syzbot


panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR

Status: fixed on 2022/11/18 03:22
Fix commit: 3c0e0a3746a3 io_uring: Fix several issues with shared ring buffers.
First crash: 756d, last: 739d

Sample crash report:
panic: runtime error: slice bounds out of range [:2872050016] with capacity 593600

goroutine 111 [running]:
panic({0x19b0d00, 0xc0004fe318})
	GOROOT/src/runtime/panic.go:941 +0x397 fp=0xc000989118 sp=0xc000989058 pc=0x438397
runtime.goPanicSliceAcap(0xab300160, 0x90ec0)
	GOROOT/src/runtime/panic.go:107 +0x7f fp=0xc000989158 sp=0xc000989118 pc=0x4365df
gvisor.dev/gvisor/pkg/sentry/fsimpl/iouringfs.(*FileDescription).updateCq(0xc00077be6c?, 0xc000264420, 0x101010180000000?, 0xab30015)
	pkg/sentry/fsimpl/iouringfs/iouringfs.go:394 +0x3b8 fp=0xc000989210 sp=0xc000989158 pc=0x1227478
gvisor.dev/gvisor/pkg/sentry/fsimpl/iouringfs.(*FileDescription).ProcessSubmissions(0xc00090c180, 0xf1, 0x0?, 0x0?)
	pkg/sentry/fsimpl/iouringfs/iouringfs.go:355 +0x4d8 fp=0xc0009894a8 sp=0xc000989210 pc=0x1226a98
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.IOUringEnter(0xc0005d5500, {{0x3}, {0xf1}, {0x0}, {0x0}, {0x0}, {0x5a}})
	pkg/sentry/syscalls/linux/vfs2/iouringfs.go:115 +0x288 fp=0xc0009895b0 sp=0xc0009894a8 pc=0x1247d88
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0005d5500, 0x1aa, {{0x3}, {0xf1}, {0x0}, {0x0}, {0x0}, {0x5a}})
	pkg/sentry/kernel/task_syscall.go:142 +0xab8 fp=0xc0009899f8 sp=0xc0009895b0 pc=0xdb5df8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0005d5500, 0x1?, {{0x3}, {0xf1}, {0x0}, {0x0}, {0x0}, {0x5a}})
	pkg/sentry/kernel/task_syscall.go:322 +0x8e fp=0xc000989a98 sp=0xc0009899f8 pc=0xdb7f8e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0004e4690?, 0x46fdec?, {{0x3}, {0xf1}, {0x0}, {0x0}, {0x0}, {0x5a}})
	pkg/sentry/kernel/task_syscall.go:282 +0xc5 fp=0xc000989b10 sp=0xc000989a98 pc=0xdb7865
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0005d5500)
	pkg/sentry/kernel/task_syscall.go:257 +0x53b fp=0xc000989c38 sp=0xc000989b10 pc=0xdb735b
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0005d5500?, 0xc0005d5500)
	pkg/sentry/kernel/task_run.go:253 +0x1e2b fp=0xc000989ec0 sp=0xc000989c38 pc=0xda08eb
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0005d5500, 0xb)
	pkg/sentry/kernel/task_run.go:94 +0x2c2 fp=0xc000989fb0 sp=0xc000989ec0 pc=0xd9e102
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.func1()
	pkg/sentry/kernel/task_start.go:380 +0x48 fp=0xc000989fe0 sp=0xc000989fb0 pc=0xdb3508
runtime.goexit()
	src/runtime/asm_amd64.s:1571 +0x1 fp=0xc000989fe8 sp=0xc000989fe0 pc=0x46e1c1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:380 +0x1d0

Crashes (914):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/01 05:50 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:32 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:30 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:29 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:29 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:26 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:26 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:25 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:25 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:24 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:23 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/01 00:05 gvisor 9ae2eea3ba9a 43f72c2d .config console log report syz C ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/18 00:21 gvisor f3aaf4326636 4ba8ab94 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/17 21:54 gvisor f3aaf4326636 4ba8ab94 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/17 17:24 gvisor dec1aed1435f 4ba8ab94 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/17 10:05 gvisor dec1aed1435f 3a127a31 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/17 08:19 gvisor dec1aed1435f 3a127a31 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 22:12 gvisor 681c7ddd5a81 3a127a31 .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 15:03 gvisor 9f351c68ca1d 3a127a31 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 13:19 gvisor 9f351c68ca1d 3a127a31 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 12:46 gvisor 9f351c68ca1d 3a127a31 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 10:12 gvisor 9f351c68ca1d 3a127a31 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 05:19 gvisor 9f351c68ca1d 3a127a31 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/16 00:26 gvisor 413330510c33 bfcab33d .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/15 23:15 gvisor 413330510c33 bfcab33d .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/15 20:28 gvisor 413330510c33 bfcab33d .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/15 14:36 gvisor 413330510c33 97de9cfc .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/15 10:43 gvisor c97edad873c3 97de9cfc .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/15 04:39 gvisor c97edad873c3 97de9cfc .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/14 16:44 gvisor 4b63ff222d43 943f4cb8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/14 11:56 gvisor 4b63ff222d43 943f4cb8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/14 05:34 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/14 00:22 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 22:46 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 21:35 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 20:35 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 20:00 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 18:49 gvisor 4b63ff222d43 7ba4d859 .config console log report info ci-gvisor-ptrace-3-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 10:58 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 10:51 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 04:16 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 04:14 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/13 00:12 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 19:16 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 17:22 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-1-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 16:08 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 14:20 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 13:59 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 07:55 gvisor 4b63ff222d43 f42ee5d8 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 04:09 gvisor 8756ebc3b406 f42ee5d8 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/12 00:33 gvisor 8756ebc3b406 f42ee5d8 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 22:29 gvisor 5a0803c66ec4 f42ee5d8 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 21:13 gvisor 8756ebc3b406 f42ee5d8 .config console log report info ci-gvisor-ptrace-2 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 20:17 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 19:36 gvisor 8756ebc3b406 f42ee5d8 .config console log report info ci-gvisor-ptrace-2-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 19:30 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 19:24 gvisor 8756ebc3b406 f42ee5d8 .config console log report info ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 18:14 gvisor 5a0803c66ec4 f42ee5d8 .config console log report info ci-gvisor-ptrace-3-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 17:59 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 17:54 gvisor 5a0803c66ec4 f42ee5d8 .config console log report info ci-gvisor-ptrace-3 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 15:04 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-ptrace-1 panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 14:49 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 13:03 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-ptrace-3-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 11:56 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 07:17 gvisor eae4c6f2757c f42ee5d8 .config console log report info ci-gvisor-ptrace-1-race panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/11 05:47 gvisor 93b37dad70ea 3ead01ad .config console log report info ci-gvisor-kvm-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
2022/11/10 21:40 gvisor 93b37dad70ea 3ead01ad .config console log report info ci-gvisor-ptrace-1-race-cover panic: runtime error: slice bounds out of range [:ADDR] with capacity ADDR
* Struck through repros no longer work on HEAD.