syzbot

sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=@newtclass={0x40, 0x28, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0x6}, {0xfff2, 0xf}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xff, 0x81}}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}]}, 0x40}}, 0x40000)
panic: runtime error: slice bounds out of range [2147484416:16777128]

goroutine 28 [running]:
github.com/google/syzkaller/pkg/ipc.readUint32Array(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:481
github.com/google/syzkaller/pkg/ipc.(*Env).parseOutput(0x6356a50, 0x10d7c000, 0xca86ef0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:362 +0xae8
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0x6356a50, 0xca86ef0, 0x10d7c000)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:292 +0x39c
main.(*Proc).executeRaw(0xdde0040, 0xca86ef0, 0x10d7c000, 0x8)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:321 +0x178
main.(*Proc).executeAndCollide(0xdde0040, 0x1013748, 0x10d72460, 0x0, 0x5)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x9c
main.(*Proc).smashInput(0xdde0040, 0xa58bf00)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:221 +0x1a0
main.(*Proc).loop(0xdde0040)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x150
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:300 +0x1710