syzbot


panic: runtime error: slice bounds out of range [NUM:NUM] (4)

Status: internal: reported C repro on 2025/10/23 06:13
Fix commit: 7532ec065ecc Fix: Check for errors in FUSE Readlink response.
Patched on: [ci-gvisor-arm64-ptrace-1 ci-gvisor-arm64-ptrace-1-cover ci-gvisor-arm64-ptrace-1-race ci-gvisor-arm64-systrap-1 ci-gvisor-arm64-systrap-1-cover ci-gvisor-arm64-systrap-1-race ci-gvisor-kvm ci-gvisor-ptrace-1 ci-gvisor-ptrace-1-cover ci-gvisor-ptrace-1-race ci-gvisor-ptrace-1-race-cover ci-gvisor-ptrace-2 ci-gvisor-ptrace-2-cover ci-gvisor-ptrace-2-race ci-gvisor-ptrace-2-race-cover ci-gvisor-ptrace-3 ci-gvisor-ptrace-3-cover ci-gvisor-ptrace-3-race ci-gvisor-ptrace-3-race-cover ci-gvisor-systrap-1 ci-gvisor-systrap-1-cover ci-gvisor-systrap-1-race], missing on: [ci-gvisor-arm64-ptrace-1-race-cover ci-gvisor-arm64-systrap-1-race-cover ci-gvisor-kvm-cover ci-gvisor-systrap-1-race-cover]
First crash: 15d, last: 12d
Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: slice bounds out of range [2:LINE] 2 1 1570d 1570d 14/26 fixed on 2021/08/16 21:45
gvisor panic: runtime error: slice bounds out of range [12:LINE] 2 C 63 722d 1501d 26/26 fixed on 2023/11/17 13:01
gvisor panic: runtime error: slice bounds out of range [40:LINE] 2 3 1558d 1561d 14/26 fixed on 2021/09/25 08:25
gvisor panic: runtime error: slice bounds out of range [NUM:NUM] (3) 2 C 20 213d 214d 26/26 fixed on 2025/04/10 00:40
gvisor panic: runtime error: slice bounds out of range [NUM:NUM] 2 C 666 457d 469d 0/26 closed as invalid on 2024/12/13 00:11
gvisor panic: runtime error: slice bounds out of range [NUM:NUM] (2) 2 C 606 273d 274d 26/26 fixed on 2025/02/06 21:42

Sample crash report:
panic: runtime error: slice bounds out of range [16:0]

goroutine 734 gp=0xc000b5efc0 m=26 mp=0xc0007ce808 [running]:
panic({0x1e70e40?, 0xc0006feb40?})
	GOROOT/src/runtime/panic.go:811 +0x168 fp=0xc0006b8a38 sp=0xc0006b8988 pc=0x47d728
runtime.goPanicSliceB(0x10, 0x0)
	GOROOT/src/runtime/panic.go:155 +0x74 fp=0xc0006b8a78 sp=0xc0006b8a38 pc=0x441934
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*inode).Readlink(0xc0001b3808, {0x21bff10, 0xc0010ee008}, 0xc000028160)
	pkg/sentry/fsimpl/fuse/inode.go:604 +0x6d7 fp=0xc0006b8be8 sp=0xc0006b8a78 pc=0x1871517
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*inode).Getlink(0xc0001b3808, {0x21bff10, 0xc0010ee008}, 0xc000028160)
	pkg/sentry/fsimpl/fuse/inode.go:587 +0x5e fp=0xc0006b8c38 sp=0xc0006b8be8 pc=0x1870dbe
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).stepExistingLocked(0xc0010fba40, {0x21bff10, 0xc0010ee008}, 0xc0010d3688, 0xc0008c0fc0)
	pkg/sentry/fsimpl/kernfs/filesystem.go:83 +0x5e7 fp=0xc0006b8d70 sp=0xc0006b8c38 pc=0xcd9087
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).walkExistingLocked(0xc0010fba40, {0x21bff10, 0xc0010ee008}, 0xc0010d3688)
	pkg/sentry/fsimpl/kernfs/filesystem.go:197 +0x106 fp=0xc0006b8dd8 sp=0xc0006b8d70 pc=0xcda146
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).StatAt(0xc0010fba40, {0x21bff10, 0xc0010ee008}, 0xc0010d3688, {0x6b90f8?, 0xc0?})
	pkg/sentry/fsimpl/kernfs/filesystem.go:954 +0x3df fp=0xc0006b9018 sp=0xc0006b8dd8 pc=0xce617f
gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).StatAt(0xc0000045e0, {0x21bff10, 0xc0010ee008}, 0xc0001ade60, 0xc0006b9640, 0xc0006b92f4)
	pkg/sentry/vfs/vfs.go:646 +0x1ad fp=0xc0006b9230 sp=0xc0006b9018 pc=0xb91c4d
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Statx(0xc0010ee008, 0x457b27?, {{0x4}, {0x2000000006c0}, {0x2000}, {0x2}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_stat.go:221 +0x8b9 fp=0xc0006b96e8 sp=0xc0006b9230 pc=0x131ee79
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0010ee008, 0x14c, {{0x4}, {0x2000000006c0}, {0x2000}, {0x2}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0xb90 fp=0xc0006b9998 sp=0xc0006b96e8 pc=0x103dad0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0010ee008, 0x14c, {{0x4}, {0x2000000006c0}, {0x2000}, {0x2}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x85 fp=0xc0006b9a40 sp=0xc0006b9998 pc=0x103fbe5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0010ee008, 0x14c, {{0x4}, {0x2000000006c0}, {0x2000}, {0x2}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0xc7 fp=0xc0006b9ab0 sp=0xc0006b9a40 pc=0x103f527
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0010ee008)
	pkg/sentry/kernel/task_syscall.go:258 +0x53e fp=0xc0006b9bd0 sp=0xc0006b9ab0 pc=0x103f07e
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0010ee008?, 0xc0010ee008)
	pkg/sentry/kernel/task_run.go:269 +0x220c fp=0xc0006b9e78 sp=0xc0006b9bd0 pc=0x102a08c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0010ee008, 0x53)
	pkg/sentry/kernel/task_run.go:97 +0x402 fp=0xc0006b9fb0 sp=0xc0006b9e78 pc=0x1027442
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:416 +0x45 fp=0xc0006b9fe0 sp=0xc0006b9fb0 pc=0x103b425
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0006b9fe8 sp=0xc0006b9fe0 pc=0x486aa1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 774
	pkg/sentry/kernel/task_start.go:416 +0x17e

Crashes (78):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/23 11:10 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 10:57 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 10:08 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 10:07 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 09:13 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 09:11 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:50 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:30 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:29 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:29 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:29 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:22 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:21 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:21 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:19 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:19 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:19 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:18 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:18 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:58 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:52 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:50 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:50 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:50 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:50 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:49 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:49 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:49 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:48 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:48 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:48 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:31 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:23 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:23 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:23 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:22 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:22 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:21 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:21 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:21 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 09:46 gvisor 8eca12250494 c0460fcd console log report syz / log C ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 09:14 gvisor 8eca12250494 c0460fcd console log report syz / log C ci-gvisor-arm64-ptrace-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:38 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-arm64-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:20 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-arm64-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:19 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:18 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-arm64-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:08 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-arm64-systrap-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:06 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-arm64-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:49 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-arm64-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:48 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:48 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-arm64-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:29 gvisor c952130ed502 c0460fcd .config console log report syz / log C ci-gvisor-arm64-ptrace-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:22 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-arm64-ptrace-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:21 gvisor c952130ed502 c0460fcd console log report syz / log C ci-gvisor-arm64-systrap-1 panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:21 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log C ci-gvisor-arm64-systrap-1-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 11:03 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-ptrace-2-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 10:03 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 09:08 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:39 gvisor c952130ed502 c0460fcd console log report syz / log ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:09 gvisor c952130ed502 c0460fcd console log report syz / log ci-gvisor-kvm panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 07:06 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:47 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:18 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 05:49 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/24 04:03 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-arm64-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 21:54 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-arm64-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 19:56 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-arm64-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 15:42 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-arm64-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 11:55 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-arm64-systrap-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 10:48 gvisor 525aa49cffd0 c0460fcd .config console log report syz / log ci-gvisor-arm64-ptrace-1-race-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 06:32 gvisor c952130ed502 c0460fcd .config console log report syz / log ci-gvisor-arm64-systrap-1-race panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/26 04:22 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/25 18:23 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/25 09:58 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/24 09:52 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/24 02:32 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 15:16 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
2025/10/23 05:12 gvisor 525aa49cffd0 c0460fcd .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [NUM:NUM]
* Struck through repros no longer work on HEAD.