syzbot


panic: makechan: size out of range

Status: fixed on 2021/04/10 05:37
Fix commit: dc8f6c691474 Move maxListenBacklog check to sentry
First crash: 1330d, last: 1326d

Sample crash report:
panic: makechan: size out of range

goroutine 646 [running]:
panic(0x11abc20, 0x14ac8c0)
	GOROOT/src/runtime/panic.go:1064 +0x545 fp=0xc000541a48 sp=0xc000541980 pc=0x437265
runtime.makechan(0x1145400, 0xffffffff80000000, 0xc000030000)
	GOROOT/src/runtime/chan.go:84 +0x1d6 fp=0xc000541a90 sp=0xc000541a48 pc=0x4057b6
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*connectionedEndpoint).Listen(0xc0003d6900, 0xffffffff80000000, 0x0)
	pkg/sentry/socket/unix/transport/connectioned.go:467 +0x285 fp=0xc000541af8 sp=0xc000541a90 pc=0x72be05
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*socketOpsCommon).Listen(0xc0007c81f8, 0xc0003d0a80, 0xffffffff80000000, 0x0)
	pkg/sentry/socket/unix/unix.go:237 +0x48 fp=0xc000541b20 sp=0xc000541af8 pc=0xc074e8
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.Listen(0xc0003d0a80, 0x3, 0x80000000, 0x43eed9, 0x400488, 0x400488, 0x400488, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/vfs2/socket.go:460 +0x15a fp=0xc000541b90 sp=0xc000541b20 pc=0xebb13a
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0003d0a80, 0x32, 0x3, 0x80000000, 0x43eed9, 0x400488, 0x400488, 0x400488, 0x0, 0x1348760, ...)
	pkg/sentry/kernel/task_syscall.go:116 +0x1b9 fp=0xc000541c50 sp=0xc000541b90 pc=0xa597f9
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0003d0a80, 0x32, 0x3, 0x80000000, 0x43eed9, 0x400488, 0x400488, 0x400488, 0x400488, 0x400488)
	pkg/sentry/kernel/task_syscall.go:291 +0x70 fp=0xc000541cd8 sp=0xc000541c50 pc=0xa5aab0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0003d0a80, 0x32, 0x3, 0x80000000, 0x43eed9, 0x400488, 0x400488, 0x400488, 0xc000650520, 0xc000650480)
	pkg/sentry/kernel/task_syscall.go:238 +0xb4 fp=0xc000541d38 sp=0xc000541cd8 pc=0xa5a5b4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0003d0a80, 0x2, 0xc0003d0a80)
	pkg/sentry/kernel/task_syscall.go:205 +0x198 fp=0xc000541e08 sp=0xc000541d38 pc=0xa59e98
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc0003d0a80, 0x14c3640, 0x0)
	pkg/sentry/kernel/task_run.go:327 +0xd95 fp=0xc000541f60 sp=0xc000541e08 pc=0xa4c8d5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0003d0a80, 0xb)
	pkg/sentry/kernel/task_run.go:100 +0x1e2 fp=0xc000541fd0 sp=0xc000541f60 pc=0xa4b3e2
runtime.goexit()
	src/runtime/asm_amd64.s:1374 +0x1 fp=0xc000541fd8 sp=0xc000541fd0 pc=0x4709a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:381 +0x116

Crashes (183):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/08 16:52 gvisor 192f20788b33 6a81331a .config console log report syz C ci-gvisor-ptrace-2-cover panic: makechan: size out of range
2021/04/08 16:41 gvisor 192f20788b33 6a81331a .config console log report syz C ci-gvisor-ptrace-2-cover panic: makechan: size out of range
2021/04/06 13:45 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/06 13:44 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/06 13:35 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/06 13:34 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/06 11:24 gvisor fb4c700d0610 6a81331a .config console log report syz C ci-gvisor-kvm-cover panic: makechan: size out of range
2021/04/06 11:17 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/06 11:15 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-3-cover panic: makechan: size out of range
2021/04/06 11:15 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/06 11:15 gvisor fb4c700d0610 6a81331a .config console log report syz C ci-gvisor-kvm-cover panic: makechan: size out of range
2021/04/06 11:14 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/06 11:14 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/06 10:55 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/06 10:45 gvisor 56c69fb0e7f9 6a81331a .config console log report syz C ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/08 16:30 gvisor 192f20788b33 6a81331a .config console log report syz ci-gvisor-ptrace-2-cover panic: makechan: size out of range
2021/04/06 13:24 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/06 13:24 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/06 10:53 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/06 10:42 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/06 10:41 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-3-cover panic: makechan: size out of range
2021/04/06 10:41 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/06 10:27 gvisor 56c69fb0e7f9 6a81331a .config console log report syz ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/10 01:23 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/10 00:34 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/09 23:31 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/09 22:05 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/09 21:36 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/09 18:34 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/09 17:28 gvisor 1fe5dd8c68ef 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/09 13:43 gvisor 496a3654e7af 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/09 12:43 gvisor 496a3654e7af 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/09 11:31 gvisor edf30a9bc5a6 6a81331a .config console log report info ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/09 11:07 gvisor 496a3654e7af 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/09 10:05 gvisor edf30a9bc5a6 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/09 05:28 gvisor edf30a9bc5a6 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/09 02:54 gvisor edf30a9bc5a6 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/09 00:45 gvisor 192f20788b33 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/08 23:09 gvisor 192f20788b33 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/08 22:09 gvisor 192f20788b33 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/08 14:53 gvisor 192f20788b33 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/08 13:42 gvisor 192f20788b33 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/08 11:03 gvisor e6133abfca2c 6a81331a .config console log report info ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/08 04:16 gvisor e6133abfca2c 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/08 03:12 gvisor e6133abfca2c 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/08 02:09 gvisor e6133abfca2c 6a81331a .config console log report info ci-gvisor-ptrace-2-cover panic: makechan: size out of range
2021/04/07 22:00 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/07 20:29 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/07 19:00 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/07 16:58 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/07 15:25 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/07 14:17 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/07 09:54 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/07 09:43 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/07 07:49 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/07 06:44 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-2-race panic: makechan: size out of range
2021/04/07 03:23 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/07 02:44 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/07 01:19 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-1-race panic: makechan: size out of range
2021/04/06 22:30 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/06 21:27 gvisor d7fd00bad141 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/06 13:42 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/06 13:41 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/06 13:35 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-1 panic: makechan: size out of range
2021/04/06 13:32 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-3-race panic: makechan: size out of range
2021/04/06 13:18 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/06 13:15 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-2 panic: makechan: size out of range
2021/04/06 13:14 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/06 13:14 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
2021/04/06 13:09 gvisor 56c69fb0e7f9 6a81331a .config console log report info ci-gvisor-ptrace-3 panic: makechan: size out of range
* Struck through repros no longer work on HEAD.