syzbot


panic: runtime error: index out of range [NUM] with length NUM (5)

Status: fixed on 2025/02/11 14:03
Fix commit: d6454b486f82 Lock around packetmmap cooked field and check for PACKET_RESERVE opt size.
First crash: 13d, last: 10d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
gvisor panic: runtime error: index out of range [NUM] with length NUM (4) C 174 14d 15d 26/26 fixed on 2025/02/06 21:42
gvisor panic: runtime error: index out of range [NUM] with length NUM C 12 1214d 1216d 14/26 fixed on 2021/10/27 00:49
gvisor panic: runtime error: index out of range [NUM] with length NUM (2) C 21 1121d 1128d 14/26 fixed on 2022/01/26 19:49
gvisor panic: runtime error: index out of range [NUM] with length NUM (3) C 372 760d 763d 18/26 fixed on 2023/01/23 05:20

Sample crash report:
panic: runtime error: index out of range [3] with length 0

goroutine 105 gp=0xc00063a000 m=12 mp=0xc00037d508 [running]:
panic({0x12b9e20?, 0xc000124090?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc00023f768 sp=0xc00023f6b8 pc=0x4740c8
runtime.goPanicIndex(0x3, 0x0)
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:115 +0x74 fp=0xc00023f7a8 sp=0xc00023f768 pc=0x438b74
encoding/binary.littleEndian.Uint32(...)
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/encoding/binary/binary.go:87
gvisor.dev/gvisor/pkg/sentry/socket/netstack.setSockOptPacket(0x3f54882350d8?, {0xc00023f8e0?, 0x40e7ff?}, {0x3f54882350d8?, 0xc000276000?}, 0x1?, {0xc000640b1c?, 0xc000278000?, 0x0?})
	pkg/sentry/socket/netstack/netstack.go:2788 +0x265 fp=0xc00023f898 sp=0xc00023f7a8 pc=0xba61c5
gvisor.dev/gvisor/pkg/sentry/socket/netstack.SetSockOpt(0x46e47a?, {0x15e04f8?, 0xc000278000?}, {0x3f54882350d8?, 0xc000276000?}, 0xa3ea48?, 0xc00023f988?, {0xc000640b1c, 0x0, 0x90})
	pkg/sentry/socket/netstack/netstack.go:1896 +0x148 fp=0xc00023f8f0 sp=0xc00023f898 pc=0xba33e8
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).SetSockOpt(0xc000278000, 0xc000640008?, 0x107?, 0xc?, {0xc000640b1c, 0x0?, 0x90?})
	pkg/sentry/socket/netstack/netstack.go:634 +0x225 fp=0xc00023f998 sp=0xc00023f8f0 pc=0xb9d5a5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SetSockOpt(0xc000640008, 0x5557bcfbf000?, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f26ee886e58}})
	pkg/sentry/syscalls/linux/sys_socket.go:551 +0x246 fp=0xc00023fa78 sp=0xc00023f998 pc=0xc2b8c6
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000640008, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f26ee886e58}})
	pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc00023fca8 sp=0xc00023fa78 pc=0xa77877
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000640008, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f26ee886e58}})
	pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc00023fd00 sp=0xc00023fca8 pc=0xa789e5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000640008, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f26ee886e58}})
	pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc00023fd50 sp=0xc00023fd00 pc=0xa786e5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000636000?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc00023fe28 sp=0xc00023fd50 pc=0xa78465
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00017e000?, 0xc000640008)
	pkg/sentry/kernel/task_run.go:269 +0xf17 fp=0xc00023ff30 sp=0xc00023fe28 pc=0xa6dc57
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000640008, 0xb)
	pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc00023ffc0 sp=0xc00023ff30 pc=0xa6c6b4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc00023ffe0 sp=0xc00023ffc0 pc=0xa76285
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00023ffe8 sp=0xc00023ffe0 pc=0x47d1a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 210
	pkg/sentry/kernel/task_start.go:412 +0xc5

Crashes (165):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/08 06:15 gvisor 9c490f813d37 ef44b750 console log report syz / log C ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:14 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-ptrace-1-race-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:13 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-systrap-1-race-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:12 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-systrap-1-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:11 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-ptrace-2-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:10 gvisor 9c490f813d37 ef44b750 console log report syz / log C ci-gvisor-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:08 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-ptrace-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:08 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-ptrace-2-race-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:07 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-kvm-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:05 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-ptrace-1-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:05 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-ptrace-2-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:04 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-systrap-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:03 gvisor 9c490f813d37 ef44b750 console log report syz / log C ci-gvisor-ptrace-2 panic: runtime error: index out of range [NUM] with length NUM
2025/02/07 23:56 gvisor 9c490f813d37 ef44b750 console log report syz / log C ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 10:17 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-arm64-ptrace-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 07:35 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-arm64-ptrace-1-race-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 01:36 gvisor 9c490f813d37 ef44b750 console log report syz / log C ci-gvisor-arm64-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 01:16 gvisor 9c490f813d37 ef44b750 console log report syz / log C ci-gvisor-arm64-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:23 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-arm64-ptrace-1-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:09 gvisor 9c490f813d37 ef44b750 .config console log report syz / log C ci-gvisor-arm64-systrap-1-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 18:21 gvisor 9c490f813d37 43f51a00 console log report info ci-gvisor-ptrace-2 panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 14:06 gvisor 9c490f813d37 43f51a00 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 13:48 gvisor 9c490f813d37 43f51a00 .config console log report info ci-gvisor-systrap-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 12:45 gvisor 9c490f813d37 43f51a00 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 11:24 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 08:13 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 06:18 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-2 panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 06:06 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 04:23 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-1-race-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/10 01:46 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-systrap-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 23:30 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-2 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 21:25 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 17:51 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 17:50 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 17:50 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-kvm-cover panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 14:50 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 09:56 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 07:18 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 02:50 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 21:12 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-systrap-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 16:33 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 11:35 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 05:12 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 05:12 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 04:11 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 04:11 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 03:25 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 03:25 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 02:10 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-systrap-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 02:10 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-systrap-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 02:09 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 02:09 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 01:15 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 01:14 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:22 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-kvm panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:19 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:19 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-ptrace-2-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:08 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-2 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 00:08 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-2 panic: runtime error: index out of range [NUM] with length NUM
2025/02/07 23:53 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/07 23:53 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 04:28 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 02:51 gvisor 9c490f813d37 ef44b750 .config console log report info ci-gvisor-arm64-ptrace-1-race panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 02:50 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/09 02:50 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 19:43 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-ptrace-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 05:11 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 02:04 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 02:04 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
2025/02/08 01:50 gvisor 9c490f813d37 ef44b750 console log report info ci-gvisor-arm64-systrap-1 panic: runtime error: index out of range [NUM] with length NUM
* Struck through repros no longer work on HEAD.