syzbot


panic: buffer too long by 8 bytes

Status: fixed on 2021/01/06 10:31
Fix commit: ce7a4440cae8 Fix panic when parsing SO_TIMESTAMP cmsg
First crash: 1441d, last: 1424d

Sample crash report:
panic: buffer too long by 8 bytes

goroutine 1275 [running]:
panic(0xfc9a00, 0xc000318470)
	GOROOT/src/runtime/panic.go:1064 +0x470 fp=0xc00065f6d0 sp=0xc00065f618 pc=0x437030
gvisor.dev/gvisor/pkg/binary.Unmarshal(0xc0001bc2e0, 0x10, 0x78, 0x13179a0, 0x1ac0ce0, 0xfa0800, 0xc00014aa48)
	pkg/binary/binary.go:118 +0x217 fp=0xc00065f758 sp=0xc00065f6d0 pc=0x57c737
gvisor.dev/gvisor/pkg/sentry/socket/control.Parse(0xc0004e7500, 0x1197e60, 0xc00079c000, 0xc0001bc2d0, 0x88, 0x88, 0x0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/socket/control/control.go:511 +0x4b2 fp=0xc00065f838 sp=0xc00065f758 pc=0xa213b2
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.sendSingleMsg(0xc0004e7500, 0x3feb0e671af8, 0xc00079c000, 0xc00079c000, 0x200004c0, 0xc000000040, 0xfff, 0x10001ff0000, 0x65fa78)
	pkg/sentry/syscalls/linux/vfs2/socket.go:1041 +0x28f fp=0xc00065fa58 sp=0xc00065f838 pc=0xd9da2f
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.SendMsg(0xc0004e7500, 0x3, 0x200004c0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/vfs2/socket.go:934 +0x225 fp=0xc00065faf8 sp=0xc00065fa58 pc=0xd9cf65
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0004e7500, 0x2e, 0x3, 0x200004c0, 0x40, 0x4, 0x0, 0x0, 0xc000046000, 0x119f480, ...)
	pkg/sentry/kernel/task_syscall.go:104 +0x13c fp=0xc00065fc58 sp=0xc00065faf8 pc=0x9d011c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0004e7500, 0x2e, 0x3, 0x200004c0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:239 +0x66 fp=0xc00065fce0 sp=0xc00065fc58 pc=0x9d12e6
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0004e7500, 0x2e, 0x3, 0x200004c0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:199 +0x98 fp=0xc00065fd40 sp=0xc00065fce0 pc=0x9d0e98
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0004e7500, 0x2, 0xc0004e7500)
	pkg/sentry/kernel/task_syscall.go:174 +0x15c fp=0xc00065fe10 sp=0xc00065fd40 pc=0x9d083c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc0004e7500, 0x12eee40, 0x0)
	pkg/sentry/kernel/task_run.go:282 +0xc45 fp=0xc00065ff60 sp=0xc00065fe10 pc=0x9c4c45
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0004e7500, 0x1a)
	pkg/sentry/kernel/task_run.go:97 +0x1af fp=0xc00065ffd0 sp=0xc00065ff60 pc=0x9c390f
runtime.goexit()
	src/runtime/asm_amd64.s:1374 +0x1 fp=0xc00065ffd8 sp=0xc00065ffd0 pc=0x4705a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:323 +0xfe

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/19 02:08 gvisor b645fcd241a8 04201c06 .config console log report syz C ci-gvisor-kvm
2020/12/16 12:55 gvisor c55e5bda4d45 649595c6 .config console log report syz C ci-gvisor-ptrace-3-cover
2020/12/15 18:14 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-2-cover
2020/12/15 18:13 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-1-cover
2020/12/15 18:13 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-1
2020/12/15 18:13 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-3-race
2020/12/15 18:10 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-1-race
2020/12/15 18:09 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-2-race
2020/12/15 18:09 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-2
2020/12/15 17:52 gvisor b2a697334890 b22a7ec3 .config console log report syz C ci-gvisor-ptrace-3
2021/01/02 13:38 gvisor 807a080d9574 79264ae3 .config console log report info ci-gvisor-ptrace-1-race
2020/12/15 17:40 gvisor b2a697334890 b22a7ec3 .config console log report info ci-gvisor-ptrace-3
* Struck through repros no longer work on HEAD.