Extracting prog: 24.808531492s
Minimizing prog: 3m56.491590745s
Simplifying prog options: 0s
Extracting C: 11.451837323s
Simplifying C: 1m53.427781577s


extracting reproducer from 102 programs
testing a last program of every proc
single: executing 52 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4-connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0) (async)
ptrace(0x4206, 0x0) (async)
wait4(0x0, 0x0, 0x8, 0x0) (async)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4-connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0) (async)
ptrace(0x4206, 0x0) (async)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4-connect$inet6-read$FUSE-waitid-syz_emit_ethernet
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0) (async)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4-connect$inet6-read$FUSE-waitid
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0) (async)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4-connect$inet6-read$FUSE
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4-connect$inet6
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace-wait4
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet-ptrace
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)
ptrace(0x4206, 0x0)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid-syz_emit_ethernet
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-waitid
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
waitid(0x0, r0, &(0x7f0000000000), 0x8, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-read$FUSE-syz_emit_ethernet
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-syz_emit_ethernet
detailed listing:
executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb0010fd3a2b0000000000000000000000ffffac14142efe8000000000000000000000000000aa3b00044168000000000000000008"], 0x0)

program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x46, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: panic: bytes only has space for NUM bytes but need space for NUM bytes (length = NUM) for extension header with id = NUM
reproducing took 6m26.179760278s
repro crashed as (corrupted=false):
panic: bytes only has space for 6 bytes but need space for 1366 bytes (length = 170) for extension header with id = 253

goroutine 259 gp=0xc00038c380 m=15 mp=0xc000910708 [running]:
panic({0x12338e0?, 0xc0001f8870?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc00077cb00 sp=0xc00077ca50 pc=0x473fe8
gvisor.dev/gvisor/pkg/tcpip/header.(*IPv6PayloadIterator).nextHeaderData(0xc000907a10, 0x0, {0xc0008e46ba, 0x6, 0x6})
	pkg/tcpip/header/ipv6_extension_headers.go:720 +0x7a9 fp=0xc00077cc40 sp=0xc00077cb00 pc=0xa25e89
gvisor.dev/gvisor/pkg/tcpip/header.(*IPv6PayloadIterator).Next(0xc000907a10)
	pkg/tcpip/header/ipv6_extension_headers.go:645 +0x313 fp=0xc00077ccd8 sp=0xc00077cc40 pc=0xa25553
gvisor.dev/gvisor/pkg/tcpip/header/parse.IPv6(0xc000886c80)
	pkg/tcpip/header/parse/parse.go:97 +0x25e fp=0xc00077ce80 sp=0xc00077ccd8 pc=0xb9109e
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*protocol).Parse(0x10?, 0x0?)
	pkg/tcpip/network/ipv6/ipv6.go:2661 +0x25 fp=0xc00077ce98 sp=0xc00077ce80 pc=0xc2c9e5
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*protocol).parseAndValidate(0xc0006b4480, 0xc000886c80)
	pkg/tcpip/network/ipv6/ipv6.go:2623 +0x2b fp=0xc00077cef0 sp=0xc00077ce98 pc=0xc2c72b
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0xc0008c5508, 0xc000886c80)
	pkg/tcpip/network/ipv6/ipv6.go:1101 +0x117 fp=0xc00077d448 sp=0xc00077cef0 pc=0xc21117
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0xc000898488, 0x86dd, 0xc000886c80)
	pkg/tcpip/stack/nic.go:774 +0x20a fp=0xc00077d480 sp=0xc00077d448 pc=0xa6126a
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0xc0008b6d70, 0x86dd, 0xc000886c80)
	pkg/tcpip/link/nested/nested.go:61 +0xb0 fp=0xc00077d4c0 sp=0xc00077d480 pc=0xc4b5d0
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc0008b6d70, 0x86dd, 0xc000886c80)
	pkg/tcpip/link/packetsocket/packetsocket.go:47 +0x45 fp=0xc00077d4e8 sp=0xc00077d4c0 pc=0xc4d4a5
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc00021b920, 0x86dd, 0xc000886c80)
	pkg/tcpip/link/channel/channel.go:207 +0x86 fp=0xc00077d528 sp=0xc00077d4e8 pc=0xc51306
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc00060a968, 0xc0009078f0)
	pkg/tcpip/link/tun/device.go:250 +0x755 fp=0xc00077d658 sp=0xc00077d528 pc=0xc54375
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc00038c380?, {0x16ccf20, 0xc000955208}, {{0x16c4718, 0xc000bdf008}, {0x0, 0x1, 0x20000dc0, 0x46}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x36b fp=0xc00077d718 sp=0xc00077d658 pc=0xf934ab
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc00060a900, {0x16ccf20, 0xc000955208}, {{0x16c4718, 0xc000bdf008}, {0x0, 0x1, 0x20000dc0, 0x46}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x9f fp=0xc00077d798 sp=0xc00077d718 pc=0x81f69f
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc000955208, 0xc00060a900, {{0x16c4718, 0xc000bdf008}, {0x0, 0x1, 0x20000dc0, 0x46}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x85 fp=0xc00077d938 sp=0xc00077d798 pc=0xce2925
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc000955208, 0xc00077dad0?, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x22b fp=0xc00077da78 sp=0xc00077d938 pc=0xce210b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000955208, 0x1, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x80b fp=0xc00077dca8 sp=0xc00077da78 pc=0xb1a22b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000955208, 0x1, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x4e fp=0xc00077dd00 sp=0xc00077dca8 pc=0xb1b7ce
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000955208, 0x1, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x7d fp=0xc00077dd50 sp=0xc00077dd00 pc=0xb1b37d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0006548f0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x349 fp=0xc00077de28 sp=0xc00077dd50 pc=0xb1b069
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00065a090?, 0xc000955208)
	pkg/sentry/kernel/task_run.go:269 +0x1325 fp=0xc00077df38 sp=0xc00077de28 pc=0xb0e7c5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000955208, 0x8)
	pkg/sentry/kernel/task_run.go:97 +0x27d fp=0xc00077dfc0 sp=0xc00077df38 pc=0xb0cddd
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:411 +0x25 fp=0xc00077dfe0 sp=0xc00077dfc0 pc=0xb187a5
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00077dfe8 sp=0xc00077dfe0 pc=0x47d0c1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 275
	pkg/sentry/kernel/task_start.go:411 +0xd9

final repro crashed as (corrupted=false):
panic: bytes only has space for 6 bytes but need space for 1366 bytes (length = 170) for extension header with id = 253

goroutine 259 gp=0xc00038c380 m=15 mp=0xc000910708 [running]:
panic({0x12338e0?, 0xc0001f8870?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc00077cb00 sp=0xc00077ca50 pc=0x473fe8
gvisor.dev/gvisor/pkg/tcpip/header.(*IPv6PayloadIterator).nextHeaderData(0xc000907a10, 0x0, {0xc0008e46ba, 0x6, 0x6})
	pkg/tcpip/header/ipv6_extension_headers.go:720 +0x7a9 fp=0xc00077cc40 sp=0xc00077cb00 pc=0xa25e89
gvisor.dev/gvisor/pkg/tcpip/header.(*IPv6PayloadIterator).Next(0xc000907a10)
	pkg/tcpip/header/ipv6_extension_headers.go:645 +0x313 fp=0xc00077ccd8 sp=0xc00077cc40 pc=0xa25553
gvisor.dev/gvisor/pkg/tcpip/header/parse.IPv6(0xc000886c80)
	pkg/tcpip/header/parse/parse.go:97 +0x25e fp=0xc00077ce80 sp=0xc00077ccd8 pc=0xb9109e
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*protocol).Parse(0x10?, 0x0?)
	pkg/tcpip/network/ipv6/ipv6.go:2661 +0x25 fp=0xc00077ce98 sp=0xc00077ce80 pc=0xc2c9e5
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*protocol).parseAndValidate(0xc0006b4480, 0xc000886c80)
	pkg/tcpip/network/ipv6/ipv6.go:2623 +0x2b fp=0xc00077cef0 sp=0xc00077ce98 pc=0xc2c72b
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0xc0008c5508, 0xc000886c80)
	pkg/tcpip/network/ipv6/ipv6.go:1101 +0x117 fp=0xc00077d448 sp=0xc00077cef0 pc=0xc21117
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0xc000898488, 0x86dd, 0xc000886c80)
	pkg/tcpip/stack/nic.go:774 +0x20a fp=0xc00077d480 sp=0xc00077d448 pc=0xa6126a
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0xc0008b6d70, 0x86dd, 0xc000886c80)
	pkg/tcpip/link/nested/nested.go:61 +0xb0 fp=0xc00077d4c0 sp=0xc00077d480 pc=0xc4b5d0
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc0008b6d70, 0x86dd, 0xc000886c80)
	pkg/tcpip/link/packetsocket/packetsocket.go:47 +0x45 fp=0xc00077d4e8 sp=0xc00077d4c0 pc=0xc4d4a5
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc00021b920, 0x86dd, 0xc000886c80)
	pkg/tcpip/link/channel/channel.go:207 +0x86 fp=0xc00077d528 sp=0xc00077d4e8 pc=0xc51306
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc00060a968, 0xc0009078f0)
	pkg/tcpip/link/tun/device.go:250 +0x755 fp=0xc00077d658 sp=0xc00077d528 pc=0xc54375
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc00038c380?, {0x16ccf20, 0xc000955208}, {{0x16c4718, 0xc000bdf008}, {0x0, 0x1, 0x20000dc0, 0x46}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x36b fp=0xc00077d718 sp=0xc00077d658 pc=0xf934ab
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc00060a900, {0x16ccf20, 0xc000955208}, {{0x16c4718, 0xc000bdf008}, {0x0, 0x1, 0x20000dc0, 0x46}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x9f fp=0xc00077d798 sp=0xc00077d718 pc=0x81f69f
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc000955208, 0xc00060a900, {{0x16c4718, 0xc000bdf008}, {0x0, 0x1, 0x20000dc0, 0x46}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x85 fp=0xc00077d938 sp=0xc00077d798 pc=0xce2925
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc000955208, 0xc00077dad0?, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x22b fp=0xc00077da78 sp=0xc00077d938 pc=0xce210b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000955208, 0x1, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x80b fp=0xc00077dca8 sp=0xc00077da78 pc=0xb1a22b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000955208, 0x1, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x4e fp=0xc00077dd00 sp=0xc00077dca8 pc=0xb1b7ce
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000955208, 0x1, {{0xc8}, {0x20000dc0}, {0x46}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x7d fp=0xc00077dd50 sp=0xc00077dd00 pc=0xb1b37d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0006548f0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x349 fp=0xc00077de28 sp=0xc00077dd50 pc=0xb1b069
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00065a090?, 0xc000955208)
	pkg/sentry/kernel/task_run.go:269 +0x1325 fp=0xc00077df38 sp=0xc00077de28 pc=0xb0e7c5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000955208, 0x8)
	pkg/sentry/kernel/task_run.go:97 +0x27d fp=0xc00077dfc0 sp=0xc00077df38 pc=0xb0cddd
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:411 +0x25 fp=0xc00077dfe0 sp=0xc00077dfc0 pc=0xb187a5
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc00077dfe8 sp=0xc00077dfe0 pc=0x47d0c1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 275
	pkg/sentry/kernel/task_start.go:411 +0xd9