syzbot


panic: invalid allocation length: 0x0 (5)

Status: fixed on 2025/02/07 09:47
Fix commit: 213917f3eaf8 Don't switch to using the packet mmap endpoint for zero length requests.
First crash: 15d, last: 14d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: invalid allocation length: 0x0 (3) syz 12 1851d 1851d 0/26 fixed on 2020/01/31 18:49
gvisor panic: invalid allocation length: 0x0 C 223 2268d 2436d 0/26 fixed on 2018/12/12 09:36
gvisor panic: invalid allocation length: 0x0 (4) C 4338 988d 990d 14/26 fixed on 2022/06/09 07:46
gvisor panic: invalid allocation length: 0x0 (2) C 4 2257d 2258d 0/26 fixed on 2018/12/19 10:45

Sample crash report:
panic: invalid allocation length: 0x0

goroutine 363450 gp=0xc001baefc0 m=27 mp=0xc0003ee308 [running]:
panic({0x114b520?, 0xc002f02ce0?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000cbd550 sp=0xc000cbd4a0 pc=0x4740c8
gvisor.dev/gvisor/pkg/sentry/pgalloc.(*MemoryFile).Allocate(0x20eda80?, 0x114e160?, {0x1, 0x6, 0x0, 0x0, 0x0, 0x0})
	pkg/sentry/pgalloc/pgalloc.go:639 +0x6f9 fp=0xc000cbd6a0 sp=0xc000cbd550 pc=0x83ab59
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*ringBuffer).init(0xc0030a0010, {0x15cd040, 0xc00474ec88}, 0xc0029f4fc0)
	pkg/sentry/socket/netstack/packetmmap/ring_buffer.go:78 +0x2a8 fp=0xc000cbd768 sp=0xc000cbd6a0 pc=0xae3948
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).Init(0xc00023a400?, {0x15cd040?, 0xc00474ec88?}, {0xc0029f4fc0, 0x1, 0x1, 0xc004260808, 0xc00023a4f0, 0xc003e5acc0, 0x0, ...})
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:128 +0x265 fp=0xc000cbd7b8 sp=0xc000cbd768 pc=0xae14a5
gvisor.dev/gvisor/pkg/sentry/socket/netstack.setSockOptPacket(0xc00474ec88, {0xc000cbd8e0?, 0x40e7ff?}, {0x7f3adf4d0340, 0xc00023a400}, 0xc000cbd901?, {0xc00474f79c?, 0xc000cbd908?, 0xc001f3c008?})
	pkg/sentry/socket/netstack/netstack.go:2745 +0x315 fp=0xc000cbd898 sp=0xc000cbd7b8 pc=0xba52f5
gvisor.dev/gvisor/pkg/sentry/socket/netstack.SetSockOpt(0x8dcbc0?, {0x15df0d8?, 0xc000b15180?}, {0x7f3adf4d0340?, 0xc00023a400?}, 0xc00474ec88?, 0xc000cbd988?, {0xc00474f79c, 0x1c, 0x90})
	pkg/sentry/socket/netstack/netstack.go:1873 +0x148 fp=0xc000cbd8f0 sp=0xc000cbd898 pc=0xba2468
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).SetSockOpt(0xc000b15180, 0xc00474ec88?, 0x107?, 0x5?, {0xc00474f79c, 0x1c?, 0x90?})
	pkg/sentry/socket/netstack/netstack.go:634 +0x225 fp=0xc000cbd998 sp=0xc000cbd8f0 pc=0xb9c8e5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SetSockOpt(0xc00474ec88, 0x10?, {{0x4}, {0x107}, {0x5}, {0x200000000100}, {0x1c}, {0x0}})
	pkg/sentry/syscalls/linux/sys_socket.go:551 +0x246 fp=0xc000cbda78 sp=0xc000cbd998 pc=0xc2a546
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00474ec88, 0x36, {{0x4}, {0x107}, {0x5}, {0x200000000100}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc000cbdca8 sp=0xc000cbda78 pc=0xa777f7
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00474ec88, 0x36, {{0x4}, {0x107}, {0x5}, {0x200000000100}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc000cbdd00 sp=0xc000cbdca8 pc=0xa78965
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00474ec88, 0x36, {{0x4}, {0x107}, {0x5}, {0x200000000100}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc000cbdd50 sp=0xc000cbdd00 pc=0xa78665
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc004286580?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc000cbde28 sp=0xc000cbdd50 pc=0xa783e5
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0060a9b00?, 0xc00474ec88)
	pkg/sentry/kernel/task_run.go:269 +0xf17 fp=0xc000cbdf30 sp=0xc000cbde28 pc=0xa6dbd7
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00474ec88, 0xc55a)
	pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc000cbdfc0 sp=0xc000cbdf30 pc=0xa6c634
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc000cbdfe0 sp=0xc000cbdfc0 pc=0xa76205
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000cbdfe8 sp=0xc000cbdfe0 pc=0x47d1a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 363463
	pkg/sentry/kernel/task_start.go:412 +0xc5

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/06 21:18 gvisor 902a56c6c584 1e1faf27 console log report info ci-gvisor-kvm panic: invalid allocation length: 0x0
2025/02/06 19:39 gvisor 902a56c6c584 1e1faf27 console log report info ci-gvisor-kvm panic: invalid allocation length: 0x0
2025/02/06 18:12 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-kvm-cover panic: invalid allocation length: 0x0
2025/02/06 17:22 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/06 17:07 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-ptrace-1-race-cover panic: invalid allocation length: 0x0
2025/02/06 17:03 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/06 16:43 gvisor 902a56c6c584 1e1faf27 console log report info ci-gvisor-ptrace-1 panic: invalid allocation length: 0x0
2025/02/06 16:41 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/06 15:22 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/06 15:11 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-ptrace-2-race panic: invalid allocation length: 0x0
2025/02/06 12:40 gvisor 902a56c6c584 1e1faf27 console log report info ci-gvisor-ptrace-1 panic: invalid allocation length: 0x0
2025/02/06 11:50 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-ptrace-2-race panic: invalid allocation length: 0x0
2025/02/06 10:58 gvisor 902a56c6c584 1e1faf27 .config console log report info ci-gvisor-kvm-cover panic: invalid allocation length: 0x0
2025/02/06 09:24 gvisor 902a56c6c584 577d049b .config console log report info ci-gvisor-ptrace-2-race panic: invalid allocation length: 0x0
2025/02/06 09:13 gvisor 902a56c6c584 577d049b .config console log report info ci-gvisor-ptrace-2-race panic: invalid allocation length: 0x0
2025/02/06 07:21 gvisor 902a56c6c584 577d049b console log report info ci-gvisor-kvm panic: invalid allocation length: 0x0
2025/02/07 08:17 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/07 07:45 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/07 07:16 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-ptrace-1-cover panic: invalid allocation length: 0x0
2025/02/07 06:09 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-ptrace-1-cover panic: invalid allocation length: 0x0
2025/02/07 06:08 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/07 04:04 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-ptrace-1-cover panic: invalid allocation length: 0x0
2025/02/07 03:51 gvisor d8518f299131 44c01590 console log report info ci-gvisor-arm64-ptrace-1 panic: invalid allocation length: 0x0
2025/02/07 01:17 gvisor d8518f299131 44c01590 console log report info ci-gvisor-arm64-systrap-1 panic: invalid allocation length: 0x0
2025/02/07 01:10 gvisor d8518f299131 44c01590 console log report info ci-gvisor-arm64-ptrace-1 panic: invalid allocation length: 0x0
2025/02/06 23:21 gvisor d8518f299131 44c01590 console log report info ci-gvisor-arm64-ptrace-1 panic: invalid allocation length: 0x0
2025/02/06 21:28 gvisor d8518f299131 44c01590 .config console log report info ci-gvisor-arm64-systrap-1-cover panic: invalid allocation length: 0x0
2025/02/06 17:44 gvisor 902a56c6c584 44c01590 console log report info ci-gvisor-arm64-systrap-1 panic: invalid allocation length: 0x0
2025/02/06 16:41 gvisor 902a56c6c584 44c01590 console log report info ci-gvisor-arm64-systrap-1 panic: invalid allocation length: 0x0
2025/02/06 11:50 gvisor 902a56c6c584 44c01590 console log report info ci-gvisor-arm64-ptrace-1 panic: invalid allocation length: 0x0
2025/02/06 10:45 gvisor 902a56c6c584 44c01590 console log report info ci-gvisor-arm64-systrap-1 panic: invalid allocation length: 0x0
2025/02/06 10:18 gvisor 902a56c6c584 44c01590 console log report info ci-gvisor-arm64-ptrace-1 panic: invalid allocation length: 0x0
* Struck through repros no longer work on HEAD.