syzbot


panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM

Status: fixed on 2022/11/18 03:22
Fix commit: 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
First crash: 756d, last: 739d

Sample crash report:
panic: runtime error: slice bounds out of range [:1615351360] with capacity 32768

goroutine 137 [running]:
panic({0x19b0f60, 0xc00062c030})
	GOROOT/src/runtime/panic.go:941 +0x397 fp=0xc00084d118 sp=0xc00084d058 pc=0x438397
runtime.goPanicSliceAcap(0x60484e40, 0x8000)
	GOROOT/src/runtime/panic.go:107 +0x7f fp=0xc00084d158 sp=0xc00084d118 pc=0x4365df
gvisor.dev/gvisor/pkg/sentry/fsimpl/iouringfs.unmarshalSqe(0xc000a363ac?, 0xc000b8c440, 0xc9812138)
	pkg/sentry/fsimpl/iouringfs/iouringfs.go:232 +0x3ea fp=0xc00084d210 sp=0xc00084d158 pc=0x1225daa
gvisor.dev/gvisor/pkg/sentry/fsimpl/iouringfs.(*FileDescription).ProcessSubmissions(0xc000a56000, 0x5fe7, 0x0?, 0x0?)
	pkg/sentry/fsimpl/iouringfs/iouringfs.go:344 +0x3e5 fp=0xc00084d4a8 sp=0xc00084d210 pc=0x1226c05
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.IOUringEnter(0xc00087e000, {{0x3}, {0x5fe7}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/vfs2/iouringfs.go:115 +0x288 fp=0xc00084d5b0 sp=0xc00084d4a8 pc=0x1247fe8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00087e000, 0x1aa, {{0x3}, {0x5fe7}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:142 +0xab8 fp=0xc00084d9f8 sp=0xc00084d5b0 pc=0xdb6078
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00087e000, 0x1?, {{0x3}, {0x5fe7}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:322 +0x8e fp=0xc00084da98 sp=0xc00084d9f8 pc=0xdb820e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00045e1e0?, 0x46fdec?, {{0x3}, {0x5fe7}, {0x0}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:282 +0xc5 fp=0xc00084db10 sp=0xc00084da98 pc=0xdb7ae5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc00087e000)
	pkg/sentry/kernel/task_syscall.go:257 +0x53b fp=0xc00084dc38 sp=0xc00084db10 pc=0xdb75db
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00087e000?, 0xc00087e000)
	pkg/sentry/kernel/task_run.go:253 +0x1e2b fp=0xc00084dec0 sp=0xc00084dc38 pc=0xda0b6b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00087e000, 0xd)
	pkg/sentry/kernel/task_run.go:94 +0x2c2 fp=0xc00084dfb0 sp=0xc00084dec0 pc=0xd9e382
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.func1()
	pkg/sentry/kernel/task_start.go:380 +0x48 fp=0xc00084dfe0 sp=0xc00084dfb0 pc=0xdb3788
runtime.goexit()
	src/runtime/asm_amd64.s:1571 +0x1 fp=0xc00084dfe8 sp=0xc00084dfe0 pc=0x46e1c1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:380 +0x1d0

Crashes (124):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/02 05:42 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/02 05:18 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/02 04:58 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/02 04:38 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/02 04:18 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/02 03:58 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/02 03:37 gvisor d4b159ae93b5 08977f5d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 14:07 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 14:07 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 14:07 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 14:07 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 14:01 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:57 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:57 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:57 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:57 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:57 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:56 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:56 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:56 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:56 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:53 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:51 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:47 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:46 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:45 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:43 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:41 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:37 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:36 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:35 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:33 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:31 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:27 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 13:26 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:52 gvisor d4b159ae93b5 a1d8560a .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/17 23:09 gvisor f3aaf4326636 4ba8ab94 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/17 03:04 gvisor 681c7ddd5a81 3a127a31 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/16 04:56 gvisor 9f351c68ca1d 3a127a31 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/14 09:28 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/13 06:49 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/13 00:37 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/12 21:50 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/12 21:49 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/11 11:06 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:53 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:52 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:52 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:52 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:51 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:51 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:50 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:49 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:48 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:47 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
2022/11/01 12:45 gvisor d4b159ae93b5 a1d8560a .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity NUM
* Struck through repros no longer work on HEAD.