't take an unnecessary reference in proc.fdSymlink.Valid()
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry (2) 2 syz, C 13 1297d 1297d 18/26 1296d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry (2) 2 syz, C 65 1296d 1297d 18/26 1296d 1beb3e2b251d Check hard link target's mount compatibility before kernfs.Dentry cast. Again.
panic: interface conversion: vfs.DentryImpl is *vfs.anonDentry, not *kernfs.Dentry 2 syz, C 14 1299d 1302d 18/26 1297d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *tmpfs.dentry, not *kernfs.Dentry 2 syz, C 390 1297d 1303d 18/26 1297d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: interface conversion: vfs.DentryImpl is *gofer.dentry, not *kernfs.Dentry 2 syz, C 13 1299d 1300d 18/26 1299d 8373fb5db8c8 Check hard link target's mount compatibility before kernfs.Dentry cast.
panic: runtime error: index out of range [NUM] with length NUM (3) 2 syz, C 372 1315d 1318d 18/26 1315d fe562179fea1 Handle absolute symlink target '/' correctly in VFS layer.
panic: runtime error: invalid memory address or nil pointer dereference (12) 2 syz, C 31 1318d 1380d 18/26 1315d e08f204299df inet: each socket has to hold a reference to its network namespace
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: (2) 2 syz, C 53 1353d 1355d 14/26 1353d bc440b67fce0 Don't hold nic.mu when calling n.linkResQueue.cancel.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.neighborCacheRWMutex: 2 syz, C 356 1355d 1361d 14/26 1355d 70be2fc8a772 Remove unsetting route's cached neighbor entry in link res callback.
panic: WARNING: circular locking detected: stack.packetsPendingLinkResolutionMutex -> stack.routeRWMutex: 2 syz, C 2602 1355d 1361d 14/26 1355d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
panic: WARNING: circular locking detected: stack.nicRWMutex -> stack.packetsPendingLinkResolutionMutex: 2 syz, C 1246 1355d 1361d 14/26 1355d 4f326de47636 Make nic.spoofing and nic.promiscuous atomic Bools to avoid lock contention.
panic: WARNING: circular locking detected: kernel.signalHandlersMutex -> kernfs.filesystemRWMutex: 2 syz, C 351 1366d 1368d 14/26 1366d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: WARNING: circular locking detected: kernel.taskSetRWMutex -> kernfs.filesystemRWMutex: 2 syz, C 2320 1366d 1368d 14/26 1366d d0ae59368d8a cgroupfs: Fix lock ordering between kernfs.Filesystem.mu and TaskSet.mu.
panic: Decrementing non-positive ref count ADDR, owned by tmpfs.inode 2 syz, C 27 1368d 1369d 14/26 1368d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: Incrementing non-positive count ADDR on tmpfs.inode (2) 2 syz, C 56 1368d 1369d 14/26 1368d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: kernfs.Dentry.DecRef() called without holding a reference (2) 2 syz, C 61 1368d 1369d 14/26 1368d 1823b16fccf7 Clean up DecRefs in mount methods.
panic: Lock not held: transport.endpointMutex[e]: 2 syz, C 1191 1369d 1370d 14/26 1369d 1ceee8c31071 connectioned: Change nested lock name to only have a single nested lock.
DATA RACE in safemem.Copy (5) -1 syz, C 3153 1370d 1380d 14/26 1370d ae731e0394f5 Don't use other process's scratch buffer.
panic: WARNING: circular locking detected: kernel.taskMutex -> kernel.taskSetRWMutex: 2 syz, C 1470 1380d 1381d 14/26 1378d 38a0512f13fa Fix circular lock in process_vm_(read|write)v
DATA RACE in binary.littleEndian.Uint64 -1 syz, C 29 1479d 1482d 14/26 1381d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR 2 syz, C 914 1381d 1398d 14/26 1381d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
DATA RACE in safemem.Copy (4) -1 syz, C 1019 1479d 1482d 14/26 1381d 106f6ea96746 Re-enable process_vm_(read|write)v
panic: runtime error: slice bounds out of range [ADDR:NUM] 2 syz, C 13 1385d 1385d 14/26 1381d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM 2 syz, C 124 1381d 1398d 14/26 1381d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: runtime error: integer divide by zero (3) 2 syz, C 443 1381d 1398d 14/26 1381d 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
panic: Unknown syscall -NUM error: EOF 2 syz, C 14 1385d 1387d 14/26 1381d f3aaf4326636 io_ring: Handle EOF on IORING_OP_READV
DATA RACE in tmpfs.AddSeals -1 syz, C 4 1386d 1386d 14/26 1383d 374e716c7ce2 AddSeals has to take the write lock to modify seals
panic: runtime error: slice bounds out of range [:NUM] with capacity NUM 2 syz, C 196 1667d 1675d 14/26 1384d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: runtime error: invalid memory address or nil pointer dereference (11) 2 syz, C 2733 1388d 1482d 14/26 1387d ae136df84998 Add nil-check for parent mount in umount(2) while handling mount propagation.
DATA RACE in vfs.(*VirtualFilesystem).setPropagation -1 syz, C 3 1401d 1401d 14/26 1388d 20ef2127a102 Lock around optional tag generation.
DATA RACE in bufferv2.newChunk -1 syz, C 68 1395d 1410d 14/26 1394d 6b3b5493d0ea Fix ipv6 header view ownership.
DATA RACE in vfs.(*VirtualFilesystem).GenerateProcMountInfo -1 syz, C 2 1399d 1401d 14/26 1398d 20ef2127a102 Lock around optional tag generation.
panic: runtime error: integer divide by zero (2) 2 syz, C 56 1398d 1398d 14/26 1398d d4b159ae93b5 iouring: Disallow zero, or less CQ entries than SQ entries
panic: nested locking: kernel.taskSetRWMutex: 2 syz, C 2 1457d 1457d 14/26 1404d c1427a04dfba Disable fasync for signalfd descriptors
panic: Decrementing non-positive ref count ADDR, owned by kernel.ProcessGroup (2) 2 syz, C 3 1422d 1457d 14/26 1422d 36ddd3050cc2 Check if ThreadGroup exists before executing JoinProcessGroup.
panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: NUM, proposed charg 2 syz, C 97 1460d 1580d 14/26 1460d 46e08207b58f cgroupfs: Handle hierachy changes across charge/uncharge.
DATA RACE in fuse.newFUSEFilesystem -1 syz, C 384 1667d 1675d 14/26 1483d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: WARNING: circular locking detected: tmpfs.inodeMutex -> mm.activeRWMutex: 2 syz, C 8353 1538d 1538d 14/26 1535d 82498d087ef8 Don't hold MM.activeMu when calling MM.vmaMapsEntryLocked().
panic: invalid allocation length: 0x0 (4) 2 syz, C 4338 1543d 1545d 14/26 1543d 3290a054c5bd getdents: Test that size parameter is not zero before allocating PMAs.
panic: runtime error: index out of range [-NUM] 2 syz, C 13 1574d 1574d 14/26 1571d a7cad2b092de Tmpfs with size option enabled bug fix.
DATA RACE in fuse.(*connection).callFutureLocked -1 syz, C 2 1672d 1675d 14/26 1580d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Read -1 syz, C 238 1669d 1675d 14/26 1580d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.newFUSEConnection -1 syz, C 52 1669d 1675d 14/26 1580d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PWrite -1 syz, C 11 1672d 1675d 14/26 1580d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).PRead -1 syz, C 9 1671d 1675d 14/26 1580d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
DATA RACE in fuse.(*DeviceFD).Seek -1 syz, C 8 1674d 1675d 14/26 1580d 32c474d82f65 Allow multiple FUSE filesystems to share a connection.
panic: unexpected tcp state in processor: BOUND 2 syz, C 36 1591d 1594d 14/26 1591d 3b917921d7fe Fix race in listen.
DATA RACE in cgroupfs.(*memsData).Write -1 syz, C 4 1602d 1602d 14/26 1594d 5f9bd8a53b20 cgroupfs: Synchronize access to cpuset controller bitmaps.
panic: unknown network protocol number NUM 2 syz, C 56 1683d 1695d 14/26 1613d 6a28dc7c5963 Correct fragmentation reference counting.
panic: runtime error: invalid memory address or nil pointer dereference (10) 2 syz, C 11 1619d 1626d 14/26 1619d 5835bc8c3a4b cgroupfs: Handle invalid PID/PGID on migration.
DATA RACE in kernfs.(*OrderedChildren).checkExistingLocked -1 syz, C 1 1642d 1642d 14/26 1620d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
panic: Inode doesn't match what kernfs thinks! OrderedChild: &{dir:{InodeNoopRefCount:{InodeTemporary:{}} InodeAlwaysVal 2 syz, C 12 1626d 1642d 14/26 1620d 9085d334deed kernfs: Handle duplicate unlink on orphaned directories.
DATA RACE in bitmap.(*Bitmap).Maximum -1 syz, C 8 1633d 1642d 14/26 1633d 4503ba3f5efd Fix data race when using UNSHARE in close_range.
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 (2) -1 syz, C 4 1650d 1643d 14/26 1639d b1ceabc884c0 Hold baseEndpoint.mu when calling baseEndpoint.Connected()
panic: Sentry detected stuck tasks (15) 2 syz, C 2582 1652d 1729d 14/26 1647d 510cc2f7fca9 Fix pivot_root lock inversion.
Invalid request partialResult in sendto (3) -1 syz, C 9 1650d 1650d 14/26 1648d 395c38be75d1 Add ECONNABORTED to the partial result error list.
kvm: panic: Sentry detected stuck tasks (5) -1 syz, C 65 1655d 1716d 14/26 1654d b413d78c27db sendfile: limit a buffer size
panic: runtime error: invalid memory address or nil pointer dereference (9) 2 syz, C 262 1667d 1663d 14/26 1662d b7ccfa5084e2 Fixes #7086,#6964,#3413,#7001.
panic: Unknown syscall NUM error: payload too small. Minimum data lenth required: NUM, but got data length NUM 2 syz, C 79 1668d 1674d 14/26 1668d 55ef37166897 Return well-defined error on short payload in FUSE.
fatal error: sync: unlock of unlocked mutex -1 syz, C 26 1668d 1669d 14/26 1668d 10d1a49c5ba2 Fuse: `DeviceFD.Read`: Lock `DeviceFD` ahead of other locks.
DATA RACE in fuse.(*connection).initProcessReply -1 syz, C 14 1669d 1674d 14/26 1669d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).writeLocked -1 syz, C 33 1669d 1674d 14/26 1669d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*connection).Call -1 syz, C 65 1669d 1673d 14/26 1669d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in fuse.(*DeviceFD).Release -1 syz, C 404 1669d 1674d 14/26 1669d a5ce865145c7 fuse: Attempt to fix five data races.
DATA RACE in stack.(*PacketBuffer).reset (2) -1 syz 2 1695d 1695d 14/26 1670d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: runtime error: invalid memory address or nil pointer dereference (8) 2 syz, C 214 1670d 1695d 14/26 1670d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: Incrementing non-positive count ADDR on stack.PacketBuffer 2 syz, C 9 1682d 1682d 14/26 1670d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
panic: runtime error: index out of range [NUM] with length NUM (2) 2 syz, C 21 1676d 1683d 14/26 1676d 5fb527632358 Handle 0 sized writes to /dev/net/tun.
panic: PullUp failed (2) 2 syz 4 1685d 1693d 14/26 1682d 6d15b0ee64f1 Fix packet buffer reference counting in IP fragmentation/reassembly.
DATA RACE in udp.(*endpoint).Connect (2) -1 syz, C 4 2103d 2109d 14/26 1706d 2485a4e2cb4a Make stack.Route safe to access concurrently
kvm: panic: Sentry detected stuck tasks (4) -1 syz, C 627 1724d 1751d 14/26 1724d 4d29819e13a1 pipe: have separate notifiers for readers and writers
SYZFAIL: tun: can't open /dev/net/tun -1 syz 339 1762d 2015d 14/26 1762d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
kvm: no output from test machine (2) -1 syz, C 23 1763d 1840d 14/26 1762d 58017e655399 Handle UMOUNT_NOFOLLOW in VFS2 umount(2).
DATA RACE in cgroupfs.(*cpusData).Write -1 syz, C 6 1767d 1772d 14/26 1767d 6078d26588c0 Sychronize access to cpuset controller bitmaps.
panic: runtime error: index out of range [NUM] with length NUM 2 syz, C 12 1769d 1771d 14/26 1768d f54a25c1f03e Validate an icmp header before accessing it
panic: runtime error: invalid memory address or nil pointer dereference (7) 2 syz, C 45305 1768d 1797d 14/26 1768d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: kernfs.Dentry.DecRef() called without holding a reference 2 syz, C 87 1768d 1772d 14/26 1768d 763d7e6e396d Obtain ref on root dentry in mqfs.GetFilesystem.
panic: Only permission mask must be set: ADDR 2 syz, C 756 1769d 1773d 14/26 1769d 4d07fc952d6b Do not leak non-permission mode bits in mq_open(2).
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (3) -1 syz, C 2034 1797d 1891d 14/26 1796d 0bdd79ccd469 kvm: trap mmap syscalls to map new regions to the guest
DATA RACE in safemem.Copy (3) -1 syz, C 3 1802d 1802d 14/26 1797d 1fe0a6691ff5 Prevent PacketData from being modified.
Invalid request partialResult in pwritev -1 syz, C 278 1990d 2008d 14/26 1800d 7fac7e32f3a8 Translate syserror when validating partial IO errors
Invalid request partialResult in sendto (2) -1 syz, C 10 1836d 1910d 14/26 1800d e5fe488b2273 Wake up Writers when tcp socket is shutdown for writes.
kvm: panic: Sentry detected stuck tasks (2) -1 syz, C 66 1807d 1970d 14/26 1800d 1947c873423c Fix deadlock in /proc/[pid]/fd/[num]
DATA RACE in msgqueue.(*Queue).pop -1 syz, C 2 1834d 1834d 14/26 1810d d6c99694bcb9 Fix race on msgrcv(MSG_COPY).
panic: Sentry detected stuck tasks (11) 2 syz, C 31 1824d 1951d 14/26 1822d 9149b2cefdb5 unix: avoid taking two endpoint locks
panic: runtime error: makeslice: len out of range (3) 2 syz, C 10 1824d 1824d 14/26 1823d 927ea16dd384 unix: handle a case when a buffer is overflowed
panic: unknown error: SIGBUS at ADDR 2 syz, C 17 1826d 1840d 14/26 1825d dfbcb8903ae8 [syserr] Fix SIGBUS on syserr.FromError
DATA RACE in safemem.Copy (2) -1 syz, C 9 1850d 1850d 14/26 1839d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
DATA RACE in buffer.(*buffer).Remove -1 syz, C 2 1850d 1850d 14/26 1839d 6d0b40b1d159 [op] Make PacketBuffer Clone() do a deeper copy.
no output from test machine (9) -1 syz, C 2298 1850d 2005d 14/26 1850d 569f605f438d Correctly handle interruptions in blocking msgqueue syscalls.
panic: unable to find an index for ID: 0 2 syz, C 1497 1863d 1864d 14/26 1863d 3d0a9300050a Don't panic on user-controlled state in semaphore syscalls.
DATA RACE in atomic.CompareAndSwapInt32 (4) -1 syz 4 1877d 1870d 14/26 1865d a89b2f005b71 Use atomics when checking for parent setgid in VFS2 tmpfs file creation.
FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF (2) -1 syz, C 2532 1891d 2504d 14/26 1891d d703340bc04a runsc: don't kill sandbox, let it stop properly
kvm: panic: Watchdog goroutine is stuck (3) -1 syz, C 48 1907d 1957d 14/26 1905d 3fcbad509300 Fix lock ordering issue when enumerating cgroup tasks.
panic: PullUp failed 2 syz, C 615 1933d 1934d 14/26 1933d 436148d68a50 Fix panic on consume in a mixed push/consume case
panic: Incrementing non-positive count ADDR on vfs.Filesystem 2 syz, C 2 1951d 1951d 14/26 1933d 78ae3db1a39c Fix cgroup hierarchy registration.
DATA RACE in cgroupfs.FilesystemType.GetFilesystem -1 syz, C 1 1951d 1944d 14/26 1933d 78ae3db1a39c Fix cgroup hierarchy registration.
panic: Sentry detected stuck tasks (10) 2 syz, C 264 1958d 2011d 14/26 1958d b0333d33a206 Optimize safemem.Zero
panic: Watchdog goroutine is stuck 2 syz, C 1831 1965d 2263d 14/26 1964d f4f6ce337aa8 Don't grab TaskSet mu recursively when reading task state.
panic: makechan: size out of range 2 syz, C 183 1968d 1972d 14/26 1968d dc8f6c691474 Move maxListenBacklog check to sentry
fatal error: unexpected signal during runtime execution -1 syz 272 2036d 2725d 14/26 1968d eb9b8e53a3ef platform/kvm/x86: restore mxcsr when switching from guest to sentry
Invalid request partialResult in write (2) -1 syz, C 11628 1985d 2050d 14/26 1985d 7fac7e32f3a8 Translate syserror when validating partial IO errors
kvm: panic: Sentry detected stuck tasks -1 syz, C 152 1985d 2001d 14/26 1985d 2f3dac78ca9a kvm: prefault a floating point state before restoring it
panic: Sentry detected stuck tasks (8) 2 syz, C 64 2012d 2013d 14/26 2012d f5692f7dcc48 Kernfs should not try to rename a file to itself.
no output from test machine (8) -1 syz, C 15268 2012d 2116d 14/26 2012d acd516cfe292 Add YAMA security module restrictions on ptrace(2).
panic: running on goroutine 582 (task goroutine for kernel.Task ADDR is 400) 2 syz, C 1 2017d 2017d 14/26 2013d 6e000d3424c0 Use async task context for async IO.
panic: unknown error *tcpip.ErrMalformedHeader 2 syz, C 5 2029d 2022d 14/26 2013d c39284f45738 Let sentry understand tcpip.ErrMalformedHeader
panic: Sentry detected stuck tasks (7) 2 syz 2567 2014d 2045d 14/26 2014d c5a4e100085c unix: sendmmsg and recvmsg have to cap a number of message to UIO_MAXIOV
panic: wd changed: "/tmp" -> "(unreachable)/" 2 syz 2534 2026d 2107d 14/26 2025d 97a36d169698 Don't allow to umount the namespace root mount
Invalid request partialResult in sendto -1 syz, C 236 2035d 2038d 14/26 2026d d6d169320cd4 Add ETIMEDOUT to partial result list
panic: Incrementing non-positive count ADDR on kernel.ProcessGroup 2 syz, C 12 2043d 2044d 14/26 2026d fe4f4789601d kernel: reparentLocked has to update children maps of old and new parents
panic: Child "." for parent Dentry &{vfsd:{mu:{m:{Mutex:{state:LINE sema:LINE}}} dead:false mounts:LINE impl:ADDR} refs: 2 syz, C 13 2027d 2037d 14/26 2026d 09afd6832689 [vfs] Handle `.` and `..` as last path component names in kernfs Rename.
panic: Start ADDR + offset ADDR overflows? 2 syz, C 19 2052d 2358d 14/26 2026d bf4968e17d7d exec: don't panic if an elf file is malformed
panic: Decrementing non-positive ref count ADDR, owned by vfs.FileDescription 2 syz, C 12 2057d 2052d 14/26 2041d abdff887483f Do not send SCM Rights more than once when message is truncated.
DATA RACE in safemem.Copy -1 syz, C 4 2045d 2045d 14/26 2042d 76da673a0dda Do not modify IGMP packets when verifying checksum
panic: Sentry detected stuck tasks (6) 2 syz 714 2046d 2097d 14/26 2045d e57ebcd37a7b Simplify the pipe implementation.
panic: IPv6 payload too large: NUM, must be <= NUM 2 syz, C 46 2053d 2086d 14/26 2051d ec9e263f213c Correctly return EMSGSIZE when packet is too big in raw socket.
panic: buffer too long by 8 bytes 2 syz, C 12 2066d 2083d 14/26 2062d ce7a4440cae8 Fix panic when parsing SO_TIMESTAMP cmsg
panic: runtime error: invalid memory address or nil pointer dereference (5) 2 syz 62 2063d 2107d 14/26 2062d 2a200811d4c9 fs/fuse: check that a task has a specified file descriptor
panic: runtime error: integer divide by zero 2 syz, C 116 2186d 2212d 14/26 2069d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
panic: error when reading RouterAlert option's data bytes: EOF 2 syz, C 35 2084d 2086d 14/26 2069d c55e5bda4d45 Validate router alert's data length
DATA RACE in raw.(*endpoint).HandlePacket -1 syz, C 5 2082d 2082d 14/26 2069d 981faa2c1229 RLock Endpoint in raw.Endpoint.HandlePacket
panic: header.ScopeForIPv6Address(172.20.20.170): bad address 2 syz, C 48 2090d 2097d 14/26 2069d b15acae9a6e2 Fix error code for connect in raw sockets.
panic: Unknown syscall 165 error: strconv.ParseInt: parsing "ADDR": invalid syntax 2 syz, C 51 2091d 2097d 14/26 2069d 9c198e5df421 Fix error handling on fusefs mount.
DATA RACE in header.ICMPv6Checksum -1 syz, C 1 2083d 2083d 14/26 2069d 946cb909e62e Don't modify a packet header when it can be used by other endpoints
panic: Unknown syscall 8 error: EOF 2 syz 22 2080d 2087d 14/26 2069d 1ea241e4cc95 Fix seek on /proc/pid/cmdline when task is zombie.
panic: Stack for running G's are skipped while panicking. 2 syz, C 2426 2368d 2622d 14/26 2071d ab7ecdd66d2a watchdog: print panic error message before other messages
panic: Sentry detected stuck tasks (5) 2 syz 83 2098d 2111d 0/26 2098d 79e2364933bb Fix deadlock in UDP handleControlPacket path.
DATA RACE in log.GoogleEmitter.Emit -1 syz, C 34 2109d 2115d 0/26 2108d 9c553f2d4e4b Remove racy stringification of socket fds from /proc/net/*.
panic: runtime error: slice bounds out of range [255:LINE] 2 syz, C 5 2112d 2113d 0/26 2109d 49adf36ed7d3 Fix possible panic due to bad data.
panic: Sentry detected stuck tasks (4) 2 syz, C 5 2111d 2112d 0/26 2111d 05d2a26f7a86 Fix possible deadlock in UDP.Write().
panic: Incrementing non-positive count ADDR on tmpfs.inode 2 syz 2 2114d 2114d 0/26 2111d 10ba578c0182 tmpfs: make sure that a dentry will not be destroyed before the open() call
panic: Sentry detected stuck tasks (3) 2 syz, C 180 2112d 2116d 0/26 2112d 267560d159b2 Reset watchdog timer between sendfile() iterations.
panic: runtime error: invalid memory address or nil pointer dereference (4) 2 syz, C 4 2123d 2142d 0/26 2116d 4e389c785779 Check for nil in kernel.FSContext functions.
panic: Sentry detected stuck tasks (2) 2 syz, C 951 2116d 2157d 0/26 2116d db36d948fa63 TCP Receive window advertisement fixes.
no output from test machine (7) -1 syz, C 184 2116d 2143d 0/26 2116d 34a6e9576a96 loader/elf: validate file offset
panic: runtime error: makeslice: len out of range (2) 2 syz, C 5 2116d 2143d 0/26 2116d cd108432a50e splice: return EINVAL is len is negative
panic: Child "" for parent Dentry &{vfsd:{mu:{Mutex:{state:LINE sema:LINE}} dead:false mounts:LINE impl:ADDR} DentryRefs 2 syz, C 3 2121d 2129d 0/26 2116d 1321f837bd9f [vfs2] Refactor kernfs checkCreateLocked.
panic: unknown error: EOF 2 syz, C 68 2144d 2147d 0/26 2143d c002fc36f9bb sockets: ignore io.EOF from view.ReadAt
no output from test machine (6) -1 syz 1873 2150d 2157d 0/26 2150d 76a09f0cf599 syscalls: Don't leak a file on the error path
no output from test machine (5) -1 syz, C 86414 2157d 2272d 0/26 2157d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
panic: Sentry detected stuck tasks 2 syz, C 506 2157d 2177d 0/26 2157d de85b045d42f kvm/x86: handle a case when interrupts are enabled in the kernel space
DATA RACE in tcp.(*endpoint).bindLocked -1 syz 2 2187d 2187d 0/26 2180d 38cdb0579b69 Fix data race in tcp.GetSockOpt.
panic: runtime error: invalid memory address or nil pointer dereference (3) 2 syz, C 20051 2189d 2725d 0/26 2181d b3ff31d041c9 fix panic when calling SO_ORIGINAL_DST without initializing iptables
DATA RACE in transport.(*connectionedEndpoint).Connect.func1 -1 syz 21 2264d 2270d 0/26 2263d 70c45e09cfd1 socket/unix: (*connectionedEndpoint).State() has to take the endpoint lock
panic: Sentry detected 1 stuck task(s): 2 syz, C 6204 2274d 2360d 0/26 2271d 4950ccde75b3 Fix write hang bug found by syzkaller.
DATA RACE in fs.(*File).offsetForAppend -1 syz 2 2279d 2279d 0/26 2276d 7da69fe9719b Fix data race on f.offset.
DATA RACE in kernel.(*Task).accountTaskGoroutineEnter -1 syz 2 2302d 2302d 0/26 2299d 8dd1d5b75a95 Don't call kernel.Task.Block() from netstack.SocketOperations.Write().
panic: close of nil channel 2 syz 6 2321d 2325d 0/26 2318d 37f863f62813 tcp: handle listen after shutdown properly
panic: interface conversion: context.Context is kernel.taskAsyncContext, not *kernel.Task 2 syz 16 2331d 2347d 0/26 2331d c9195349c9ac Replace type assertion with TaskFromContext.
panic: runtime error: makeslice: len out of range 2 syz 49 2333d 2355d 0/26 2333d a10389e783aa splice: cap splice calls to MAX_RW_COUNT
DATA RACE in tcp.(*endpoint).Readiness -1 syz 2 2353d 2353d 0/26 2347d d04adebaab86 Fix data-race in endpoint.Readiness
DATA RACE in netstack.(*SocketOperations).SetSockOpt -1 syz 2 2352d 2352d 0/26 2350d 369cf38bd718 Fix data race in SetSockOpt.
DATA RACE in tcp.(*endpoint).SetSockOpt -1 syz 26 2355d 2375d 0/26 2350d e9e399c25d4f Remove workMu from tcpip.Endpoint.
DATA RACE in udp.(*endpoint).SetSockOptBool -1 syz 2 2369d 2362d 0/26 2353d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
no output from test machine (3) -1 syz, C 11663 2356d 2444d 0/26 2356d b55f0e5d40c1 fdtable: don't try to zap fdtable entry if close is called for non-existing fd
fatal error: out of memory (3) -1 syz 3 2362d 2362d 0/26 2361d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: too many address space collisions for -race mode -1 syz 3 2362d 2362d 0/26 2361d 81675b850e27 Fix memory leak in danglingEndpoints.
fatal error: concurrent map iteration and map write (2) -1 syz 1 2373d 2373d 0/26 2363d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in udp.(*endpoint).Connect -1 syz 10 2369d 2375d 0/26 2363d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).RemoveXattr -1 syz 2 2373d 2373d 0/26 2363d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in tcp.(*endpoint).windowCrossedACKThreshold -1 syz 10 2375d 2376d 0/26 2363d 33101752501f Fix data-race when reading/writing e.amss.
DATA RACE in stack.(*TransportEndpointInfo).AddrNetProto -1 syz 148 2368d 2376d 0/26 2363d c15b8515eb4a Fix datarace on TransportEndpointInfo.ID and clean up semantics.
fatal error: concurrent map read and map write (2) -1 syz 2 2373d 2373d 0/26 2363d 62bd3ca8a375 Take write lock when removing xattr
panic: runtime error: index out of range [1] with length 0 2 syz, C 1518 2368d 2375d 0/26 2363d 43abb24657e7 Fix panic caused by invalid address for Bind in packet sockets.
DATA RACE in netstack.(*SocketOperations).fetchReadView -1 syz 12 2369d 2375d 0/26 2363d 42fb7d349137 socket: take readMu to access readView
DATA RACE in fsutil.(*InodeSimpleExtendedAttributes).GetXattr -1 syz 3 2373d 2373d 0/26 2363d 62bd3ca8a375 Take write lock when removing xattr
DATA RACE in fs.(*UnstableAttr).SetOwner (2) -1 syz 3 2409d 2402d 0/26 2375d 115898e368e4 Prevent DATA RACE in UnstableAttr.
DATA RACE in fs.(*Dirent).IncRef -1 syz 1 2401d 2394d 0/26 2375d 53504e29ca27 Fix mount refcount issue.
panic: Incrementing non-positive ref count (4) 2 syz, C 5 2393d 2395d 0/26 2375d 53504e29ca27 Fix mount refcount issue.
panic: wait failed: the process 9793:LINE exited: 1f (err <nil>) 2 syz, C 1 2447d 2440d 0/26 2376d 17c18241cdeb platform/syscall: use syscall + int3 to execute a system call in a stub process
panic: runtime error: slice bounds out of range [:LINE] with capacity 16 2 syz 42 2427d 2438d 0/26 2376d b3ae8a62cfdf Fix slice bounds out of range panic in parsing socket control message.
Invalid request partialResult in splice (2) -1 syz 134 2405d 2441d 0/26 2402d f263801a74d4 fs/splice: don't report partial errors for special files
panic: invalid allocation length: 0x0 (3) 2 syz 12 2406d 2406d 0/26 2402d ede8dfab3760 Enforce splice offset limits
DATA RACE in tty.(*queue).readableSize -1 syz 2 2418d 2418d 0/26 2415d 80d0f9304484 Fix data race in tty.queue.readableSize.
DATA RACE in fsutil.(*InodeSimpleAttributes).SetPermissions -1 syz 3 2445d 2445d 0/26 2445d bb00438f36eb Make masterInodeOperations.Truncate take a pointer receiver.
no output from test machine (2) -1 syz, C 6325 2451d 2568d 0/26 2451d 378d6c1f3697 unix: allow to bind unix sockets only to AF_UNIX addresses
DATA RACE in fs.Rename (2) -1 syz, C 433 2703d 2725d 0/26 2458d 89cc8eef9ba6 DATA RACE in fs.(*Dirent).fullName
Invalid request partialResult in sendfile (2) -1 syz, C 1341 2524d 2725d 0/26 2522d db218fdfcf16 Don't report partialResult errors from sendfile
Invalid request partialResult in splice -1 syz, C 206 2525d 2574d 0/26 2525d 7a234f736fe0 splice: try another fallback option only if the previous one isn't supported
lost connection to test machine (3) -1 syz, C 30758 2575d 2725d 0/26 2572d af90e68623c7 netlink: return an error in nlmsgerr
panic: node.Readdir returned offset -ADDR less than input offset ADDR 2 syz, C 26 2641d 2725d 0/26 2572d ab6774cebf5c gvisor/fs: getdents returns 0 if offset is equal to FileMaxOffset
DATA RACE in ramfs.(*dirFileOperations).Readdir -1 syz 1 2774d 2725d 0/26 2573d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
no output from test machine -1 syz, C 27191 2575d 2725d 0/26 2575d af90e68623c7 netlink: return an error in nlmsgerr
DATA RACE in kernel.(*Kernel).EmitUnimplementedEvent -1 syz 3 2586d 2587d 0/26 2586d cf2b2d97d512 Initialize kernel.unimplementedSyscallEmitter with a sync.Once.
panic: Unknown syscall 85 error: link should be resolved via Readlink() 2 syz 64 2609d 2607d 0/26 2606d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 2 error: link should be resolved via Readlink() 2 syz 16 2610d 2607d 0/26 2606d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Unknown syscall 257 error: link should be resolved via Readlink() 2 syz 14 2610d 2614d 0/26 2607d 6db3f8d54c02 Don't mask errors in createAt loop.
panic: Incrementing non-positive ref count (2) 2 syz, C 183 2614d 2621d 0/26 2613d 4f2f44320f9b Simplify (and fix) refcounts in createAt.
DATA RACE in atomic.StoreInt64 -1 syz 2 2629d 2633d 0/26 2621d 8ab0848c70fc gvisor/fs: don't update file.offset for sockets, pipes, etc
DATA RACE in mm.(*MemoryManager).Brk -1 syz 14 2662d 2678d 0/26 2661d 14f0e7618e28 Ensure all uses of MM.brk occur under MM.mappingMu in MM.Brk().
panic: hashed child "stat\t\xe9\xdc\xdf\x02\x02\x98\xcc\xf3<\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q\nI\xf81U\ro}\xe 2 syz, C 7 2704d 2697d 0/26 2679d 2df64cd6d2c8 createAt should return all errors from FindInode except ENOENT.
DATA RACE in tty.(*queue).WriteFromBlocks -1 syz 7 2706d 2709d 0/26 2705d c79e81bd27cd Addresses data race in tty implementation.
panic: runtime error: index out of range (2) 2 syz, C 7191 2705d 2710d 0/26 2705d 82529becaee6 Fix index out of bounds in tty implementation.
DATA RACE in atomic.CompareAndSwapInt32 (2) -1 syz 2 2707d 2707d 0/26 2705d d14a7de65865 Fix more data races in shm debug messages.
DATA RACE in atomic.CompareAndSwapInt32 -1 syz, C 9 2712d 2725d 0/26 2708d cea1dd7d21b9 Remove racy access to shm fields.
DATA RACE in netlink.(*Socket).SetSockOpt -1 syz 2 2724d 2724d 0/26 2708d 7b33df68450b Fix data race in netlink send buffer size
DATA RACE in fsutil.(*InodeSimpleAttributes).UnstableAttr -1 syz 8 2773d 2776d 0/26 2770d 09cf3b40a899 Fix data race in InodeSimpleAttributes.Unstable.
panic: invalid allocation length: 0x0 (2) 2 syz, C 4 2812d 2813d 0/26 2811d 3b3f02627870 Truncate ar before calling mm.breakCopyOnWriteLocked().
DATA RACE in shm.(*Registry).findByKey -1 syz, C 47 2923d 2989d 0/26 2817d f93c288dd708 Fix a data race on Shm.key.
panic: invalid type: int 2 syz, C 559 2837d 2938d 0/26 2818d 5560615c531b Return an int32 for netlink SO_RCVBUF
panic: ptrace set regs failed: input/output error 2 syz, C 712 2823d 2921d 0/26 2818d 99d595869332 Validate FS_BASE in Task.Clone
Invalid request partialResult in sendfile -1 syz, C 7399 2823d 2976d 0/26 2818d ffcbda0c8bd7 Partial writes should loop in rpcinet.
panic: Decrementing non-positive ref count 2 syz, C 4804 2913d 2991d 0/26 2818d 0e277a39c8b6 Prevent premature destruction of shm segments.
panic: ptrace status unexpected: got 9, wanted stopped (2) 2 syz 78 2823d 2976d 0/26 2818d e7191f058f55 Use TRAP to simplify vsyscall emulation.
panic: invalid allocation length: 0x0 2 syz, C 223 2823d 2991d 0/26 2818d 46603b569c3a Fix panic on creation of zero-len shm segments.
panic: runtime error: invalid memory address or nil pointer dereference (2) 2 syz, C 4493 2913d 2933d 0/26 2875d beac59b37a8b Fix panic if FIOASYNC callback is registered and triggered without target
DATA RACE in kernel.(*Task).setKUIDsUncheckedLocked -1 syz, C 15 2925d 2984d 0/26 2875d f8ccfbbed487 Document more task-goroutine-owned fields in kernel.Task.
DATA RACE in fs.(*Dirent).hashChildParentSet -1 syz 8 2928d 2931d 0/26 2875d 8d318aac5532 fs: Hold Dirent.mu when calling Dirent.flush().
DATA RACE in waiter.(*Entry).Prev -1 syz, C 3992 2937d 2990d 0/26 2933d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Entry).Next -1 syz, C 2418 2937d 2990d 0/26 2933d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in waiter.(*Entry).SetNext -1 syz, C 739 2937d 2990d 0/26 2933d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
panic: runtime error: index out of range 2 syz, C 35 2949d 2986d 0/26 2933d e97717e29a1b Enforce Unix socket address length limit
DATA RACE in waiter.(*Queue).Notify -1 syz, C 72 2937d 2990d 0/26 2933d d4939f6dc22e TTY: Fix data race where calls into tty.queue's waiter were not synchronized.
DATA RACE in unix.(*connectionlessEndpoint).UnidirectionalConnect -1 syz, C 965 2943d 2974d 0/26 2933d 2a44362c0b99 Fix data race in unix.BoundEndpoint.UnidirectionalConnect.
panic: runtime error: invalid memory address or nil pointer dereference 2 syz, C 20682 2937d 2991d 0/26 2933d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in kernel.(*Task).exitNotifyLocked -1 syz, C 2 2962d 2962d 0/26 2944d c036da5dffdf Hold TaskSet.mu in Task.Parent.
panic: invalid segment range [ADDR, ADDR) 2 syz, C 255 2979d 2990d 0/26 2965d 06920b3d1bb6 Exit tmpfs.fileInodeOperations.Translate early if required.Start >= EOF.
DATA RACE in fs.(*Watch).Notify -1 syz 2 2981d 2981d 0/26 2979d 34af9a61741f Fix data race on inotify.Watch.mask.
lost connection to test machine (2) -1 syz, C 1814 2979d 2990d 0/26 2979d 52ddb8571c46 Skip overlay on root when its readonly
DATA RACE in fs.Rename -1 syz, C 16 2979d 2989d 0/26 2979d 2821dfe6ce95 Hold d.parent.mu when reading d.name
panic: MountNamespace.FindInode: path is empty 2 syz, C 3443 2979d 2991d 0/26 2979d 062a6f6ec5f4 Handle NUL-only paths in exec
panic: runtime error: slice bounds out of range 2 syz, C 39 2984d 2991d 0/26 2984d 1ceed49ba94c Check for invalid offset when submitting an AIO read/write request.
DATA RACE in proc.forEachMountSource -1 syz, C 24 2984d 2990d 0/26 2984d f93bd2cbe668 Hold t.mu while calling t.FSContext().
DATA RACE in semaphore.(*Set).checkPerms -1 syz, C 21 2985d 2989d 0/26 2985d 6b6852bceb12 Fix semaphore data races
DATA RACE in semaphore.(*Registry).RemoveID -1 syz, C 15 2986d 2990d 0/26 2985d 6b6852bceb12 Fix semaphore data races
DATA RACE in queue.(*Queue).Enqueue -1 syz, C 7 2987d 2989d 0/26 2986d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in unix.(*queueReceiver).RecvQueuedSize -1 syz, C 5 2986d 2989d 0/26 2986d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in unix.(*streamQueueReceiver).RecvQueuedSize -1 syz, C 3 2987d 2988d 0/26 2986d 5f7f78c1d7ee Fix data races in Unix sockets
DATA RACE in kernel.(*FSContext).SetRootDirectory -1 syz, C 165 2987d 2990d 0/26 2986d 478f0ac0038a Don't read FSContext.root without holding FSContext.mu
panic: munmap(ADDR, 0)) failed: invalid argument 2 syz, C 5 2990d 2991d 0/26 2990d fe3fc44da3ca Handle mremap(old_size=0).