syzbot


panic: runtime error: index out of range [ADDR] with length NUM

Status: fixed on 2023/03/22 22:01
Fix commit: fc94225c333d Fix crash with large FD value
First crash: 625d, last: 625d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: index out of range [ADDR] with length NUM (2) C 23 57d 58d 26/26 fixed on 2024/09/30 22:47

Sample crash report:
panic: runtime error: index out of range [2147483647] with length 8

goroutine 290 [running]:
panic({0x3fcc00, 0xc0006fc000})
	GOROOT/src/runtime/panic.go:987 +0x3bb fp=0xc0009f5180 sp=0xc0009f50c0 pc=0x11dc2fb
runtime.goPanicIndex(0x7fffffff, 0x8)
	GOROOT/src/runtime/panic.go:113 +0x7f fp=0xc0009f51c0 sp=0xc0009f5180 pc=0x11da2bf
gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).set(0xc00031ce40, {0x751878?, 0xc000920a80?}, 0x7fffffff, 0xc0002b8d80, {0x1?})
	pkg/sentry/kernel/fd_table_unsafe.go:107 +0x525 fp=0xc0009f5260 sp=0xc0009f51c0 pc=0x1a846c5
gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).NewFDs(0xc00031ce40, {0x751878, 0xc000920a80}, 0x7fffffff, {0xc0009f5370, 0x1, 0x1216ecc?}, {0x1c?})
	pkg/sentry/kernel/fd_table.go:284 +0x415 fp=0xc0009f5300 sp=0xc0009f5260 pc=0x1a80b55
gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).NewFD(0x12185e5?, {0x751878, 0xc000920a80}, 0x1?, 0xc0002b8d80, {0xac?})
	pkg/sentry/kernel/fd_table.go:315 +0xa5 fp=0xc0009f5388 sp=0xc0009f5300 pc=0x1a80ea5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).NewFDFrom(0xc000920a80, 0x0?, 0xc0009f5430?, {0x25?})
	pkg/sentry/kernel/task.go:762 +0x85 fp=0xc0009f53e8 sp=0xc0009f5388 pc=0x1abdfe5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Fcntl(0xc000920a80, {{0x0}, {0x406}, {0x7fffffff}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_file.go:604 +0x150d fp=0xc0009f55a8 sp=0xc0009f53e8 pc=0x1d1038d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000920a80, 0x48, {{0x0}, {0x406}, {0x7fffffff}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:142 +0xab7 fp=0xc0009f59c0 sp=0xc0009f55a8 pc=0x1afca77
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000920a80, 0x1?, {{0x0}, {0x406}, {0x7fffffff}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:322 +0x8e fp=0xc0009f5a60 sp=0xc0009f59c0 pc=0x1afeb8e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00091e0f0?, 0xc0009f5b8f?, {{0x0}, {0x406}, {0x7fffffff}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:282 +0xc5 fp=0xc0009f5ad8 sp=0xc0009f5a60 pc=0x1afe485
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000920a80)
	pkg/sentry/kernel/task_syscall.go:257 +0x53b fp=0xc0009f5c00 sp=0xc0009f5ad8 pc=0x1afdf9b
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000920a80?, 0xc000920a80)
	pkg/sentry/kernel/task_run.go:265 +0x22b4 fp=0xc0009f5ec0 sp=0xc0009f5c00 pc=0x1ae6b94
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000920a80, 0xa)
	pkg/sentry/kernel/task_run.go:94 +0x2cc fp=0xc0009f5fb0 sp=0xc0009f5ec0 pc=0x1ae3f0c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.func1()
	pkg/sentry/kernel/task_start.go:377 +0x48 fp=0xc0009f5fe0 sp=0xc0009f5fb0 pc=0x1afa168
runtime.goexit()
	src/runtime/asm_amd64.s:1598 +0x1 fp=0xc0009f5fe8 sp=0xc0009f5fe0 pc=0x1215241
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:377 +0x1da

Crashes (17):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/11 23:46 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:42 gvisor 7fc86b2c47e9 5205ef30 console log report syz C ci-gvisor-kvm panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:41 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:41 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-systrap-1-race-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:41 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:40 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:40 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-systrap-1-race panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:39 gvisor 7fc86b2c47e9 5205ef30 console log report syz C ci-gvisor-ptrace-1 panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:39 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:39 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-3-race panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:34 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-2-race panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:34 gvisor 7fc86b2c47e9 5205ef30 console log report syz C ci-gvisor-ptrace-2 panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:34 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-systrap-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:33 gvisor 7fc86b2c47e9 5205ef30 console log report syz C ci-gvisor-ptrace-3 panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:33 gvisor 7fc86b2c47e9 5205ef30 console log report syz C ci-gvisor-systrap-1 panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:22 gvisor 7fc86b2c47e9 5205ef30 .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: index out of range [ADDR] with length NUM
2023/03/11 23:13 gvisor 7fc86b2c47e9 5205ef30 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: index out of range [ADDR] with length NUM
* Struck through repros no longer work on HEAD.