#2189·sysdig

sysdig 0.41.4 crashes on a machine with containerd 2.3.5

Author: NeonSludgeCreated Sep 14, 2026Updated Sep 14, 2026

Trying to launch sysdig 0.41.4 on an AlmaLinux 9.8 machine running containerd 2.3.5 leads to a segmentation fault in the container plugin. The same sysdig version works fine on a machine with the same OS/kernel and containerd 1.7.x.

# sysdig -v
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x7f7a661c32f0]

goroutine 17 [running, locked to thread]:
github.com/falcosecurity/plugins/plugins/container/go-worker/pkg/container.(*criEngine).ctrToInfo(_, {_, _}, _, _, _, _)
	/__w/plugins/plugins/plugins/container/go-worker/pkg/container/cri.go:243 +0x770
github.com/falcosecurity/plugins/plugins/container/go-worker/pkg/container.(*criEngine).List(0xc000126f30, {0x7f7a66a34080, 0xc000516190})
	/__w/plugins/plugins/plugins/container/go-worker/pkg/container/cri.go:452 +0x356
main.StartWorker(0x7f7a65490650, 0x2b594b0, 0x7ffca5f37778)
	/__w/plugins/plugins/plugins/container/go-worker/worker_api.go:77 +0x4e2
Aborted
# sysdig --version
sysdig version 0.41.4
# uname -r
5.14.0-687.42.1.el9_8.x86_64
# cat /etc/os-release 
NAME="AlmaLinux"
VERSION="9.8 (Olive Jaguar)"
ID="almalinux"
ID_LIKE="rhel centos fedora"
VERSION_ID="9.8"
PLATFORM_ID="platform:el9"
PRETTY_NAME="AlmaLinux 9.8 (Olive Jaguar)"
ANSI_COLOR="0;34"
LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:almalinux:almalinux:9::baseos"
HOME_URL="https://almalinux.org/"
DOCUMENTATION_URL="https://wiki.almalinux.org/"
BUG_REPORT_URL="https://bugs.almalinux.org/"

ALMALINUX_MANTISBT_PROJECT="AlmaLinux-9"
ALMALINUX_MANTISBT_PROJECT_VERSION="9.8"
REDHAT_SUPPORT_PRODUCT="AlmaLinux"
REDHAT_SUPPORT_PRODUCT_VERSION="9.8"
SUPPORT_END=2032-06-01
# ctr version
Client:
  Version:  v2.3.5
  Revision: 1294c24a7da8e5a793ed378161673abe94118892
  Go version: go1.26.5

Server:
  Version:  v2.3.5
  Revision: 1294c24a7da8e5a793ed378161673abe94118892
  UUID: ca06e1c0-3bf5-40b7-a209-8bc5a720a725
# crictl version
Version:  0.1.0
RuntimeName:  containerd
RuntimeVersion:  v2.3.5
RuntimeApiVersion:  v1