syzbot
panic: invalid allocation length: 0x0 (3)
Status:
fixed on 2020/01/31 18:49
Reported-by: syzbot+0e1ff0b95fb2859b4190@syzkaller.appspotmail.com
Fix commit:
ede8dfab3760
Enforce splice offset limits
First crash: 2413d, last: 2406d
Sample crash report:
panic: invalid allocation length: 0x0
goroutine 231 [running]:
DIAGNOSIS:
I0128 07:16:08.646042 32571 x:0] ***************************
I0128 07:16:08.646098 32571 x:0] Args: [/syzkaller/managers/ptrace-direct-overlay-host-race/current/image -root /syzkaller/managers/ptrace-direct-overlay-host-race/workdir/gvisor_root -watchdog-action=panic -network=none -debug -alsologtostderr -platform=ptrace -file-access=exclusive -overlay -network=host -TESTONLY-unsafe-nonroot debug -stacks --ps ci-gvisor-ptrace-direct-overlay-host-race-2]
I0128 07:16:08.646218 32571 x:0] Version release-20200115.0-104-g6b14be4246e8
I0128 07:16:08.646241 32571 x:0] PID: 32571
I0128 07:16:08.646274 32571 x:0] UID: 0, GID: 0
I0128 07:16:08.646304 32571 x:0] Configuration:
I0128 07:16:08.646327 32571 x:0] RootDir: /syzkaller/managers/ptrace-direct-overlay-host-race/workdir/gvisor_root
I0128 07:16:08.646357 32571 x:0] Platform: ptrace
I0128 07:16:08.646383 32571 x:0] FileAccess: exclusive, overlay: true
I0128 07:16:08.646420 32571 x:0] Network: host, logging: false
I0128 07:16:08.646460 32571 x:0] Strace: false, max size: 1024, syscalls: []
I0128 07:16:08.646506 32571 x:0] ***************************
W0128 07:16:08.646555 32571 x:0] Block the TERM signal. This is only safe in tests!
D0128 07:16:08.646694 32571 x:0] Load container "/syzkaller/managers/ptrace-direct-overlay-host-race/workdir/gvisor_root" "ci-gvisor-ptrace-direct-overlay-host-race-2"
D0128 07:16:08.652395 32571 x:0] Signal container "ci-gvisor-ptrace-direct-overlay-host-race-2": signal 0
D0128 07:16:08.652489 32571 x:0] Signal sandbox "ci-gvisor-ptrace-direct-overlay-host-race-2"
D0128 07:16:08.652547 32571 x:0] Connecting to sandbox "ci-gvisor-ptrace-direct-overlay-host-race-2"
D0128 07:16:08.652913 32571 x:0] urpc: successfully marshalled 123 bytes.
W0128 07:16:08.749780 32571 x:0] FATAL ERROR: container sandbox is not running
container sandbox is not running
W0128 07:16:08.750058 32571 x:0] Failure to execute command, err: 1
* Struck through repros no longer work on HEAD.