syzbot

 sign-in | mailing list | source | docs
🐞 Open [41]
🐞 Fixed [469]
🐞 Invalid [348]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

panic: runtime error: makeslice: len out of range

Status: fixed on 2020/04/10 14:44
Reported-by: syzbot+e81716e8956e92e9d56b@syzkaller.appspotmail.com
Fix commit: a10389e783aa splice: cap splice calls to MAX_RW_COUNT
First crash: 1720d, last: 1691d
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: makeslice: len out of range (2) C 5 1474d 1501d 0/26 fixed on 2020/11/13 09:22
gvisor panic: runtime error: makeslice: len out of range (4) 36 1112d 1115d 14/26 fixed on 2021/11/10 12:39
gvisor panic: runtime error: makeslice: len out of range (3) C 10 1182d 1182d 14/26 fixed on 2021/09/01 20:11

Sample crash report:
panic: runtime error: makeslice: len out of range

goroutine 460 [running]:
gvisor.dev/gvisor/pkg/tcpip/buffer.NewView(...)
	pkg/tcpip/buffer/view.go:29
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*readerPayload).Payload(0xc0001261c0, 0x8000000000004, 0xc0004ed1f0, 0x4328c6, 0xc0004ed1f0, 0xc00029b2e0)
	pkg/sentry/socket/netstack/netstack.go:578 +0x55
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*readerPayload).FullPayload(0xc0001261c0, 0x0, 0x0, 0x0, 0x10)
	pkg/sentry/socket/netstack/netstack.go:570 +0x34
gvisor.dev/gvisor/pkg/tcpip/transport/udp.(*endpoint).write(0xc00029b200, 0xf58bc0, 0xc0001261c0, 0x0, 0x10000, 0x0, 0x0, 0x0)
	pkg/tcpip/transport/udp/endpoint.go:472 +0x3b2
gvisor.dev/gvisor/pkg/tcpip/transport/udp.(*endpoint).Write(0xc00029b200, 0xf58bc0, 0xc0001261c0, 0x0, 0x8000000010000, 0x0, 0x0, 0xf54ce0)
	pkg/tcpip/transport/udp/endpoint.go:362 +0x68
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*SocketOperations).ReadFrom(0xc000a663c0, 0xf71c60, 0xc000cbca80, 0xc0010dc6e0, 0xf53260, 0xc000640220, 0x8000000000004, 0x3f6002f0ef00, 0x0, 0xf54ce0)
	pkg/sentry/socket/netstack/netstack.go:601 +0xc7
gvisor.dev/gvisor/pkg/sentry/fs.Splice(0xf71c60, 0xc000cbca80, 0xc0010dc6e0, 0xc0010220b0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/fs/splice.go:146 +0x7c7
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.doSplice(0xc000cbca80, 0xc0010dc6e0, 0xc0010220b0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0xc000f82000, 0x0, ...)
	pkg/sentry/syscalls/linux/sys_splice.go:40 +0x149
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Sendfile(0xc000cbca80, 0x4, 0x3, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/sys_splice.go:151 +0x68c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000cbca80, 0x28, 0x4, 0x3, 0x0, 0x8000000000004, 0x0, 0x0, 0xc00072e790, 0xe04120, ...)
	pkg/sentry/kernel/task_syscall.go:170 +0x122
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000cbca80, 0x28, 0x4, 0x3, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:291 +0x66
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000cbca80, 0x28, 0x4, 0x3, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:252 +0x96
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000cbca80, 0x2, 0xc0009800a0)
	pkg/sentry/kernel/task_syscall.go:227 +0x139
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc000cbca80, 0xf53660, 0x0)
	pkg/sentry/kernel/task_run.go:258 +0xed5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000cbca80, 0x41)
	pkg/sentry/kernel/task_run.go:92 +0x18b
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:315 +0xfe

Crashes (49):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/04/09 21:17 gvisor 981a587476e1 a8c6a3f8 .config console log report syz ci-gvisor-kvm-proxy-overlay-sandbox
2020/04/08 22:28 gvisor acf0259255ba db9bcd4b .config console log report syz ci-gvisor-kvm-proxy-overlay-sandbox
2020/04/08 21:28 gvisor acf0259255ba db9bcd4b .config console log report syz ci-gvisor-kvm-proxy-overlay-sandbox
2020/04/08 05:02 gvisor 51e461cf9c49 db9bcd4b .config console log report syz ci-gvisor-kvm-direct-sandbox
2020/04/08 04:42 gvisor 51e461cf9c49 db9bcd4b .config console log report syz ci-gvisor-kvm-direct-sandbox
2020/04/07 10:13 gvisor f332a864e8cc 99a96044 .config console log report syz ci-gvisor-kvm-direct-sandbox
2020/04/07 08:59 gvisor f332a864e8cc 99a96044 .config console log report syz ci-gvisor-kvm-direct-sandbox
2020/03/14 13:04 gvisor 829beebf0b67 749688d2 .config console log report syz ci-gvisor-ptrace-proxy-sandbox-race
2020/03/14 10:53 gvisor 829beebf0b67 749688d2 .config console log report syz ci-gvisor-ptrace-proxy-sandbox-race
2020/03/14 10:43 gvisor 829beebf0b67 749688d2 .config console log report syz ci-gvisor-main
2020/03/14 10:26 gvisor 829beebf0b67 749688d2 .config console log report syz ci-gvisor-main
2020/03/14 10:25 gvisor 829beebf0b67 749688d2 .config console log report syz ci-gvisor-ptrace-proxy-sandbox-race
2020/03/12 08:18 gvisor 24e7005ab6bd 35f53e45 .config console log report syz ci-gvisor-ptrace-proxy-sandbox-race
2020/03/12 08:12 gvisor 24e7005ab6bd 35f53e45 .config console log report syz ci-gvisor-main
2020/03/12 07:08 gvisor 24e7005ab6bd 35f53e45 .config console log report syz ci-gvisor-main
2020/03/12 06:59 gvisor 24e7005ab6bd 35f53e45 .config console log report syz ci-gvisor-ptrace-proxy-sandbox-race
2020/04/10 14:10 gvisor 981a587476e1 a8c6a3f8 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/29 09:50 gvisor 137f3614009b 05736b29 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/29 08:23 gvisor f6e4daa67ad5 05736b29 .config console log report ci-gvisor-kvm-direct-sandbox
2020/03/29 00:22 gvisor f6e4daa67ad5 05736b29 .config console log report ci-gvisor-main
2020/03/29 00:21 gvisor f6e4daa67ad5 05736b29 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/28 03:29 gvisor 137f3614009b 831e9a81 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/28 02:53 gvisor f6e4daa67ad5 831e9a81 .config console log report ci-gvisor-main
2020/03/28 02:51 gvisor f6e4daa67ad5 831e9a81 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/28 02:46 gvisor f6e4daa67ad5 831e9a81 .config console log report ci-gvisor-kvm-direct-sandbox
2020/03/27 04:26 gvisor c64796748c73 6d25c5a0 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/27 04:25 gvisor c64796748c73 6d25c5a0 .config console log report ci-gvisor-main
2020/03/27 04:23 gvisor 137f3614009b 6d25c5a0 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/19 04:13 gvisor fc16e64396cf 2c31c529 .config console log report ci-gvisor-main
2020/03/19 04:13 gvisor fc16e64396cf 2c31c529 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/16 23:58 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/16 21:49 gvisor f693e1334b6f 749688d2 .config console log report ci-gvisor-kvm-direct-sandbox
2020/03/16 21:38 gvisor f693e1334b6f 749688d2 .config console log report ci-gvisor-kvm-direct-sandbox
2020/03/16 21:33 gvisor 52758e16e0d1 749688d2 .config console log report ci-gvisor-main
2020/03/16 21:31 gvisor 52758e16e0d1 749688d2 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/16 21:29 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/16 21:23 gvisor 52758e16e0d1 749688d2 .config console log report ci-gvisor-main
2020/03/16 21:21 gvisor 52758e16e0d1 749688d2 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/15 15:47 gvisor f693e1334b6f 749688d2 .config console log report ci-gvisor-kvm-direct-sandbox
2020/03/15 15:46 gvisor 97127750289b 749688d2 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/15 15:45 gvisor 97127750289b 749688d2 .config console log report ci-gvisor-main
2020/03/15 15:40 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/14 13:47 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-main
2020/03/14 12:54 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/14 10:16 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-main
2020/03/14 10:16 gvisor 829beebf0b67 749688d2 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
2020/03/13 11:32 gvisor 919664600d8d d850e9d0 .config console log report ci-gvisor-kvm-proxy-overlay-sandbox
2020/03/12 06:57 gvisor 24e7005ab6bd 35f53e45 .config console log report ci-gvisor-main
2020/03/12 06:49 gvisor 24e7005ab6bd 35f53e45 .config console log report ci-gvisor-ptrace-proxy-sandbox-race
* Struck through repros no longer work on HEAD.