syzbot


panic: runtime error: makeslice: len out of range (4)

Status: fixed on 2021/11/10 12:39
Fix commit: 37792ee1e6e1 Validate ControlMessageHeader.Length
First crash: 924d, last: 920d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: makeslice: len out of range (2) C 5 1282d 1310d 0/26 fixed on 2020/11/13 09:22
gvisor panic: runtime error: makeslice: len out of range syz 49 1499d 1521d 0/26 fixed on 2020/04/10 14:44
gvisor panic: runtime error: makeslice: len out of range (3) C 10 990d 990d 14/26 fixed on 2021/09/01 20:11

Sample crash report:
panic: runtime error: makeslice: len out of range

goroutine 191733 [running]:
panic(0x1237c60, 0x1574bd0)
	GOROOT/src/runtime/panic.go:1065 +0x565 fp=0xc00ec695e8 sp=0xc00ec69520 pc=0x437c65
runtime.panicmakeslicelen(...)
	GOROOT/src/runtime/slice.go:27
runtime.makeslice(0x11dcfe0, 0xf240000000000002, 0xf240000000000002, 0x18)
	GOROOT/src/runtime/slice.go:93 +0xc5 fp=0xc00ec69618 sp=0xc00ec695e8 pc=0x450dc5
gvisor.dev/gvisor/pkg/sentry/socket/control.Parse(0xc00c3c4a80, 0x13e5a00, 0xc00b970b40, 0xc010d07660, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, ...)
	pkg/sentry/socket/control/control.go:642 +0x7c5 fp=0xc00ec697a8 sp=0xc00ec69618 pc=0xad1285
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.sendSingleMsg(0xc00c3c4a80, 0x7fa9f5b6abf0, 0xc00b970b40, 0xc00b970b40, 0x20000080, 0x0, 0x0, 0x3fa82d182710, 0xc00ec69bb0)
	pkg/sentry/syscalls/linux/vfs2/socket.go:1353 +0x393 fp=0xc00ec69b08 sp=0xc00ec697a8 pc=0xf4f2b3
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.SendMsg(0xc00c3c4a80, 0x4, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/vfs2/socket.go:1202 +0x23c fp=0xc00ec69ba8 sp=0xc00ec69b08 pc=0xf4e4dc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00c3c4a80, 0x2e, 0x4, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0xc000001fa0, 0x13ed1a0, ...)
	pkg/sentry/kernel/task_syscall.go:115 +0x1b9 fp=0xc00ec69c68 sp=0xc00ec69ba8 pc=0xa6edf9
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00c3c4a80, 0x2e, 0x4, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:290 +0x70 fp=0xc00ec69cf0 sp=0xc00ec69c68 pc=0xa700d0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00c3c4a80, 0x2e, 0x4, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:237 +0xb4 fp=0xc00ec69d50 sp=0xc00ec69cf0 pc=0xa6fbb4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc00c3c4a80, 0x2, 0xc00c3c4a80)
	pkg/sentry/kernel/task_syscall.go:204 +0x198 fp=0xc00ec69e20 sp=0xc00ec69d50 pc=0xa6f498
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc00c3c4a80, 0x158ca40, 0x0)
	pkg/sentry/kernel/task_run.go:327 +0xe15 fp=0xc00ec69f60 sp=0xc00ec69e20 pc=0xa62355
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00c3c4a80, 0x157b)
	pkg/sentry/kernel/task_run.go:100 +0x1e2 fp=0xc00ec69fd0 sp=0xc00ec69f60 pc=0xa60de2
runtime.goexit()
	src/runtime/asm_amd64.s:1371 +0x1 fp=0xc00ec69fd8 sp=0xc00ec69fd0 pc=0x472861
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:380 +0x116

Crashes (36):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/11/10 11:31 gvisor 3f5cfe694a99 55fa030c .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/10 07:33 gvisor 3f5cfe694a99 55fa030c .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/10 06:58 gvisor 3f5cfe694a99 55fa030c .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/10 04:38 gvisor 3f5cfe694a99 55fa030c .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/09 23:30 gvisor 3f5cfe694a99 59bcaf9a .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: makeslice: len out of range
2021/11/09 23:20 gvisor 3f5cfe694a99 59bcaf9a .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/09 18:17 gvisor 84b38f4c6e06 59bcaf9a .config console log report info ci-gvisor-kvm panic: runtime error: makeslice: len out of range
2021/11/09 16:51 gvisor 84b38f4c6e06 59bcaf9a .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/09 13:39 gvisor 84b38f4c6e06 59bcaf9a .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: makeslice: len out of range
2021/11/09 12:03 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: makeslice: len out of range
2021/11/09 12:01 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-ptrace-1-race panic: runtime error: makeslice: len out of range
2021/11/09 10:06 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-ptrace-1 panic: runtime error: makeslice: len out of range
2021/11/09 08:00 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/09 07:38 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-kvm panic: runtime error: makeslice: len out of range
2021/11/09 06:27 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/09 04:02 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: makeslice: len out of range
2021/11/09 02:39 gvisor 84b38f4c6e06 8ab17e57 .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/08 14:43 gvisor 510bad19b6a7 d29682f1 .config console log report info ci-gvisor-ptrace-2 panic: runtime error: makeslice: len out of range
2021/11/08 13:58 gvisor 4622e17bccc7 d29682f1 .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/08 11:51 gvisor 4622e17bccc7 d29682f1 .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/08 07:50 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/08 04:28 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/08 04:24 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/08 04:23 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/07 23:17 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/07 22:44 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/07 13:47 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/07 13:32 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-ptrace-3 panic: runtime error: makeslice: len out of range
2021/11/07 12:39 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: makeslice: len out of range
2021/11/07 10:30 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: makeslice: len out of range
2021/11/07 10:27 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/07 09:04 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-ptrace-3 panic: runtime error: makeslice: len out of range
2021/11/07 07:32 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/06 20:11 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
2021/11/06 18:49 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: makeslice: len out of range
2021/11/06 14:26 gvisor ce4f4283badb 4c1be0be .config console log report info ci-gvisor-kvm-cover panic: runtime error: makeslice: len out of range
* Struck through repros no longer work on HEAD.