syzbot


panic: runtime error: index out of range [ADDR] with length NUM

Status: auto-obsoleted due to no activity on 2022/10/01 20:20
Reported-by: syzbot+73f6d982301dbd066238@syzkaller.appspotmail.com
First crash: 914d, last: 914d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream panic: runtime error: index out of range [ADDR] with length NUM 1 993d 993d 0/28 auto-closed as invalid on 2022/06/14 12:14

Sample crash report:
panic: runtime error: index out of range [7798903] with length 22177

goroutine 31 [running]:
github.com/google/syzkaller/prog.ArgCommon.Type(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:61
github.com/google/syzkaller/prog.(*ResultArg).Size(0x8ace98)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:315 +0xa7
github.com/google/syzkaller/prog.foreachArgImpl({0x8ace18, 0xc027a9c6e0}, 0xc027aa0440, 0xc003c51550)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:147 +0x6be
github.com/google/syzkaller/prog.foreachArgImpl({0x8ace18, 0xc027a9c6a0}, 0xc027aa0440, 0xc003c51550)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:146 +0x6ae
github.com/google/syzkaller/prog.foreachArgImpl({0x8ace58, 0xc027a9bb60}, 0xc027aa0440, 0xc003c51550)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:163 +0x337
github.com/google/syzkaller/prog.ForeachArg(0xc027aa2190, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0x105
github.com/google/syzkaller/prog.getCompatibleResources(0xc023150ec0, {0x6cc7fc, 0xb}, 0xc023b07bc0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:910 +0xae
github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc023b07bc0, 0xc008f0bc70, 0xb40f00, 0x38)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:858 +0xde
github.com/google/syzkaller/prog.(*ResourceType).generate(0xb40f00, 0xc023b07bc0, 0x40c9b4, 0xd8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:672 +0xd4
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc023b07bc0, 0xc008f0bc70, {0x8b23d0, 0xb40f00}, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:660 +0x6b5
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:610
github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc01f869ec0, 0x411cc2, {0x11aacc0, 0x4, 0x4}, 0x2)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:598 +0x150
github.com/google/syzkaller/prog.(*StructType).generate(0xc64080, 0xc000096510, 0x73d32a, 0x2)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:796 +0x45
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc023b07bc0, 0xc008f0bc70, {0x8b2498, 0xc64080}, 0x2, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:660 +0x6b5
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:610
github.com/google/syzkaller/prog.(*PtrType).generate(0xb8bac0, 0xc023b07bc0, 0x40c9b4, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:815 +0x85
github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc023b07bc0, 0xc008f0bc70, {0x8b2308, 0xb8bac0}, 0x0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:660 +0x6b5
github.com/google/syzkaller/prog.(*randGen).generateArg(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:610
github.com/google/syzkaller/prog.(*randGen).generateArgs(0x127a2c0, 0x0, {0xfc3ce0, 0x3, 0x3}, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:598 +0x150
github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc023b07bc0, 0xc008f0bc70, 0x127a2c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:553 +0x78
github.com/google/syzkaller/prog.(*randGen).generateCall(0xc023b07bc0, 0xc008f0bc70, 0x5, 0x10000bfaac84108)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:545 +0xac
github.com/google/syzkaller/prog.(*mutator).insertCall(0xc003c51e58)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:141 +0xd0
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc01ea2b880, {0x8a8f48, 0xc026836c60}, 0x14, 0xc024ea2040, {0xc01d97a000, 0xbd72, 0xc000})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x29d
main.(*Proc).loop(0xc024ea2280)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x36f
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:300 +0x157d

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/06/03 20:19 linux-4.19.y 3f8a27f9e27b eee80d3c .config console log report info ci2-linux-4-19 panic: runtime error: index out of range [ADDR] with length NUM
* Struck through repros no longer work on HEAD.