syzbot


panic: runtime error: slice bounds out of range [NUM:NUM]

Status: moderation: reported C repro on 2024/07/26 06:51
Reported-by: syzbot+b6068ae3f32fb7883345@syzkaller.appspotmail.com
First crash: 130d, last: 111d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: slice bounds out of range [2:LINE] 1 1224d 1224d 14/26 fixed on 2021/08/16 21:45
gvisor panic: runtime error: slice bounds out of range [12:LINE] C 63 376d 1155d 26/26 fixed on 2023/11/17 13:01
gvisor panic: runtime error: slice bounds out of range [40:LINE] 3 1212d 1215d 14/26 fixed on 2021/09/25 08:25

Sample crash report:
panic: runtime error: slice bounds out of range [16:0]

goroutine 133 gp=0xc000513880 m=0 mp=0x2dbb940 [running]:
panic({0x1d06c60?, 0xc0007f6078?})
	GOROOT/src/runtime/panic.go:779 +0x158 fp=0xc000b94bf8 sp=0xc000b94b48 pc=0x43ed58
runtime.goPanicSliceB(0x10, 0x0)
	GOROOT/src/runtime/panic.go:154 +0x7c fp=0xc000b94c38 sp=0xc000b94bf8 pc=0x43db7c
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*Response).UnmarshalPayload(0xc000b94e70, {0x207aec0, 0xc00023c190})
	pkg/sentry/fsimpl/fuse/request_response.go:225 +0x285 fp=0xc000b94ca8 sp=0xc000b94c38 pc=0x16dfe25
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*connection).InitRecv(0xc0007d4af0, 0xc000b94e70, 0x1)
	pkg/sentry/fsimpl/fuse/connection_control.go:107 +0x145 fp=0xc000b94d58 sp=0xc000b94ca8 pc=0x16c3d65
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).asyncCallBack(0xc000a341c0, {0x207ecb8, 0xc0007c8a88}, 0xc000b94e70)
	pkg/sentry/fsimpl/fuse/dev.go:369 +0x109 fp=0xc000b94da8 sp=0xc000b94d58 pc=0x16c8569
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).sendResponse(0xc000a341c0, {0x207ecb8, 0xc0007c8a88}, 0xc0003c1a40)
	pkg/sentry/fsimpl/fuse/dev.go:332 +0x374 fp=0xc000b94ec0 sp=0xc000b94da8 pc=0x16c8034
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*DeviceFD).Write(0xc000a341c0, {0x207ecb8, 0xc0007c8a88}, {{0x2077298, 0xc000bfa008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, ...}}, ...)
	pkg/sentry/fsimpl/fuse/dev.go:256 +0x835 fp=0xc000b95138 sp=0xc000b94ec0 pc=0x16c6f95
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc000a341c0, {0x207ecb8, 0xc0007c8a88}, {{0x2077298, 0xc000bfa008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:679 +0x145 fp=0xc000b95208 sp=0xc000b95138 pc=0xae6065
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc0007c8a88, 0xc000a341c0, {{0x2077298, 0xc000bfa008}, {0x0, 0x1, 0x200001c0, 0x30}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0xa5 fp=0xc000b95380 sp=0xc000b95208 pc=0x12226e5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc0007c8a88, 0x3e?, {{0x3}, {0x200001c0}, {0x30}, {0x6}, {0x6}, {0x6}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x38f fp=0xc000b95508 sp=0xc000b95380 pc=0x1221bef
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0007c8a88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x6}, {0x6}, {0x6}})
	pkg/sentry/kernel/task_syscall.go:143 +0xb9f fp=0xc000b95968 sp=0xc000b95508 pc=0xf7f0df
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0007c8a88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x6}, {0x6}, {0x6}})
	pkg/sentry/kernel/task_syscall.go:323 +0x85 fp=0xc000b95a10 sp=0xc000b95968 pc=0xf81205
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0007c8a88, 0x1, {{0x3}, {0x200001c0}, {0x30}, {0x6}, {0x6}, {0x6}})
	pkg/sentry/kernel/task_syscall.go:283 +0xc7 fp=0xc000b95a80 sp=0xc000b95a10 pc=0xf80b27
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0007c8a88)
	pkg/sentry/kernel/task_syscall.go:258 +0x54a fp=0xc000b95bb0 sp=0xc000b95a80 pc=0xf8068a
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0007c8a88?, 0xc0007c8a88)
	pkg/sentry/kernel/task_run.go:263 +0x22f5 fp=0xc000b95e98 sp=0xc000b95bb0 pc=0xf68475
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0007c8a88, 0x8)
	pkg/sentry/kernel/task_run.go:98 +0x39b fp=0xc000b95fb0 sp=0xc000b95e98 pc=0xf6579b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:393 +0x45 fp=0xc000b95fe0 sp=0xc000b95fb0 pc=0xf7c5e5
runtime.goexit({})
	src/runtime/asm_amd64.s:1695 +0x1 fp=0xc000b95fe8 sp=0xc000b95fe0 pc=0x47d301
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 113
	pkg/sentry/kernel/task_start.go:393 +0x1ce

Crashes (666):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/19 08:30 gvisor e39ed91daaf9 ee4e11c8 .config console log report syz / log C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/19 08:10 gvisor e39ed91daaf9 ee4e11c8 console log report syz / log C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/19 07:20 gvisor e39ed91daaf9 ee4e11c8 .config console log report syz / log C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/19 06:40 gvisor e39ed91daaf9 ee4e11c8 .config console log report syz / log C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/07 07:47 gvisor b1d7ceafb1d3 1ef9fe42 console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/07 05:09 gvisor b1d7ceafb1d3 1ef9fe42 console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/07 03:42 gvisor b1d7ceafb1d3 1ef9fe42 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 23:09 gvisor b1d7ceafb1d3 1ef9fe42 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 22:45 gvisor b1d7ceafb1d3 1ef9fe42 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 21:18 gvisor 5f28d97aa766 1ef9fe42 console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 19:56 gvisor 5f28d97aa766 d09987bf console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 14:52 gvisor 5f28d97aa766 1ef9fe42 console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 12:46 gvisor 5f28d97aa766 d09987bf .config console log report info ci-gvisor-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 21:21 gvisor 7a05c225f55c e1bdb00a .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 18:20 gvisor 7a05c225f55c e35c337f .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 16:12 gvisor 429898032595 e35c337f .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 15:08 gvisor 429898032595 e35c337f .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 13:20 gvisor 429898032595 e35c337f .config console log report info ci-gvisor-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 11:08 gvisor 429898032595 e35c337f .config console log report info ci-gvisor-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 08:02 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 06:57 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 03:09 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 22:48 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 21:42 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 20:36 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 18:41 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 17:41 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 16:37 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 15:28 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 14:14 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 10:54 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 09:26 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 03:54 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 02:43 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 00:55 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 14:56 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 10:24 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 02:18 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/01 02:29 gvisor 4542eb5ba62b 1e9c4cf3 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/30 16:30 gvisor 7d35643f0939 3d5fb491 .config console log report info ci-gvisor-ptrace-2-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/29 03:56 gvisor 8db16e885981 46eb10b7 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/29 00:33 gvisor 8db16e885981 46eb10b7 .config console log report info ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/26 23:24 gvisor ed73825c6927 46eb10b7 .config console log report info ci-gvisor-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/07/21 16:55 gvisor 84f1146368c8 b88348e9 .config console log report info ci-gvisor-systrap-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 18:01 gvisor 5f28d97aa766 1ef9fe42 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 16:53 gvisor 5f28d97aa766 1ef9fe42 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 10:49 gvisor 5f28d97aa766 1ef9fe42 .config console log report info ci-gvisor-arm64-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 08:01 gvisor 7a05c225f55c e1bdb00a console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 06:23 gvisor 7a05c225f55c e1bdb00a console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 05:43 gvisor 7a05c225f55c e1bdb00a console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 04:25 gvisor 7a05c225f55c e1bdb00a console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 02:43 gvisor 7a05c225f55c e1bdb00a console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/06 00:29 gvisor 7a05c225f55c e1bdb00a console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 20:10 gvisor 7a05c225f55c d945c1fd console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 05:45 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 04:41 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 02:17 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/05 01:08 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 12:26 gvisor 429898032595 1786a2a8 .config console log report info ci-gvisor-arm64-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 11:18 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 07:54 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 06:47 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 05:29 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/04 01:36 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 23:45 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 22:13 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 21:02 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 18:30 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/03 17:08 gvisor 429898032595 1786a2a8 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2024/08/02 20:09 gvisor ef1ca17e5842 15001224 .config console log report info ci-gvisor-arm64-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
* Struck through repros no longer work on HEAD.