Extracting prog: 15m20.695580968s Minimizing prog: 108.94µs Simplifying prog options: 39m21.335980454s Extracting C: 18m35.603130418s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPSET_CMD_CREATE detailed listing: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 16m0s testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPSET_CMD_CREATE detailed listing: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference single: successfully extracted reproducer found reproducer with 1 syscalls minimizing guilty program extracting C reproducer testing compiled C program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPSET_CMD_CREATE program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPSET_CMD_CREATE detailed listing: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPSET_CMD_CREATE detailed listing: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) program did not crash reproducing took 1h13m17.63482177s repro crashed as (corrupted=false): panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x56e068] goroutine 24 [running]: github.com/google/syzkaller/prog.(*Prog).serialize(0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/encoding.go:40 +0x80 github.com/google/syzkaller/prog.(*Prog).Serialize(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/encoding.go:30 github.com/google/syzkaller/pkg/rpcserver.(*Runner).handleExecResult(0xc00025a6c0, 0xc0005221e0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/runner.go:439 +0x17c github.com/google/syzkaller/pkg/rpcserver.(*Runner).ConnectionLoop(0xc00025a6c0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/runner.go:203 +0x320 github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop(0xc0021f8200, 0xc00025a6c0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:356 +0xdc github.com/google/syzkaller/pkg/rpcserver.(*server).handleRunnerConn(0xc0021f8200, 0xc00025a6c0, 0xc0014f4550) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:294 +0x360 github.com/google/syzkaller/pkg/rpcserver.(*server).handleConn(0xc0021f8200, 0xc0014f4550) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:261 +0x254 github.com/google/syzkaller/pkg/flatrpc.ListenAndServe.func1.1() /syzkaller/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:55 +0x128 created by github.com/google/syzkaller/pkg/flatrpc.ListenAndServe.func1 in goroutine 21 /syzkaller/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:52 +0xb0 final repro crashed as (corrupted=false): panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x56e068] goroutine 24 [running]: github.com/google/syzkaller/prog.(*Prog).serialize(0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/encoding.go:40 +0x80 github.com/google/syzkaller/prog.(*Prog).Serialize(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/encoding.go:30 github.com/google/syzkaller/pkg/rpcserver.(*Runner).handleExecResult(0xc00025a6c0, 0xc0005221e0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/runner.go:439 +0x17c github.com/google/syzkaller/pkg/rpcserver.(*Runner).ConnectionLoop(0xc00025a6c0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/runner.go:203 +0x320 github.com/google/syzkaller/pkg/rpcserver.(*server).connectionLoop(0xc0021f8200, 0xc00025a6c0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:356 +0xdc github.com/google/syzkaller/pkg/rpcserver.(*server).handleRunnerConn(0xc0021f8200, 0xc00025a6c0, 0xc0014f4550) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:294 +0x360 github.com/google/syzkaller/pkg/rpcserver.(*server).handleConn(0xc0021f8200, 0xc0014f4550) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/rpcserver.go:261 +0x254 github.com/google/syzkaller/pkg/flatrpc.ListenAndServe.func1.1() /syzkaller/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:55 +0x128 created by github.com/google/syzkaller/pkg/flatrpc.ListenAndServe.func1 in goroutine 21 /syzkaller/gopath/src/github.com/google/syzkaller/pkg/flatrpc/conn.go:52 +0xb0