Extracting prog: 58.284171569s
Minimizing prog: 7m22.473794768s
Simplifying prog options: 0s
Extracting C: 33.392005502s
Simplifying C: 6m18.101559844s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xffffffc0, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
syz_emit_ethernet(0x2df, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xffffffc0, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)

program did not crash
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xffffffc0, 0x4)
syz_emit_ethernet(0x2df, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

program did not crash
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
syz_emit_ethernet(0x2df, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

program did not crash
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
detailed listing:
executing program 0:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0xffffffc0, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
syz_emit_ethernet(0x2df, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

program did not crash
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
syz_emit_ethernet(0x2df, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

program did not crash
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xffffffc0, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
syz_emit_ethernet(0x2df, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

program did not crash
testing program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xffffffc0, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
syz_emit_ethernet(0x2df, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m3.152912559s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
simplifying C reproducer
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program did not crash
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program did not crash
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
testing compiled C program (duration=1m3.152912559s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-setsockopt$packet_rx_ring-syz_emit_ethernet
program crashed: panic: runtime error: slice bounds out of range [NUM:NUM]
reproducing took 15m12.251545303s
repro crashed as (corrupted=false):
panic: runtime error: slice bounds out of range [2:0]

goroutine 127 gp=0xc001091880 m=20 mp=0xc000750e08 [running]:
panic({0x1dcfc80?, 0xc00089c210?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000a023d0 sp=0xc000a02320 pc=0x478708
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x74 fp=0xc000a02410 sp=0xc000a023d0 pc=0x43abd4
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0xc000a02538, {0xc00095f140, 0x10, 0x40})
	bazel-out/k8-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0xaaf fp=0xc000a024e0 sp=0xc000a02410 pc=0x79416f
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0xc0003ec288, {{0xc000eade30, 0xc000eade30}, 0x2d1}, 0x10, 0x10, 0x2d1, 0xc000eade00)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x486 fp=0xc000a025e8 sp=0xc000a024e0 pc=0x10c3d86
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0xc0003ec288, 0x2, 0x0, 0xc000a36dc0)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x8b3 fp=0xc000a02cf0 sp=0xc000a025e8 pc=0x10c1933
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0xc000a421e0, 0x2, 0x0, 0xc000a36dc0)
	pkg/tcpip/transport/packet/endpoint.go:489 +0x1ef fp=0xc000a02d70 sp=0xc000a02cf0 pc=0x10e47af
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x20d2100, 0xc000a421e0})
	pkg/tcpip/stack/nic.go:826 +0x392 fp=0xc000a02e58 sp=0xc000a02d70 pc=0xecb572
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0xc000ead950, 0xc000a02f60)
	pkg/tcpip/stack/nic.go:147 +0x143 fp=0xc000a02ee0 sp=0xc000a02e58 pc=0xec5583
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0xc000438488, 0x0, 0xc000a36b40)
	pkg/tcpip/stack/nic.go:841 +0x2e7 fp=0xc000a02fa8 sp=0xc000a02ee0 pc=0xecb187
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0xc000234aa0, 0x0, 0xc000a36b40)
	pkg/tcpip/link/nested/nested.go:71 +0xc2 fp=0xc000a02ff0 sp=0xc000a02fa8 pc=0x11ebc22
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc000234aa0, 0x0, 0xc000a36b40)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x4c fp=0xc000a03018 sp=0xc000a02ff0 pc=0x11ee9cc
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc000f17920, 0x0, 0xc000a36b40)
	pkg/tcpip/link/channel/channel.go:208 +0xc2 fp=0xc000a03058 sp=0xc000a03018 pc=0x11f4362
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc0001e2ae8, 0xc000eadb60)
	pkg/tcpip/link/tun/device.go:250 +0x806 fp=0xc000a03240 sp=0xc000a03058 pc=0x11f8826
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc0001e2a80, {0x20f3c60, 0xc0006cc588}, {{0x20ea4d8, 0xc000fcf008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x592 fp=0xc000a03378 sp=0xc000a03240 pc=0x177a0f2
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc0001e2a80, {0x20f3c60, 0xc0006cc588}, {{0x20ea4d8, 0xc000fcf008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x145 fp=0xc000a03448 sp=0xc000a03378 pc=0xb151c5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc0006cc588, 0xc0001e2a80, {{0x20ea4d8, 0xc000fcf008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0xa5 fp=0xc000a03560 sp=0xc000a03448 pc=0x12c1dc5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc0006cc588, 0x4afb8f?, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x38f fp=0xc000a036e8 sp=0xc000a03560 pc=0x12c12cf
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0006cc588, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/kernel/task_syscall.go:143 +0xb9f fp=0xc000a03998 sp=0xc000a036e8 pc=0xffe01f
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0006cc588, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/kernel/task_syscall.go:323 +0x85 fp=0xc000a03a40 sp=0xc000a03998 pc=0x1000145
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0006cc588, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/kernel/task_syscall.go:283 +0xc7 fp=0xc000a03ab0 sp=0xc000a03a40 pc=0xfffa67
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0006cc588)
	pkg/sentry/kernel/task_syscall.go:258 +0x54a fp=0xc000a03bd0 sp=0xc000a03ab0 pc=0xfff5ca
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0006cc588?, 0xc0006cc588)
	pkg/sentry/kernel/task_run.go:269 +0x2275 fp=0xc000a03e78 sp=0xc000a03bd0 pc=0xfe9e35
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0006cc588, 0xd)
	pkg/sentry/kernel/task_run.go:97 +0x41b fp=0xc000a03fb0 sp=0xc000a03e78 pc=0xfe717b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x45 fp=0xc000a03fe0 sp=0xc000a03fb0 pc=0xffb925
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000a03fe8 sp=0xc000a03fe0 pc=0x481a61
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 238
	pkg/sentry/kernel/task_start.go:412 +0x185

final repro crashed as (corrupted=false):
panic: runtime error: slice bounds out of range [2:0]

goroutine 127 gp=0xc001091880 m=20 mp=0xc000750e08 [running]:
panic({0x1dcfc80?, 0xc00089c210?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000a023d0 sp=0xc000a02320 pc=0x478708
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x74 fp=0xc000a02410 sp=0xc000a023d0 pc=0x43abd4
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0xc000a02538, {0xc00095f140, 0x10, 0x40})
	bazel-out/k8-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0xaaf fp=0xc000a024e0 sp=0xc000a02410 pc=0x79416f
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0xc0003ec288, {{0xc000eade30, 0xc000eade30}, 0x2d1}, 0x10, 0x10, 0x2d1, 0xc000eade00)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x486 fp=0xc000a025e8 sp=0xc000a024e0 pc=0x10c3d86
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0xc0003ec288, 0x2, 0x0, 0xc000a36dc0)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x8b3 fp=0xc000a02cf0 sp=0xc000a025e8 pc=0x10c1933
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0xc000a421e0, 0x2, 0x0, 0xc000a36dc0)
	pkg/tcpip/transport/packet/endpoint.go:489 +0x1ef fp=0xc000a02d70 sp=0xc000a02cf0 pc=0x10e47af
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x20d2100, 0xc000a421e0})
	pkg/tcpip/stack/nic.go:826 +0x392 fp=0xc000a02e58 sp=0xc000a02d70 pc=0xecb572
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0xc000ead950, 0xc000a02f60)
	pkg/tcpip/stack/nic.go:147 +0x143 fp=0xc000a02ee0 sp=0xc000a02e58 pc=0xec5583
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0xc000438488, 0x0, 0xc000a36b40)
	pkg/tcpip/stack/nic.go:841 +0x2e7 fp=0xc000a02fa8 sp=0xc000a02ee0 pc=0xecb187
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0xc000234aa0, 0x0, 0xc000a36b40)
	pkg/tcpip/link/nested/nested.go:71 +0xc2 fp=0xc000a02ff0 sp=0xc000a02fa8 pc=0x11ebc22
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc000234aa0, 0x0, 0xc000a36b40)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x4c fp=0xc000a03018 sp=0xc000a02ff0 pc=0x11ee9cc
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc000f17920, 0x0, 0xc000a36b40)
	pkg/tcpip/link/channel/channel.go:208 +0xc2 fp=0xc000a03058 sp=0xc000a03018 pc=0x11f4362
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc0001e2ae8, 0xc000eadb60)
	pkg/tcpip/link/tun/device.go:250 +0x806 fp=0xc000a03240 sp=0xc000a03058 pc=0x11f8826
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc0001e2a80, {0x20f3c60, 0xc0006cc588}, {{0x20ea4d8, 0xc000fcf008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x592 fp=0xc000a03378 sp=0xc000a03240 pc=0x177a0f2
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc0001e2a80, {0x20f3c60, 0xc0006cc588}, {{0x20ea4d8, 0xc000fcf008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x145 fp=0xc000a03448 sp=0xc000a03378 pc=0xb151c5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc0006cc588, 0xc0001e2a80, {{0x20ea4d8, 0xc000fcf008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0xa5 fp=0xc000a03560 sp=0xc000a03448 pc=0x12c1dc5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc0006cc588, 0x4afb8f?, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x38f fp=0xc000a036e8 sp=0xc000a03560 pc=0x12c12cf
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0006cc588, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/kernel/task_syscall.go:143 +0xb9f fp=0xc000a03998 sp=0xc000a036e8 pc=0xffe01f
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0006cc588, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/kernel/task_syscall.go:323 +0x85 fp=0xc000a03a40 sp=0xc000a03998 pc=0x1000145
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0006cc588, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x7eaad0ad1cb8}})
	pkg/sentry/kernel/task_syscall.go:283 +0xc7 fp=0xc000a03ab0 sp=0xc000a03a40 pc=0xfffa67
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0006cc588)
	pkg/sentry/kernel/task_syscall.go:258 +0x54a fp=0xc000a03bd0 sp=0xc000a03ab0 pc=0xfff5ca
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0006cc588?, 0xc0006cc588)
	pkg/sentry/kernel/task_run.go:269 +0x2275 fp=0xc000a03e78 sp=0xc000a03bd0 pc=0xfe9e35
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0006cc588, 0xd)
	pkg/sentry/kernel/task_run.go:97 +0x41b fp=0xc000a03fb0 sp=0xc000a03e78 pc=0xfe717b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x45 fp=0xc000a03fe0 sp=0xc000a03fb0 pc=0xffb925
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000a03fe8 sp=0xc000a03fe0 pc=0x481a61
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 238
	pkg/sentry/kernel/task_start.go:412 +0x185