syzbot


panic: IPv6 payload too large: NUM, must be <= NUM

Status: fixed on 2021/01/17 10:07
Fix commit: ec9e263f213c Correctly return EMSGSIZE when packet is too big in raw socket.
First crash: 1444d, last: 1411d

Sample crash report:
panic: IPv6 payload too large: 65537, must be <= 65535

goroutine 1086 [running]:
panic(0xfd0f00, 0xc0008d2100)
	GOROOT/src/runtime/panic.go:1064 +0x470 fp=0xc0008c9e00 sp=0xc0008c9d48 pc=0x437030
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).addIPHeader(0xc0000d2000, 0xc00045a370, 0x10, 0xc00045a370, 0x10, 0xc00052a000, 0x4000000011, 0x0, 0x0, 0x0)
	pkg/tcpip/network/ipv6/ipv6.go:547 +0x2b7 fp=0xc0008c9ed0 sp=0xc0008c9e00 pc=0xb08d17
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).WritePacket(0xc0000d2000, 0xc0000f2f20, 0x0, 0x4000000011, 0xc00052a000, 0x56)
	pkg/tcpip/network/ipv6/ipv6.go:612 +0xaf fp=0xc0008ca310 sp=0xc0008c9ed0 pc=0xb090cf
gvisor.dev/gvisor/pkg/tcpip/stack.(*Route).WritePacket(0xc0000f2f20, 0x0, 0x4000000011, 0xc00052a000, 0x8)
	pkg/tcpip/stack/route.go:410 +0xb7 fp=0xc0008ca350 sp=0xc0008ca310 pc=0x936dd7
gvisor.dev/gvisor/pkg/tcpip/transport/udp.sendUDP(0xc0000f2f20, 0xc00021e980, 0x1, 0x1, 0xfff9, 0x1004e218fd3, 0x1303120, 0xc0001f6000, 0xc000000000, 0x0)
	pkg/tcpip/transport/udp/endpoint.go:898 +0x43b fp=0xc0008cb358 sp=0xc0008ca350 pc=0xaeb49b
gvisor.dev/gvisor/pkg/tcpip/transport/udp.(*endpoint).write(0xc000268000, 0x1305d20, 0xc000890320, 0xc00021e940, 0x0, 0x0, 0x0, 0x0)
	pkg/tcpip/transport/udp/endpoint.go:563 +0x5ea fp=0xc0008cb4d8 sp=0xc0008cb358 pc=0xae94ea
gvisor.dev/gvisor/pkg/tcpip/transport/udp.(*endpoint).Write(0xc000268000, 0x1305d20, 0xc000890320, 0xc00021e940, 0xc000000000, 0x10, 0x884e21, 0xc00040000a)
	pkg/tcpip/transport/udp/endpoint.go:407 +0x68 fp=0xc0008cb528 sp=0xc0008cb4d8 pc=0xae8da8
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*socketOpsCommon).SendMsg(0xc0004e8070, 0xc0001f6000, 0x1320cc0, 0xc0008e7000, 0xc0000de380, 0x8, 0x0, 0xfff9, 0x100, 0xc00040a080, ...)
	pkg/sentry/socket/netstack/netstack.go:2983 +0x19d fp=0xc0008cb818 sp=0xc0008cb528 pc=0xb2ed3d
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.sendSingleMsg(0xc0001f6000, 0x3f2a44622160, 0xc0004e8000, 0xc0004e8000, 0x20000040, 0xc000000000, 0xfff, 0x10001ff0000, 0x807a78)
	pkg/sentry/syscalls/linux/vfs2/socket.go:1051 +0x3c2 fp=0xc0008cba58 sp=0xc0008cb818 pc=0xda3cc2
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.SendMsg(0xc0001f6000, 0x3, 0x20000040, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/vfs2/socket.go:929 +0x225 fp=0xc0008cbaf8 sp=0xc0008cba58 pc=0xda30c5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0001f6000, 0x2e, 0x3, 0x20000040, 0x0, 0x4, 0x1, 0x1, 0xddd397, 0x11a7a20, ...)
	pkg/sentry/kernel/task_syscall.go:104 +0x13c fp=0xc0008cbc58 sp=0xc0008cbaf8 pc=0x9d273c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0001f6000, 0x2e, 0x3, 0x20000040, 0x0, 0x4, 0x1, 0x1, 0x1, 0x1)
	pkg/sentry/kernel/task_syscall.go:239 +0x66 fp=0xc0008cbce0 sp=0xc0008cbc58 pc=0x9d3906
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0001f6000, 0x2e, 0x3, 0x20000040, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:199 +0x98 fp=0xc0008cbd40 sp=0xc0008cbce0 pc=0x9d34b8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0001f6000, 0x2, 0xc0001f6000)
	pkg/sentry/kernel/task_syscall.go:174 +0x15c fp=0xc0008cbe10 sp=0xc0008cbd40 pc=0x9d2e5c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc0001f6000, 0x12f80c0, 0x0)
	pkg/sentry/kernel/task_run.go:282 +0xc45 fp=0xc0008cbf60 sp=0xc0008cbe10 pc=0x9c7265
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0001f6000, 0x1b)
	pkg/sentry/kernel/task_run.go:97 +0x1af fp=0xc0008cbfd0 sp=0xc0008cbf60 pc=0x9c5f2f
runtime.goexit()
	src/runtime/asm_amd64.s:1374 +0x1 fp=0xc0008cbfd8 sp=0xc0008cbfd0 pc=0x4705a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:323 +0xfe

Crashes (46):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/23 22:59 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-kvm
2020/12/23 22:36 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-ptrace-1-race
2020/12/23 22:36 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-ptrace-2-race
2020/12/23 22:36 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-ptrace-1
2020/12/23 22:36 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-ptrace-2-cover
2020/12/23 22:36 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-ptrace-2
2020/12/23 22:15 gvisor 6d96a2394d3a c2c1d1dd .config console log report syz C ci-gvisor-ptrace-1-cover
2020/12/13 07:49 gvisor 08d36b6c6308 bca53db9 .config console log report syz ci-gvisor-ptrace-2-race
2021/01/14 21:18 gvisor c49ce8ca8ab9 468dbb55 .config console log report info ci-gvisor-ptrace-1-cover
2021/01/12 11:37 gvisor a20da708291e 2c1f2513 .config console log report info ci-gvisor-ptrace-1
2021/01/09 23:40 gvisor bf343394d498 2c1f2513 .config console log report info ci-gvisor-ptrace-1
2021/01/08 07:40 gvisor 77b340ce8223 c104d4a3 .config console log report info ci-gvisor-ptrace-1
2021/01/07 14:40 gvisor 776016ac6412 c104d4a3 .config console log report info ci-gvisor-ptrace-1-cover
2021/01/07 14:38 gvisor 7817e3b5e420 c104d4a3 .config console log report info ci-gvisor-kvm-cover
2021/01/07 14:36 gvisor 776016ac6412 c104d4a3 .config console log report info ci-gvisor-ptrace-1
2021/01/07 14:36 gvisor 776016ac6412 c104d4a3 .config console log report info ci-gvisor-ptrace-2-cover
2021/01/07 14:35 gvisor 776016ac6412 c104d4a3 .config console log report info ci-gvisor-ptrace-2-race
2021/01/07 14:34 gvisor 776016ac6412 c104d4a3 .config console log report info ci-gvisor-ptrace-1-race
2021/01/07 14:32 gvisor 776016ac6412 c104d4a3 .config console log report info ci-gvisor-ptrace-2
2021/01/07 14:28 gvisor 7817e3b5e420 c104d4a3 .config console log report info ci-gvisor-kvm
2021/01/07 01:00 gvisor 7817e3b5e420 c104d4a3 .config console log report info ci-gvisor-ptrace-2-race
2021/01/05 20:46 gvisor 622db84e4bba a0234d98 .config console log report info ci-gvisor-ptrace-2-race
2021/01/05 20:27 gvisor 622db84e4bba a0234d98 .config console log report info ci-gvisor-ptrace-1-race
2021/01/05 19:55 gvisor 622db84e4bba a0234d98 .config console log report info ci-gvisor-ptrace-1
2021/01/05 06:50 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-kvm-cover
2021/01/05 06:46 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-ptrace-2-cover
2021/01/05 06:45 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-ptrace-2
2021/01/05 06:45 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-ptrace-2-race
2021/01/05 06:44 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-ptrace-1
2021/01/05 06:44 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-ptrace-1-race
2021/01/05 06:40 gvisor 807a080d9574 2a28ff1f .config console log report info ci-gvisor-ptrace-1-cover
2020/12/30 11:59 gvisor 85c1c3ed4b8d 0fa352f2 .config console log report info ci-gvisor-ptrace-1
2020/12/28 16:18 gvisor d07915987631 8259d56c .config console log report info ci-gvisor-ptrace-2
2020/12/26 11:38 gvisor d07915987631 821e0b09 .config console log report info ci-gvisor-ptrace-2
2020/12/26 10:30 gvisor d07915987631 821e0b09 .config console log report info ci-gvisor-ptrace-1-race
2020/12/26 10:29 gvisor d07915987631 821e0b09 .config console log report info ci-gvisor-kvm
2020/12/26 10:28 gvisor d07915987631 821e0b09 .config console log report info ci-gvisor-ptrace-1
2020/12/26 04:38 gvisor d07915987631 821e0b09 .config console log report info ci-gvisor-kvm
2020/12/23 21:58 gvisor 6d96a2394d3a c2c1d1dd .config console log report info ci-gvisor-ptrace-1-cover
2020/12/19 05:02 gvisor 9a72730f2456 04201c06 .config console log report info ci-gvisor-ptrace-2
2020/12/14 14:08 gvisor 08d36b6c6308 b22a7ec3 .config console log report info ci-gvisor-kvm
2020/12/13 07:22 gvisor 08d36b6c6308 bca53db9 .config console log report info ci-gvisor-ptrace-2-race
2020/12/13 07:22 gvisor 08d36b6c6308 bca53db9 .config console log report info ci-gvisor-ptrace-2-race
* Struck through repros no longer work on HEAD.