syzbot


panic: runtime error: index out of range [ADDR] with length NUM (2)

Status: fixed on 2024/09/30 22:47
Fix commit: 9d41ac1ff0b2 Fix unsigned to signed integer conversion in syserr.getHostTranslation().
First crash: 58d, last: 57d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: index out of range [ADDR] with length NUM C 17 625d 625d 26/26 fixed on 2023/03/22 22:01

Sample crash report:
panic: runtime error: index out of range [18446744071562067968] with length 134

goroutine 260 gp=0xc0007b0000 m=13 mp=0xc000592008 [running]:
panic({0x123fac0?, 0xc0003ba018?})
	GOROOT/src/runtime/panic.go:779 +0x158 fp=0xc0005f5670 sp=0xc0005f55c0 pc=0x43ca98
runtime.goPanicIndexU(0xffffffff80000000, 0x86)
	GOROOT/src/runtime/panic.go:120 +0x7c fp=0xc0005f56b0 sp=0xc0005f5670 pc=0x43b5bc
gvisor.dev/gvisor/pkg/syserr.getHostTranslation(...)
	pkg/syserr/host_linux.go:35
gvisor.dev/gvisor/pkg/syserr.IsValid(...)
	pkg/syserr/syserr.go:239
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*Response).Error(0xc0002ae0e0?)
	pkg/sentry/fsimpl/fuse/request_response.go:201 +0xe9 fp=0xc0005f5708 sp=0xc0005f56b0 pc=0xebea69
gvisor.dev/gvisor/pkg/sentry/fsimpl/fuse.(*directoryFD).IterDirents(0xc00001a510, {0x15913d8, 0xc0007ae008}, {0x156f060, 0xc0007a8d80})
	pkg/sentry/fsimpl/fuse/directory.go:73 +0x1df fp=0xc0005f57c0 sp=0xc0005f5708 pc=0xeb1c5f
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).IterDirents(0xc0007ae008?, {0x15913d8?, 0xc0007ae008?}, {0x156f060?, 0xc0007a8d80?})
	pkg/sentry/vfs/file_description.go:691 +0x8c fp=0xc0005f5838 sp=0xc0005f57c0 pc=0x7c1aac
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.getdents(0xc0007ae008, {{0x4}, {0x20000340}, {0x6e}, {0x0}, {0x0}, {0x0}}, 0x1)
	pkg/sentry/syscalls/linux/sys_getdents.go:69 +0x179 fp=0xc0005f5900 sp=0xc0005f5838 pc=0xbd68d9
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Getdents64(0xc0007ae008?, 0x2?, {{0x4}, {0x20000340}, {0x6e}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_getdents.go:36 +0x35 fp=0xc0005f5950 sp=0xc0005f5900 pc=0xbd6735
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0007ae008, 0xd9, {{0x4}, {0x20000340}, {0x6e}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x673 fp=0xc0005f5c90 sp=0xc0005f5950 pc=0xa53ef3
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0007ae008, 0xd9, {{0x4}, {0x20000340}, {0x6e}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc0005f5ce8 sp=0xc0005f5c90 pc=0xa55065
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0007ae008, 0xd9, {{0x4}, {0x20000340}, {0x6e}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc0005f5d38 sp=0xc0005f5ce8 pc=0xa54d65
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0007ac270?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc0005f5e20 sp=0xc0005f5d38 pc=0xa54ae5
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00033a360?, 0xc0007ae008)
	pkg/sentry/kernel/task_run.go:270 +0xef7 fp=0xc0005f5f38 sp=0xc0005f5e20 pc=0xa48e37
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0007ae008, 0x9)
	pkg/sentry/kernel/task_run.go:98 +0x1ff fp=0xc0005f5fc0 sp=0xc0005f5f38 pc=0xa4787f
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:400 +0x25 fp=0xc0005f5fe0 sp=0xc0005f5fc0 pc=0xa526c5
runtime.goexit({})
	src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0005f5fe8 sp=0xc0005f5fe0 pc=0x478ac1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 232
	pkg/sentry/kernel/task_start.go:400 +0xc5

Crashes (23):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/29 10:01 gvisor 3971ecbc6ccd ba29ff75 console log report syz / log C ci-gvisor-ptrace-2 panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 09:31 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-2-race panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 09:06 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-1-race panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 08:54 gvisor 3971ecbc6ccd ba29ff75 console log report syz / log C ci-gvisor-ptrace-1 panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 08:43 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-systrap-1-race panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 06:58 gvisor 3971ecbc6ccd ba29ff75 console log report syz / log C ci-gvisor-systrap-1 panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 06:45 gvisor 3971ecbc6ccd ba29ff75 console log report syz / log C ci-gvisor-ptrace-3 panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 05:56 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-3-race panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 05:12 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-systrap-1-race-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 05:11 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-1-race-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 05:11 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-2-race-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 05:10 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-3-race-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 console log report syz / log C ci-gvisor-kvm panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-3-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-ptrace-2-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-systrap-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:36 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-kvm-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:15 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-kvm-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-arm64-systrap-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 04:51 gvisor 3971ecbc6ccd ba29ff75 .config console log report syz / log C ci-gvisor-arm64-ptrace-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/30 07:46 gvisor 3971ecbc6ccd ba29ff75 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/30 04:40 gvisor 3971ecbc6ccd ba29ff75 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: index out of range [ADDR] with length NUM
2024/09/29 03:54 gvisor 3971ecbc6ccd ba29ff75 .config console log report info ci-gvisor-kvm-cover panic: runtime error: index out of range [ADDR] with length NUM
* Struck through repros no longer work on HEAD.