Extracting prog: 50.262280262s Minimizing prog: 1m0.112100733s Simplifying prog options: 0s Extracting C: 12.003736717s Simplifying C: 1m7.033197093s extracting reproducer from 563 programs testing a last program of every proc single: executing 513 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-timer_settime-pipe2$9p-write$P9_RSETATTR-write$P9_RREMOVE-close-socket$unix-ioctl$SIOCGSTAMP-clock_gettime-clock_gettime-timer_settime-syz_open_procfs detailed listing: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RREMOVE(r2, 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCGSTAMP(r3, 0x8946, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000780)={{r4, r5+60000000}, {0x0, 0x3938700}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score\x00') program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) program crashed: panic: runtime error: index out of range [NUM] with length NUM single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet detailed listing: executing program 0: socket$packet(0x11, 0x2, 0x300) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$packet_int detailed listing: executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM simplifying C reproducer testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int program crashed: panic: runtime error: index out of range [NUM] with length NUM reproducing took 3m9.411368205s repro crashed as (corrupted=false): panic: runtime error: index out of range [3] with length 0 goroutine 278 gp=0xc000716fc0 m=20 mp=0xc000712e08 [running]: panic({0x12b9e20?, 0xc0007340d8?}) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000317768 sp=0xc0003176b8 pc=0x4740c8 runtime.goPanicIndex(0x3, 0x0) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:115 +0x74 fp=0xc0003177a8 sp=0xc000317768 pc=0x438b74 encoding/binary.littleEndian.Uint32(...) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/encoding/binary/binary.go:87 gvisor.dev/gvisor/pkg/sentry/socket/netstack.setSockOptPacket(0x7fd65c338f18?, {0xc0003178e0?, 0x40e7ff?}, {0x7fd65c338f18?, 0xc00086a000?}, 0x1?, {0xc0007ac41c?, 0xc00086c000?, 0x0?}) pkg/sentry/socket/netstack/netstack.go:2788 +0x265 fp=0xc000317898 sp=0xc0003177a8 pc=0xba61c5 gvisor.dev/gvisor/pkg/sentry/socket/netstack.SetSockOpt(0x46e47a?, {0x15e04f8?, 0xc00086c000?}, {0x7fd65c338f18?, 0xc00086a000?}, 0xa3ea48?, 0xc000317988?, {0xc0007ac41c, 0x0, 0x90}) pkg/sentry/socket/netstack/netstack.go:1896 +0x148 fp=0xc0003178f0 sp=0xc000317898 pc=0xba33e8 gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).SetSockOpt(0xc00086c000, 0xc0007ab908?, 0x107?, 0xc?, {0xc0007ac41c, 0x0?, 0x90?}) pkg/sentry/socket/netstack/netstack.go:634 +0x225 fp=0xc000317998 sp=0xc0003178f0 pc=0xb9d5a5 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SetSockOpt(0xc0007ab908, 0xc000317b10?, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/syscalls/linux/sys_socket.go:551 +0x246 fp=0xc000317a78 sp=0xc000317998 pc=0xc2b8c6 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0007ab908, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc000317ca8 sp=0xc000317a78 pc=0xa77877 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0007ab908, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc000317d00 sp=0xc000317ca8 pc=0xa789e5 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0007ab908, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc000317d50 sp=0xc000317d00 pc=0xa786e5 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000671790?) pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc000317e28 sp=0xc000317d50 pc=0xa78465 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00023a1b0?, 0xc0007ab908) pkg/sentry/kernel/task_run.go:269 +0xf17 fp=0xc000317f30 sp=0xc000317e28 pc=0xa6dc57 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0007ab908, 0xa) pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc000317fc0 sp=0xc000317f30 pc=0xa6c6b4 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc000317fe0 sp=0xc000317fc0 pc=0xa76285 runtime.goexit({}) src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000317fe8 sp=0xc000317fe0 pc=0x47d1a1 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 306 pkg/sentry/kernel/task_start.go:412 +0xc5 final repro crashed as (corrupted=false): panic: runtime error: index out of range [3] with length 0 goroutine 278 gp=0xc000716fc0 m=20 mp=0xc000712e08 [running]: panic({0x12b9e20?, 0xc0007340d8?}) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000317768 sp=0xc0003176b8 pc=0x4740c8 runtime.goPanicIndex(0x3, 0x0) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:115 +0x74 fp=0xc0003177a8 sp=0xc000317768 pc=0x438b74 encoding/binary.littleEndian.Uint32(...) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/encoding/binary/binary.go:87 gvisor.dev/gvisor/pkg/sentry/socket/netstack.setSockOptPacket(0x7fd65c338f18?, {0xc0003178e0?, 0x40e7ff?}, {0x7fd65c338f18?, 0xc00086a000?}, 0x1?, {0xc0007ac41c?, 0xc00086c000?, 0x0?}) pkg/sentry/socket/netstack/netstack.go:2788 +0x265 fp=0xc000317898 sp=0xc0003177a8 pc=0xba61c5 gvisor.dev/gvisor/pkg/sentry/socket/netstack.SetSockOpt(0x46e47a?, {0x15e04f8?, 0xc00086c000?}, {0x7fd65c338f18?, 0xc00086a000?}, 0xa3ea48?, 0xc000317988?, {0xc0007ac41c, 0x0, 0x90}) pkg/sentry/socket/netstack/netstack.go:1896 +0x148 fp=0xc0003178f0 sp=0xc000317898 pc=0xba33e8 gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).SetSockOpt(0xc00086c000, 0xc0007ab908?, 0x107?, 0xc?, {0xc0007ac41c, 0x0?, 0x90?}) pkg/sentry/socket/netstack/netstack.go:634 +0x225 fp=0xc000317998 sp=0xc0003178f0 pc=0xb9d5a5 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SetSockOpt(0xc0007ab908, 0xc000317b10?, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/syscalls/linux/sys_socket.go:551 +0x246 fp=0xc000317a78 sp=0xc000317998 pc=0xc2b8c6 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0007ab908, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc000317ca8 sp=0xc000317a78 pc=0xa77877 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0007ab908, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc000317d00 sp=0xc000317ca8 pc=0xa789e5 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0007ab908, 0x36, {{0x3}, {0x107}, {0xc}, {0x0}, {0x0}, {0x7f9b7448ce58}}) pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc000317d50 sp=0xc000317d00 pc=0xa786e5 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000671790?) pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc000317e28 sp=0xc000317d50 pc=0xa78465 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00023a1b0?, 0xc0007ab908) pkg/sentry/kernel/task_run.go:269 +0xf17 fp=0xc000317f30 sp=0xc000317e28 pc=0xa6dc57 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0007ab908, 0xa) pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc000317fc0 sp=0xc000317f30 pc=0xa6c6b4 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc000317fe0 sp=0xc000317fc0 pc=0xa76285 runtime.goexit({}) src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000317fe8 sp=0xc000317fe0 pc=0x47d1a1 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 306 pkg/sentry/kernel/task_start.go:412 +0xc5